Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/85859ECE427711EF9D064713C4F9AE02.roa
File:                     85859ECE427711EF9D064713C4F9AE02.roa (raw, json)
Hash identifier:          x+JghpJ5wYTEtnpB3XLklM4y3x3MiNN0kaN1otPlUmA=
Subject key identifier:   7B:17:B3:FE:B9:B9:B6:07:3C:EB:13:45:5E:68:EB:99:DF:CE:B0:32
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2C7A
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/85859ECE427711EF9D064713C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:48:03 +0000
ROA not before:           Wed 28 May 2025 11:44:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137083
IP address blocks:        160.25.180.0/23 maxlen: 24
                          165.99.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11386 (0x2c7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 28 11:44:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c222-0f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b4:f7:9e:d3:50:7d:5f:63:50:11:65:75:27:
                    4b:11:1f:b4:a4:53:ae:00:6e:34:0a:2c:81:76:ef:
                    b6:31:79:dc:e8:04:05:49:eb:d0:c7:b2:47:06:5f:
                    01:86:bc:9c:bb:e5:7c:13:6f:a2:6c:04:99:d1:bd:
                    bf:6b:77:eb:e9:e2:10:5d:a7:d4:af:c3:f7:9c:59:
                    ce:90:7e:ba:35:f0:61:d0:14:e4:80:21:6f:a6:84:
                    d4:41:3d:ad:1f:67:16:88:d5:a2:6e:8d:94:2c:95:
                    7d:ab:90:21:99:5d:cc:6d:49:3e:13:50:21:fd:78:
                    0d:38:50:ce:e2:fb:8e:f9:57:06:1c:3c:71:1b:d8:
                    b8:36:56:f3:36:d1:c6:0a:6b:80:19:ae:f3:49:6d:
                    0a:8a:84:24:f3:b4:e6:76:71:b6:73:32:58:a9:59:
                    1e:43:7a:44:6a:5a:f9:84:9c:d8:c6:95:7a:c8:c9:
                    87:74:bc:7b:c1:20:7b:4c:43:6b:d7:86:a5:34:14:
                    24:64:a4:bd:f4:6c:f7:4e:99:fe:e1:aa:1a:7c:43:
                    3e:c3:eb:2c:ac:47:be:48:da:65:f0:c5:03:eb:74:
                    fe:ed:41:2b:86:e9:39:b8:69:f6:ec:16:3a:a0:be:
                    91:a1:7e:da:bf:69:15:0b:2b:2a:31:6f:37:53:70:
                    23:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:17:B3:FE:B9:B9:B6:07:3C:EB:13:45:5E:68:EB:99:DF:CE:B0:32
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/85859ECE427711EF9D064713C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.180.0/23
                  165.99.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:97:19:ee:fa:48:4a:1b:3a:42:ba:6b:2a:2f:20:54:ed:ac:
         6f:fa:ae:52:71:e5:7f:19:28:4f:a1:97:4d:78:1f:e0:e6:52:
         e7:c6:f4:cd:7f:72:ce:1d:f8:ec:54:42:28:65:5c:56:a2:17:
         c2:89:8f:18:d7:8a:7a:02:e5:f5:ef:4f:c1:21:cf:5c:37:ca:
         6c:a7:af:14:8f:1a:db:b3:23:04:51:ee:f4:8b:86:4e:47:51:
         79:17:00:3b:3c:79:52:2f:f6:f0:54:67:e5:4a:ea:ea:a1:51:
         f7:29:09:6a:81:e2:82:54:26:34:e0:2f:ae:b8:d0:6f:5b:24:
         73:16:28:b4:fb:30:63:76:d0:56:1f:09:48:d3:51:47:8e:b7:
         93:99:fc:36:8a:42:9a:89:af:c1:72:4b:92:6f:1f:f8:72:8d:
         2e:69:6d:0d:7c:e2:6c:30:d3:62:ce:a0:a7:e5:79:13:98:c0:
         34:79:96:d7:56:05:b3:7c:c1:90:81:58:ed:07:c7:c4:ca:a4:
         f7:66:cd:06:91:a0:b1:2c:8e:21:07:6d:c9:80:6c:39:ac:98:
         c5:0f:d3:1e:d4:bd:9d:19:c0:32:2f:1d:79:58:fe:7b:32:f4:
         40:ed:9c:e9:86:7e:18:4d:f7:07:30:22:dc:a2:e5:64:d6:49:
         51:3d:a8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:17:15 2026 by rpki-client