Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B4FD31B6797311EFABA1ED3DC4F9AE02.roa
File:                     B4FD31B6797311EFABA1ED3DC4F9AE02.roa (raw, json)
Hash identifier:          mmSYobmf7uRaQY8K76TCBWAdZFU682HEKISFQgvZyGY=
Subject key identifier:   3C:3B:78:C6:2E:43:46:CC:8F:09:62:94:FF:E5:62:0C:CC:B7:D4:D3
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2C4B
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B4FD31B6797311EFABA1ED3DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:46:55 +0000
ROA not before:           Thu 08 May 2025 15:55:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153241
IP address blocks:        160.187.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11339 (0x2c4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:55:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c1de-8dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2f:aa:0c:35:ed:66:a6:eb:d9:19:25:53:43:
                    c4:47:d1:f8:e0:99:20:f6:66:f1:3c:0a:f0:03:32:
                    1e:11:b8:30:c5:22:d4:4d:fe:ee:81:a4:cf:a1:76:
                    f3:f8:0b:0a:1d:72:91:e0:3c:cb:f7:f5:c9:e8:47:
                    f4:eb:30:a3:f8:3a:07:33:0d:fb:12:63:4e:16:22:
                    b5:db:d3:20:18:6d:b8:ed:1c:4b:ff:9f:a1:91:98:
                    38:f4:09:61:3f:3d:a2:91:34:89:4f:43:d3:c7:ff:
                    53:a8:72:fe:85:60:46:97:34:bd:7a:43:26:72:3f:
                    ea:0d:94:29:0e:bc:c2:a7:3f:78:cc:00:a6:ba:1d:
                    08:0e:6c:c1:fa:9d:40:06:32:f9:c5:6c:93:af:c4:
                    e7:02:20:8b:ce:c6:f7:18:b4:5c:2b:b8:69:db:d0:
                    55:a6:65:cf:b6:4a:8e:56:69:f5:cf:1e:7d:5b:fd:
                    20:8e:38:2d:db:bf:55:4a:a5:14:d5:d3:a6:27:21:
                    27:af:e7:a2:e7:b0:b9:53:9c:df:ab:8a:97:3f:8b:
                    90:57:44:29:4c:83:8d:16:aa:93:af:79:68:9f:d7:
                    47:6d:ce:6f:23:22:0e:f9:78:48:61:17:29:aa:66:
                    3e:98:74:8e:b3:8b:16:55:c3:7b:01:23:7f:d0:e2:
                    46:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3B:78:C6:2E:43:46:CC:8F:09:62:94:FF:E5:62:0C:CC:B7:D4:D3
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B4FD31B6797311EFABA1ED3DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:59:10:e7:30:51:9a:e2:f3:19:5e:08:61:4c:a7:c2:48:0e:
         b1:9e:6b:0c:01:1e:97:50:3d:f6:9d:81:b8:cf:ba:30:ed:41:
         f1:96:18:1c:14:4b:35:31:08:9e:8b:38:57:61:85:87:12:14:
         6e:6b:48:7f:a3:1f:69:43:18:9b:1d:9c:ff:a6:d6:7e:4f:c0:
         88:d1:5d:4a:62:62:e0:9f:fb:af:23:dc:50:b5:6e:cd:e7:48:
         ec:da:27:eb:99:64:8f:57:42:d2:06:90:53:9f:aa:5a:48:5f:
         0a:96:f3:ca:ec:57:52:cb:8a:8a:d3:e7:c6:d3:a1:ed:cc:02:
         4e:7c:92:aa:f3:b2:3f:a7:f3:e7:80:47:50:fb:fc:b3:19:4e:
         59:e9:ce:d8:e6:47:a0:ae:fd:f0:99:8d:8f:3d:15:d2:d0:43:
         60:6d:92:50:43:b5:21:d9:25:c8:3f:48:5a:ef:2f:a0:32:6e:
         95:8b:c7:41:37:88:ab:7e:6e:25:43:66:91:49:7a:da:71:2a:
         da:11:d0:4b:e7:de:8a:3e:f6:8a:f0:a4:73:a6:7a:6f:25:cb:
         4b:47:f2:25:ec:62:6b:7f:e8:c3:cf:ac:cc:e3:08:28:cd:c6:
         30:dd:e6:4c:dc:57:fa:97:63:e0:c5:4d:69:f1:87:c6:57:61:
         76:7c:66:44
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTA4MTU1NTA3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzFkZS04ZGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAli+qDDXtZqbr2RklU0PER9H44Jkg9mbxPArwAzIeEbgwxSLUTf7ugaTPoXbz
+AsKHXKR4DzL9/XJ6Ef06zCj+DoHMw37EmNOFiK129MgGG247RxL/5+hkZg49Alh
Pz2ikTSJT0PTx/9TqHL+hWBGlzS9ekMmcj/qDZQpDrzCpz94zACmuh0IDmzB+p1A
BjL5xWyTr8TnAiCLzsb3GLRcK7hp29BVpmXPtkqOVmn1zx59W/0gjjgt279VSqUU
1dOmJyEnr+ei57C5U5zfq4qXP4uQV0QpTIONFqqTr3lon9dHbc5vIyIO+XhIYRcp
qmY+mHSOs4sWVcN7ASN/0OJGmQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDw7eMYu
Q0bMjwlilP/lYgzMt9TTMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQjRGRDMxQjY3
OTczMTFFRkFCQTFFRDNEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoLtMMA0GCSqGSIb3DQEBCwUAA4IBAQCuWRDnMFGa4vMZXghhTKfC
SA6xnmsMAR6XUD32nYG4z7ow7UHxlhgcFEs1MQieizhXYYWHEhRua0h/ox9pQxib
HZz/ptZ+T8CI0V1KYmLgn/uvI9xQtW7N50js2ifrmWSPV0LSBpBTn6paSF8KlvPK
7FdSy4qK0+fG06HtzAJOfJKq87I/p/PngEdQ+/yzGU5Z6c7Y5kegrv3wmY2PPRXS
0ENgbZJQQ7Uh2SXIP0ha7y+gMm6Vi8dBN4irfm4lQ2aRSXracSraEdBL596KPvaK
8KRzpnpvJctLR/Il7GJrf+jDz6zM4wgozcYw3eZM3Ff6l2PgxU1p8YfGV2F2fGZE
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:45 2026 by rpki-client