Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D61B5A66480A11EF90444C33C4F9AE02.roa
File:                     D61B5A66480A11EF90444C33C4F9AE02.roa (raw, json)
Hash identifier:          H9fOOkwlMXz+RrlvXsVm7+7SLIu8xHNgs6BSmSbD054=
Subject key identifier:   40:BD:A4:55:1F:6F:A4:FE:CF:7E:59:07:10:C4:01:83:EA:06:12:0C
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2D0D
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D61B5A66480A11EF90444C33C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:51:27 +0000
ROA not before:           Mon 09 Feb 2026 06:19:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     17665
IP address blocks:        157.66.45.0/24 maxlen: 24
                          160.25.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11533 (0x2d0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Feb  9 06:19:39 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c2ef-6387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2a:89:09:49:a0:26:f8:35:0b:23:03:80:40:
                    b9:12:fa:f8:2f:5f:3b:c1:74:b1:92:9d:a6:88:91:
                    cf:6e:00:35:21:0f:c8:61:e2:94:fe:7f:28:de:a3:
                    f8:c1:ad:18:d5:a5:97:f5:c6:eb:6a:ae:1a:60:29:
                    c2:38:b2:45:d8:b4:df:31:7a:9e:1c:36:78:64:b6:
                    fe:fa:2b:d1:07:5e:ba:c0:3e:54:fb:0d:8c:93:ed:
                    81:3f:8b:f0:41:64:88:a6:cd:c1:a8:50:8c:b7:53:
                    65:47:0a:5d:99:0e:12:e1:bf:4e:9a:ed:5a:6e:b0:
                    a0:2f:23:80:c5:02:1a:48:c9:39:13:f8:c2:b4:c7:
                    b3:14:0b:be:db:ca:9c:e9:02:aa:e1:c4:b5:39:2c:
                    61:a0:4e:c6:a9:ca:55:7a:81:d1:61:7a:e4:73:57:
                    24:fd:f4:b5:7e:88:d9:8d:01:f5:ab:a4:e0:b5:61:
                    e7:33:e0:df:8a:84:ec:96:ef:8b:28:62:6e:1a:87:
                    a4:a0:2e:9a:ff:93:fc:b5:9c:70:5a:30:6e:d4:be:
                    9d:84:bd:8f:c2:d0:47:4d:11:15:ec:87:c5:8b:1c:
                    9e:88:7f:cf:b4:de:3b:f2:2a:07:e7:f0:b8:63:8e:
                    82:97:38:bc:c5:77:bd:00:4b:8d:c1:37:1a:2c:b5:
                    cd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BD:A4:55:1F:6F:A4:FE:CF:7E:59:07:10:C4:01:83:EA:06:12:0C
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D61B5A66480A11EF90444C33C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.45.0/24
                  160.25.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:0a:f3:3a:ad:ea:09:4d:6d:00:c9:a4:21:01:cc:53:33:2d:
         08:96:68:bb:5a:59:32:e8:44:d3:73:43:c3:18:05:8a:52:73:
         be:c1:ac:f1:7a:6e:41:52:2f:4e:7a:08:90:96:61:75:ac:19:
         5b:ff:5b:04:97:02:31:f5:48:b3:bc:8a:a8:8b:01:68:02:13:
         a9:a5:ce:2c:f2:1a:ff:99:2b:1f:80:59:82:43:14:35:e6:20:
         c9:6c:12:32:c7:16:d1:cb:95:77:c2:13:30:f7:c7:d5:2b:a0:
         51:06:4b:27:43:01:41:3c:da:9f:3b:b4:d2:b8:0f:8a:2d:1d:
         1e:5e:d0:c6:06:d6:eb:24:9f:4e:f7:f0:4d:40:26:65:03:5f:
         a2:72:14:1c:d8:77:6c:8f:bf:36:9b:6c:7e:9e:57:a3:a3:57:
         95:d6:ad:a6:4c:62:db:dd:a4:10:17:c0:12:53:ad:46:4d:7d:
         8b:c5:62:be:9d:13:4d:e9:b2:10:c3:5f:a9:18:fe:a7:d0:40:
         d1:5a:46:c4:63:01:62:92:32:5b:66:96:86:ce:dc:53:ba:fd:
         6b:27:eb:1f:dd:c6:29:17:93:ff:df:eb:39:82:e2:14:5d:81:
         c4:c1:3f:4c:cf:b2:06:f4:85:b4:5d:e8:83:fc:34:d3:d7:d3:
         83:48:d6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:37:38 2026 by rpki-client