Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DA69F07EFF3311EFB7731121C4F9AE02.roa
File:                     DA69F07EFF3311EFB7731121C4F9AE02.roa (raw, json)
Hash identifier:          MFOW80H6XO+LH4YJ4kcPqRmEfX3uJNkGjcL6oLze9yA=
Subject key identifier:   6F:49:56:9F:27:A3:04:95:90:C6:F1:61:87:82:54:04:85:5E:AE:21
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2BA2
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DA69F07EFF3311EFB7731121C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:42:46 +0000
ROA not before:           Thu 08 May 2025 15:52:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134375
IP address blocks:        161.248.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11170 (0x2ba2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:52:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c0e6-2d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:75:fa:cf:90:66:cc:9f:36:07:84:49:25:4f:
                    ee:49:6d:9f:81:6d:c8:71:6a:04:aa:96:e2:37:a0:
                    86:f4:ba:26:53:cc:e6:e1:e6:79:24:78:bd:9a:f4:
                    bd:a5:fe:24:6b:58:69:05:e9:65:43:ec:8a:26:09:
                    b7:3e:f5:2f:ab:8d:1a:43:09:ca:36:16:38:2e:11:
                    98:ea:6b:66:db:e3:86:3e:97:f2:9b:23:dd:00:30:
                    e1:df:7c:e4:a6:88:1f:c9:28:cf:de:0a:2a:5a:54:
                    4f:64:4f:79:34:f7:ed:f6:6d:f9:75:c1:84:20:41:
                    f7:27:20:c2:dd:16:a3:83:56:2d:97:62:69:e6:ba:
                    6a:3a:02:a4:da:af:b8:33:c9:24:2b:7b:31:9f:95:
                    fe:59:38:cc:56:b7:be:a1:cd:b3:0e:b6:e2:5a:14:
                    2e:17:5d:e1:f1:b2:d0:a3:45:16:5b:76:7a:ca:d6:
                    75:68:3c:c4:81:6e:39:ac:d7:84:68:d7:42:3d:fe:
                    50:43:26:8b:8d:62:0a:0c:58:fd:e8:bd:3f:cb:78:
                    e4:2d:9f:16:10:ad:6e:ba:e4:83:0a:45:13:2a:8c:
                    0f:57:32:ee:f1:21:5d:39:74:ec:2e:81:2b:52:46:
                    0c:cc:a0:a1:8f:8e:ab:42:a0:d8:f1:5b:17:9d:42:
                    f9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:49:56:9F:27:A3:04:95:90:C6:F1:61:87:82:54:04:85:5E:AE:21
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DA69F07EFF3311EFB7731121C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:01:48:8c:73:13:d7:79:9c:66:10:8d:da:72:7d:8d:61:df:
         28:ac:ac:92:c8:1e:93:e0:98:db:63:a0:49:04:6b:f6:a4:fe:
         3b:20:84:36:c5:61:ee:2b:1e:5a:4f:41:53:8f:45:ed:e0:a6:
         04:60:40:06:17:70:de:fe:94:13:69:80:63:c6:5c:0e:cd:36:
         c2:ab:03:f2:58:28:97:2b:a0:28:27:39:5f:b4:31:42:12:22:
         f6:ce:9d:83:98:70:92:61:e2:12:66:77:cb:6d:3e:4a:77:e7:
         5e:2c:58:df:8b:9e:46:d9:50:44:43:38:5c:82:a5:bc:c9:72:
         ce:ea:a6:c5:5f:3c:53:5a:60:0d:05:a5:6e:e8:a8:a1:b5:8b:
         4c:a7:e0:b2:9e:7b:de:7f:16:f3:ac:f0:84:b5:5e:b7:f8:bb:
         7f:2f:a3:39:19:26:2b:0d:d0:d2:5d:26:e4:7f:ff:02:88:6b:
         0f:cb:3b:ea:e9:05:26:5e:5b:ff:d1:37:29:2d:c1:6f:f5:7a:
         95:54:f5:90:95:c2:c1:29:86:a8:5b:7f:36:84:75:ad:2b:dc:
         f6:c5:5b:c6:86:5c:79:8b:6d:ad:a6:45:01:27:37:e8:70:7d:
         d4:b0:d3:8c:05:0e:7a:73:31:d5:5a:ab:6c:33:e3:e1:87:a3:
         ad:b5:cb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:28 2026 by rpki-client