Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E66D1ADAC9AB11EF94E78272C4F9AE02.roa
File:                     E66D1ADAC9AB11EF94E78272C4F9AE02.roa (raw, json)
Hash identifier:          pGaGYARIHB6yri5r2xCQEztZY6VqhVMTaPBzWdafOPg=
Subject key identifier:   33:53:B4:E1:F3:E2:5F:4E:03:32:A0:45:7C:0A:CA:F8:36:1E:14:DB
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2BC1
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E66D1ADAC9AB11EF94E78272C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:43:30 +0000
ROA not before:           Thu 08 May 2025 15:52:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138751
IP address blocks:        161.248.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11201 (0x2bc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:52:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c112-7f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5a:fd:47:94:7f:c4:9b:07:dc:4c:75:a2:86:
                    3a:0c:92:8d:38:8d:d2:3d:98:7b:2a:55:e0:ee:14:
                    f0:f5:6a:b9:47:26:98:6e:92:90:14:47:7e:42:cc:
                    07:e4:24:4b:3d:9a:b4:68:c8:00:c3:a1:f6:de:c7:
                    45:b2:08:d9:dc:26:f1:41:dd:7c:21:c6:6d:07:46:
                    22:10:ad:3b:3a:bc:08:b8:ee:e9:73:43:0d:ca:10:
                    74:06:fa:e3:33:a2:17:ac:84:6e:26:9a:c8:33:28:
                    35:5c:de:03:2e:c0:e4:24:42:45:ec:a6:8d:66:8a:
                    89:8f:5b:7c:c1:ad:37:9f:ba:9d:8c:ef:4d:a7:6e:
                    77:25:ff:34:23:2d:1d:49:89:f6:9d:0e:98:4d:9b:
                    25:c7:d3:63:bc:a5:e1:d7:af:e7:70:6c:f3:cf:36:
                    3f:06:55:f6:98:3b:cf:15:18:4a:cb:d8:7b:ea:d8:
                    b1:90:b5:05:b5:60:29:20:b2:ad:f1:1d:54:ff:d9:
                    5b:95:fc:3b:ff:2d:ee:2d:89:c6:3c:68:0b:2d:ff:
                    83:0c:78:f2:e3:9d:cd:f2:5b:88:8d:57:ac:7f:c8:
                    a0:5d:14:f8:ec:4f:c1:89:2d:52:50:4e:6b:ef:b7:
                    69:d0:3b:ea:bc:0e:a8:72:97:93:61:29:57:9e:a7:
                    35:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:53:B4:E1:F3:E2:5F:4E:03:32:A0:45:7C:0A:CA:F8:36:1E:14:DB
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E66D1ADAC9AB11EF94E78272C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:f6:5a:29:1f:d0:52:98:91:ec:d0:d2:9e:16:bb:90:c4:77:
         2e:14:d7:34:6a:e3:1a:fe:ad:d4:ed:64:18:9d:c2:f8:4e:e9:
         39:25:5d:e5:32:a8:0f:be:58:64:27:f7:92:2e:6d:66:2c:88:
         5d:d1:77:d2:6c:c0:2a:29:d3:52:ea:ef:b2:10:79:fb:6e:63:
         55:54:50:af:51:82:e4:4c:3e:60:56:63:f1:43:9e:48:33:86:
         a7:e9:7b:47:bd:a1:d3:31:5a:2f:5e:bc:cc:99:82:cc:de:ed:
         05:47:87:aa:ef:57:0d:8a:9f:04:fd:98:e0:66:d6:31:44:11:
         42:23:d3:6f:7c:0c:12:b5:b2:49:e7:69:72:22:be:08:a8:7e:
         cf:cc:e5:b0:14:87:cd:a7:49:af:e7:45:59:dd:2f:d3:d9:c3:
         47:f7:ee:0a:4f:a9:8d:34:a4:ce:5a:c1:fc:f7:11:e1:58:e6:
         bb:2a:25:07:4f:70:3b:99:7e:4f:31:09:25:40:3e:df:eb:d2:
         85:99:3e:74:77:eb:fb:83:2a:64:51:f1:d9:56:b2:9c:f1:8e:
         72:c3:e2:70:58:4e:45:69:06:05:7f:88:69:ab:d8:15:3b:96:
         e9:90:49:d7:0b:2c:4f:8f:be:4e:71:95:6a:e5:50:c6:2e:ee:
         b0:e1:65:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:48:57 2026 by rpki-client