Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EE6978B848BF11EF96563826C4F9AE02.roa
File:                     EE6978B848BF11EF96563826C4F9AE02.roa (raw, json)
Hash identifier:          SyNxEt2tq8MqL171eat8ymYjrswJrZP/EqXmUQeehYo=
Subject key identifier:   46:2E:3F:65:74:81:5A:D6:97:C0:3D:C8:28:A6:66:A7:6E:55:45:A3
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2C71
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EE6978B848BF11EF96563826C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:47:50 +0000
ROA not before:           Thu 08 May 2025 15:55:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     9829
IP address blocks:        158.144.183.0/24 maxlen: 24
                          160.30.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11377 (0x2c71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:55:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c215-54b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:10:0c:f6:8e:cc:50:3e:f2:78:6e:c2:00:
                    4c:6f:5a:0a:35:bd:83:d0:2b:c0:93:a6:dd:89:6b:
                    7d:de:03:cc:f4:b4:31:bb:05:fa:ad:9f:b0:0a:39:
                    de:27:ac:23:f7:4e:53:d0:6c:35:1f:c3:48:83:8e:
                    02:c0:33:c9:20:f6:09:90:7a:b8:55:90:c7:4e:1a:
                    09:74:9c:46:3a:9b:00:78:db:b4:1f:31:a5:25:4d:
                    98:14:3b:23:46:b7:71:60:63:96:9a:9d:88:35:5a:
                    bc:55:1c:34:2b:62:6d:39:b0:20:53:4b:18:17:47:
                    80:48:cc:e1:00:5e:33:74:1e:9b:b4:91:70:ba:61:
                    1d:46:42:77:0a:18:d4:dd:62:6a:96:a8:a5:2c:2c:
                    6a:23:27:d1:60:be:c9:2e:71:ab:4b:88:76:86:54:
                    d8:09:49:1e:80:b8:ee:d4:eb:43:4e:ca:d2:87:74:
                    80:c0:6e:b6:19:23:87:fe:e9:cf:f2:18:6a:26:1c:
                    41:d6:00:ce:34:09:50:48:09:99:6e:ea:fd:0e:0a:
                    cf:9b:37:3a:1e:42:73:d2:22:22:ef:da:44:89:e8:
                    af:21:82:ae:cc:41:8a:c6:f3:ac:69:57:12:6a:9b:
                    6c:7d:29:90:8c:a5:1a:82:05:61:a6:0c:15:cd:11:
                    30:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2E:3F:65:74:81:5A:D6:97:C0:3D:C8:28:A6:66:A7:6E:55:45:A3
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EE6978B848BF11EF96563826C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.144.183.0/24
                  160.30.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:99:35:73:e6:23:11:40:04:09:7f:94:e5:68:51:05:a3:de:
         b9:01:70:b8:9f:e6:bb:47:da:13:6d:cd:44:5e:69:ca:7c:06:
         ee:ae:9b:7f:cd:d4:8c:9c:50:6b:68:6c:e5:91:b7:c0:8e:e3:
         8c:d2:9e:4d:38:ec:28:66:ef:c7:a0:8b:21:a4:f7:06:55:73:
         e5:14:bd:14:74:1c:cb:37:5d:bf:cb:cf:67:22:e0:2c:5b:e6:
         d3:95:c8:82:79:95:56:f1:b2:3a:f8:61:da:b6:44:b5:3b:5e:
         42:a1:c9:d1:59:0c:a9:46:15:57:2a:0f:73:cf:a5:0f:6d:ff:
         4d:00:eb:da:57:7c:08:08:bc:d7:5e:a3:2e:d9:60:98:a2:e1:
         cc:4b:97:2c:dc:87:55:fe:0e:96:3e:6e:77:3e:3c:24:6c:93:
         e2:e3:f6:8f:cf:5e:36:c9:aa:a8:ed:2f:43:e9:35:4f:8e:f0:
         ce:27:32:6d:ea:e6:1c:d3:0d:c9:d5:c9:db:b7:89:19:86:b5:
         10:0c:39:f3:cc:50:87:65:01:f1:05:9e:db:cd:40:2c:d2:8e:
         d4:64:72:73:c2:0f:d0:51:f2:88:6c:6c:95:58:2d:cd:0c:76:
         a6:86:4f:e8:c7:1f:2b:91:96:1d:13:1a:cd:eb:f9:e0:63:85:
         bb:52:09:3e
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICLHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTA4MTU1NTUwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzIxNS01NGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyEkQDPaOzFA+8nhuwgBMb1oKNb2D0CvAk6bdiWt93gPM9LQxuwX6rZ+wCjne
J6wj905T0Gw1H8NIg44CwDPJIPYJkHq4VZDHThoJdJxGOpsAeNu0HzGlJU2YFDsj
RrdxYGOWmp2INVq8VRw0K2JtObAgU0sYF0eASMzhAF4zdB6btJFwumEdRkJ3ChjU
3WJqlqilLCxqIyfRYL7JLnGrS4h2hlTYCUkegLju1OtDTsrSh3SAwG62GSOH/unP
8hhqJhxB1gDONAlQSAmZbur9DgrPmzc6HkJz0iIi79pEieivIYKuzEGKxvOsaVcS
aptsfSmQjKUaggVhpgwVzREwDwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEYuP2V0
gVrWl8A9yCimZqduVUWjMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRUU2OTc4Qjg0
OEJGMTFFRjk2NTYzODI2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAnpC3AwQAoB4IMA0GCSqGSIb3DQEBCwUAA4IBAQAtmTVz5iMRQAQJ
f5TlaFEFo965AXC4n+a7R9oTbc1EXmnKfAburpt/zdSMnFBraGzlkbfAjuOM0p5N
OOwoZu/HoIshpPcGVXPlFL0UdBzLN12/y89nIuAsW+bTlciCeZVW8bI6+GHatkS1
O15CocnRWQypRhVXKg9zz6UPbf9NAOvaV3wICLzXXqMu2WCYouHMS5cs3IdV/g6W
Pm53PjwkbJPi4/aPz142yaqo7S9D6TVPjvDOJzJt6uYc0w3J1cnbt4kZhrUQDDnz
zFCHZQHxBZ7bzUAs0o7UZHJzwg/QUfKIbGyVWC3NDHamhk/oxx8rkZYdExrN6/ng
Y4W7Ugk+
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:16 2026 by rpki-client