Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F137A988E90611EF95D7D661C4F9AE02.roa
File:                     F137A988E90611EF95D7D661C4F9AE02.roa (raw, json)
Hash identifier:          znBZMznlgs/bmW/Y3eq/oBJifRr//jCeHxKrw5lCgFk=
Subject key identifier:   06:30:3E:8F:C7:CD:3E:83:F6:AE:00:98:5B:BE:0B:DF:A8:7D:97:4E
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2BDB
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F137A988E90611EF95D7D661C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:44:06 +0000
ROA not before:           Thu 08 May 2025 15:53:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149539
IP address blocks:        160.187.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11227 (0x2bdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:53:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c136-bf97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e1:a5:62:33:0e:ba:5e:8c:bb:21:41:0f:de:
                    0b:18:b7:e6:20:4a:ea:14:a0:64:da:77:83:98:86:
                    ca:12:19:ff:d6:1a:8b:6e:74:17:8e:a5:c1:8c:75:
                    98:5d:59:40:a2:69:5e:13:b7:7e:e8:73:ea:2e:dc:
                    fc:8d:92:9a:b8:70:8e:5b:ea:9d:bf:a0:29:f8:2b:
                    f3:fe:d3:d9:9e:58:b7:4d:d8:07:a1:e4:a1:d7:c4:
                    c4:35:3f:82:b5:46:4b:91:bd:f0:0e:4d:61:8f:ff:
                    8b:b4:56:3c:cb:ae:5e:d0:3f:00:4c:b5:e1:4c:36:
                    97:c1:28:a8:d6:0a:1f:e4:7a:d4:d0:e7:0e:cc:54:
                    7e:14:9b:b8:2a:00:e5:64:72:01:bf:80:6d:fa:f1:
                    03:da:d8:dd:0b:36:85:c1:5d:e3:15:31:ac:ff:91:
                    8f:4e:26:c6:f5:95:3f:95:24:77:be:89:6c:d1:97:
                    41:68:d7:2c:9d:fa:4c:6b:5e:87:c7:02:3b:e3:9f:
                    70:52:b6:39:40:e8:3f:1a:27:3b:28:ce:0f:26:39:
                    d7:3a:e4:90:5e:be:20:32:d1:d5:02:77:2b:9e:c7:
                    55:31:90:93:b0:37:88:28:ac:e0:5f:14:61:bf:87:
                    a9:d2:62:41:9c:2e:03:ae:1b:7a:25:a9:f8:61:a8:
                    cf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:30:3E:8F:C7:CD:3E:83:F6:AE:00:98:5B:BE:0B:DF:A8:7D:97:4E
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F137A988E90611EF95D7D661C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:81:f8:6d:ab:be:75:13:df:41:6f:97:c4:bf:b7:a8:9b:04:
         8d:ba:41:6c:5c:cb:c6:6b:d2:87:3c:6d:26:2d:47:c8:a1:f4:
         b9:4d:db:c6:a6:55:7a:54:41:12:1d:84:92:7c:7d:f7:f2:59:
         b2:ca:3a:d5:58:f4:b9:c9:16:67:89:ca:f0:24:d8:ee:17:2c:
         13:2f:d1:16:f1:cb:3b:41:aa:98:af:c7:40:42:0c:52:b9:fa:
         00:23:8b:8e:49:f9:e2:d1:0b:fb:c1:93:ae:69:13:12:85:eb:
         a9:41:95:92:3b:c0:7b:18:7b:59:84:43:3e:dc:90:35:d1:57:
         58:fc:14:27:f6:be:66:92:e5:7b:b5:20:e8:65:c8:9b:cb:28:
         f1:ef:6f:ea:6b:7c:40:71:ac:0d:40:21:cb:54:c2:d2:44:b7:
         87:60:4a:93:6b:fb:b5:52:49:36:c3:d9:91:3a:aa:86:a1:95:
         0e:75:8e:74:08:0b:17:30:62:f9:c6:8e:62:2f:86:de:4f:2c:
         3c:dc:2f:7b:a9:62:8b:14:50:85:4b:55:c0:fe:dc:0a:9a:f4:
         ce:0a:a2:58:77:cd:72:c7:da:dd:8d:0c:46:c0:9b:b3:88:01:
         09:0d:ea:15:af:60:06:f0:e0:06:42:d2:cf:b2:1b:71:be:d5:
         b1:47:53:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:36 2026 by rpki-client