Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FF5C73284F1311EFAA36CD5EC4F9AE02.roa
File:                     FF5C73284F1311EFAA36CD5EC4F9AE02.roa (raw, json)
Hash identifier:          5CchsHpDOefYawaSuytcCuII2jZR4bMXdN85rXX70os=
Subject key identifier:   B0:34:11:D9:45:EC:FC:B7:32:EC:28:2A:E7:75:0A:8C:F9:8C:0C:CB
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2BC2
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FF5C73284F1311EFAA36CD5EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:43:31 +0000
ROA not before:           Thu 08 May 2025 15:52:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138765
IP address blocks:        160.30.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11202 (0x2bc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:52:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c113-eac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:18:69:ae:f3:6e:0b:88:19:3b:a8:95:89:
                    97:2f:e4:8e:3a:60:7f:e2:34:7d:35:a2:31:29:a4:
                    17:05:79:2c:b4:59:6f:62:82:c8:9d:1d:be:88:e9:
                    cb:39:bd:50:2e:c8:e1:48:79:2f:64:47:6b:8f:2f:
                    d4:04:aa:4e:a7:7f:5f:c4:21:4b:45:bc:78:91:cc:
                    e1:1d:19:38:ed:a3:d4:ac:ca:58:4e:32:68:9e:e8:
                    09:07:90:56:2a:e6:22:34:a6:2b:11:bf:55:63:d8:
                    24:c3:7f:98:73:63:91:85:69:fb:58:72:8d:77:62:
                    78:8d:af:55:09:91:ab:d9:a6:db:6e:d4:2a:3b:72:
                    88:44:fd:21:87:73:fb:2f:a2:6b:14:96:29:90:69:
                    52:00:ec:b6:70:a0:bb:3e:9f:4a:fb:69:86:1d:45:
                    38:c4:64:17:56:59:54:30:7a:55:d5:ac:19:ac:b2:
                    e3:9e:3e:25:99:95:a8:a4:73:28:4b:d7:bc:6d:64:
                    93:74:a3:6b:1e:f5:e8:79:90:28:9c:c2:c8:f1:a0:
                    09:23:e4:a0:17:06:07:25:9d:40:05:43:b7:aa:5b:
                    a1:14:f3:5a:e3:0d:65:06:91:8a:d4:e1:10:29:b1:
                    5e:00:05:ca:f2:a2:bb:4e:f5:7b:1d:c1:a5:cf:07:
                    b6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:34:11:D9:45:EC:FC:B7:32:EC:28:2A:E7:75:0A:8C:F9:8C:0C:CB
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FF5C73284F1311EFAA36CD5EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:56:71:28:7e:30:65:df:82:87:fc:28:97:cc:69:99:54:39:
         77:e5:fb:c2:fa:ce:8b:ff:22:d1:29:23:ac:24:3b:a3:ab:19:
         56:a7:42:83:79:9d:5e:3e:98:63:b9:61:b5:48:3b:dc:77:fb:
         f8:37:a0:e6:7f:10:35:14:6b:0e:a1:33:cd:56:e6:76:9f:30:
         46:c9:72:1e:ee:47:28:da:c9:22:68:f0:f8:a1:40:8b:90:c2:
         4e:f9:b9:46:38:25:d8:9b:ab:f0:55:b5:8e:c1:48:ba:6b:78:
         fa:76:92:bf:19:02:ca:af:7c:50:75:1a:98:26:6d:0f:02:cd:
         f3:b5:82:76:5b:a0:ff:ab:6f:e9:fd:e0:bd:41:a5:63:83:7a:
         e0:ff:a2:10:f4:8e:c9:20:2d:80:68:22:b9:a2:af:99:92:2e:
         64:10:dc:0b:7e:7d:9a:ff:1e:d9:39:3c:e7:b6:6a:a4:99:54:
         cd:8a:66:7c:3d:77:e4:34:9b:1e:29:1c:2c:dd:26:e5:57:2b:
         1a:40:cc:63:60:04:4f:48:74:01:e0:0c:b3:4d:19:fe:a6:7d:
         e7:4c:19:80:db:58:5f:7a:70:22:ad:89:b2:cb:f2:6d:8c:e8:
         62:25:da:9e:14:8d:b7:87:f2:c0:c0:40:28:fc:05:fb:86:cc:
         d1:31:3b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:46:48 2026 by rpki-client