Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/13470B1A8A5D11F1831FA6813B11F970.roa
File:                     13470B1A8A5D11F1831FA6813B11F970.roa (raw, json)
Hash identifier:          KTWKvrQIcAJhvdnwPkuYb68Uex7MkjqQ3SocdV59zYA=
Subject key identifier:   CD:77:85:10:6F:C5:0A:49:E9:68:7D:39:F8:FC:82:27:2F:9C:DB:63
Certificate issuer:       /CN=A919A43E/serialNumber=399C87253E54ED6DE3770E55746466661ACED5CD
Certificate serial:       03
Authority key identifier: 39:9C:87:25:3E:54:ED:6D:E3:77:0E:55:74:64:66:66:1A:CE:D5:CD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZyHJT5U7W3jdw5VdGRmZhrO1c0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/13470B1A8A5D11F1831FA6813B11F970.roa
Signing time:             Tue 28 Jul 2026 08:19:39 +0000
ROA not before:           Tue 28 Jul 2026 08:19:38 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154767
IP address blocks:        160.236.180.0/23 maxlen: 23
                          160.236.180.0/24 maxlen: 24
                          160.236.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.crl
                          rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZyHJT5U7W3jdw5VdGRmZhrO1c0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 08:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A43E, serialNumber=399C87253E54ED6DE3770E55746466661ACED5CD
        Validity
            Not Before: Jul 28 08:19:38 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a68661a-6d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:05:25:ed:60:0a:83:ac:49:5e:bd:b2:84:f5:
                    a6:51:31:69:21:ec:77:93:1f:48:bf:9b:32:25:c4:
                    2b:22:5c:62:8e:49:f4:92:47:0d:ad:10:9e:a9:2a:
                    bd:91:0f:5d:83:90:aa:64:83:09:78:f5:a8:47:69:
                    2d:97:a1:74:4d:f2:aa:63:0f:15:5a:20:59:7d:d1:
                    f2:df:cc:2f:46:2a:74:07:42:b4:09:8a:18:c2:9d:
                    90:77:b5:ea:71:a0:34:19:d9:db:65:6a:f3:87:00:
                    0c:ec:f6:f0:c9:59:88:23:c0:ae:c7:1f:25:74:dd:
                    57:f9:67:70:0a:56:d8:70:08:89:43:5e:2b:8d:82:
                    34:e1:41:af:ba:e4:69:81:fd:84:ee:3c:89:d5:23:
                    56:2f:d7:84:d4:41:73:4a:1a:7e:94:2c:99:7d:03:
                    c9:7d:b8:2f:e3:0e:04:bc:d6:de:8c:0a:03:a3:35:
                    82:e6:41:13:13:56:52:30:76:e1:21:5e:1e:2b:82:
                    c0:9f:1d:12:8d:1b:b1:ac:f5:3e:53:12:22:4a:bb:
                    09:c1:cf:66:0a:04:17:cc:69:73:6a:b3:a9:bb:02:
                    5e:9e:cd:67:d6:95:0d:ec:08:e3:f5:0a:a3:dc:11:
                    75:99:e5:53:44:ec:40:d6:4c:fc:86:f3:ff:df:94:
                    e4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:77:85:10:6F:C5:0A:49:E9:68:7D:39:F8:FC:82:27:2F:9C:DB:63
            X509v3 Authority Key Identifier:
                keyid:39:9C:87:25:3E:54:ED:6D:E3:77:0E:55:74:64:66:66:1A:CE:D5:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/OZyHJT5U7W3jdw5VdGRmZhrO1c0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZyHJT5U7W3jdw5VdGRmZhrO1c0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A43E/EEAFE2AA8A5B11F197DB3E693A11F970/13470B1A8A5D11F1831FA6813B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:5a:a2:fc:8d:c1:be:ff:50:f9:39:1b:ad:9f:d2:dd:e1:e7:
         bb:37:6b:70:8a:fd:63:65:5a:c6:3c:a2:64:8e:c4:c8:74:2e:
         01:ca:b7:24:05:36:51:cc:c1:3d:40:a7:02:11:8b:a6:dd:fa:
         4a:d7:61:a6:25:6e:6f:b7:9e:44:8e:ee:1e:16:34:41:5d:3f:
         31:8b:18:62:57:68:8a:dd:6b:aa:cf:7d:52:b6:f5:86:b7:7b:
         b7:44:72:43:85:6f:48:76:f7:4d:36:d1:1a:14:1f:6f:5b:72:
         5e:b0:91:ae:01:66:09:d2:4a:db:ad:52:b0:6c:15:ee:4f:8f:
         b1:59:42:da:f1:9d:f6:8d:0f:e2:fc:8a:65:5e:3f:4a:a6:5c:
         6b:c3:c9:b2:15:07:84:98:ca:78:6f:9d:e7:39:f1:ef:b8:b5:
         0c:67:5f:0a:98:ea:af:f9:88:89:47:20:3b:09:1f:5c:55:8d:
         ba:d5:82:26:e7:ac:0f:4f:55:b6:1b:70:d7:c0:86:b0:4a:6f:
         23:29:3a:7c:96:8f:70:16:32:e3:25:e0:77:5b:1b:b7:53:2d:
         b4:5e:29:50:7a:c4:60:5e:09:e9:fe:f4:e4:51:53:4b:6f:c6:
         89:76:23:82:75:96:2c:28:2d:f9:74:72:82:3f:7b:c5:5a:e6:
         59:73:21:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:51:37 2026 by rpki-client