Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/666EE7025B7211EF8C1A8E4EC4F9AE02.roa
File:                     666EE7025B7211EF8C1A8E4EC4F9AE02.roa (raw, json)
Hash identifier:          44+Ej6Drcby9zo63RA/x3RlFQ8dLgOq2yjB6zWmXKWk=
Subject key identifier:   4F:63:33:EC:B5:D7:CF:A0:FE:64:81:85:B9:61:C3:05:28:78:77:AF
Certificate issuer:       /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial:       362D
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/666EE7025B7211EF8C1A8E4EC4F9AE02.roa
Signing time:             Thu 06 Aug 2026 15:10:39 +0000
ROA not before:           Thu 06 Aug 2026 15:10:39 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        160.30.106.0/24 maxlen: 24
                          160.30.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 14:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13869 (0x362d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
        Validity
            Not Before: Aug  6 15:10:39 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a74a3ef-54ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:09:f8:60:d3:ff:d5:a9:23:65:b5:18:3b:3a:
                    46:62:38:7b:ec:7b:58:5b:0b:b9:64:cc:f3:b4:52:
                    03:36:b1:a6:b0:2d:62:16:b1:25:18:57:94:96:bf:
                    45:65:41:43:c6:e5:e3:47:81:eb:20:90:0a:9d:f5:
                    81:a8:9a:91:92:01:ec:c9:98:e5:2d:e7:2b:9d:e3:
                    f5:bf:9b:f6:25:ca:5e:94:5f:46:cc:ae:8f:86:61:
                    a2:30:dd:15:10:76:6f:77:2e:8a:2a:71:de:9c:94:
                    74:78:3e:f7:c5:c0:b1:86:1b:41:1a:43:dc:65:09:
                    03:6b:a0:83:a3:67:10:51:31:69:e6:69:16:74:79:
                    05:ad:04:88:3d:5f:46:e4:82:d5:db:02:df:61:b8:
                    22:36:3b:62:4e:c1:b7:e3:0a:d5:5a:23:01:be:92:
                    57:36:04:f9:9e:27:bf:db:73:59:97:2e:62:95:f6:
                    8d:30:a1:55:61:d4:17:c1:60:d5:77:9f:ef:29:85:
                    fc:40:6f:de:69:8d:eb:e1:ca:6a:ac:5c:96:81:d9:
                    24:6b:b9:cd:ee:dc:d8:e4:b3:82:bc:25:3c:6b:b1:
                    48:36:e5:00:52:11:d5:f8:a1:54:f9:96:88:e3:73:
                    1e:07:e9:4c:aa:d9:3f:e9:76:9b:5e:88:8c:df:3b:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:63:33:EC:B5:D7:CF:A0:FE:64:81:85:B9:61:C3:05:28:78:77:AF
            X509v3 Authority Key Identifier:
                keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/666EE7025B7211EF8C1A8E4EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:b2:9a:6c:e8:97:35:ad:bf:86:d2:37:6e:44:b1:a3:00:2b:
         5a:84:ee:f8:b9:79:b9:d2:0a:8a:2a:ec:8f:5c:21:fe:13:56:
         cd:6e:92:78:56:31:c2:e6:d3:ea:ea:e0:ed:a1:01:3f:cd:e7:
         93:d7:a6:96:53:b6:85:02:d7:13:ce:b7:72:81:9a:2e:98:c8:
         32:c5:98:b1:32:7a:be:0c:06:82:25:7f:c0:31:c2:d7:4d:1e:
         c6:3a:74:89:b2:f7:22:d9:4c:ca:a4:ba:94:53:8a:7a:31:9a:
         83:67:a1:5f:0e:e8:63:4e:b1:72:22:c0:0e:22:fd:7e:15:83:
         1e:67:c6:59:c3:28:f8:26:7f:a0:cc:c7:96:21:a0:1a:d3:ae:
         d6:0b:a3:01:b0:08:53:32:cb:94:15:5f:35:29:7c:ae:2f:64:
         6b:d2:ed:f4:92:32:6e:c6:c9:b7:69:e0:8d:1a:94:ca:e1:3f:
         ef:2c:42:26:d3:cf:61:fc:ba:76:14:18:2b:59:96:95:5a:d1:
         3c:e8:ee:f3:27:e9:8f:e4:f4:bc:ee:0d:4c:8b:46:77:d3:e3:
         10:02:e3:28:b0:6e:65:d1:51:7d:53:fb:7b:7e:7c:09:9d:56:
         6a:5d:da:41:21:60:22:ae:7b:17:78:da:50:07:f2:cd:70:a4:
         64:0b:fb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:24 2026 by rpki-client