Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/1605F9B6169E11EC9D259855C4F9AE02.roa
File:                     1605F9B6169E11EC9D259855C4F9AE02.roa (raw, json)
Hash identifier:          UYiuYdXTVxBppiNsiI1q/movnzWH6/WJ+GXsUOQpZSc=
Subject key identifier:   B0:EA:27:DB:E0:2A:DE:6D:7F:27:EA:9B:1D:F9:C7:39:F8:3C:E4:91
Certificate issuer:       /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
Certificate serial:       0D1D
Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/1605F9B6169E11EC9D259855C4F9AE02.roa
Signing time:             Fri 14 Aug 2026 19:38:36 +0000
ROA not before:           Fri 14 Aug 2026 19:38:36 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     18382
IP address blocks:        202.167.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl
                          rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3357 (0xd1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918
        Validity
            Not Before: Aug 14 19:38:36 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7f6ebc-dfbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:21:d8:50:1a:3a:78:a5:cf:23:1e:3e:42:f4:
                    4c:70:fd:ba:0a:01:73:51:b4:d1:ad:6f:02:e5:c1:
                    af:e0:c4:d6:87:f3:93:4c:eb:56:c6:db:ed:32:68:
                    e8:5a:be:65:a5:c6:ca:91:45:c3:2f:72:78:85:4d:
                    61:8c:5c:fd:7e:8d:00:27:04:54:db:85:d6:33:db:
                    7f:ef:d6:3d:79:e3:1f:66:87:2d:99:64:5e:48:9f:
                    ec:53:24:d2:a8:bc:7d:45:b7:d9:74:c2:8b:da:5c:
                    ef:cf:cf:73:12:e5:9d:0b:8d:9d:b6:fe:2d:b8:28:
                    6e:2a:ca:dd:84:8c:30:b2:e3:02:ad:da:d8:3a:23:
                    c3:18:77:b3:64:d0:48:ac:63:7d:ba:2a:30:e9:03:
                    b3:c1:05:e9:1e:ec:8f:20:01:07:63:5c:6f:d2:e0:
                    f4:34:41:55:e9:98:cd:a2:55:78:66:41:c7:9e:d7:
                    2a:e1:a7:54:77:99:95:a0:f7:80:92:be:59:ad:72:
                    12:54:c5:fe:97:9c:9e:38:c2:a4:cd:65:6c:4c:ce:
                    9d:cc:83:c5:ec:61:83:9c:1c:bc:ce:20:f4:54:40:
                    79:09:04:48:ea:11:b5:88:6a:6d:24:c9:53:8f:49:
                    11:d1:13:29:ed:c8:59:66:49:4b:a4:7a:d7:70:72:
                    6a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EA:27:DB:E0:2A:DE:6D:7F:27:EA:9B:1D:F9:C7:39:F8:3C:E4:91
            X509v3 Authority Key Identifier:
                keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/1605F9B6169E11EC9D259855C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.167.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:6b:15:1f:e9:ec:ae:0d:f1:31:c9:c3:d1:76:1e:f1:60:71:
         fd:81:f3:48:cb:d4:f7:43:46:01:c5:97:cc:62:9b:21:80:20:
         a8:75:30:c2:63:68:00:63:4d:b2:c9:3f:02:4b:65:8c:2e:00:
         2c:cc:b9:df:74:61:eb:58:3d:c4:60:30:5b:75:4f:4b:16:4a:
         89:88:17:dd:a2:66:cb:d8:11:05:71:a4:ef:e9:97:d4:85:21:
         2d:03:3f:cb:fd:de:f9:b3:13:08:c1:28:35:5b:ea:1d:a0:cb:
         94:c3:54:e8:87:47:06:46:7f:05:60:54:61:7d:a8:f4:b7:06:
         2b:0f:8b:7b:44:6d:63:d5:4a:06:03:01:0d:7f:43:1b:c3:2e:
         d5:3c:1c:3f:1a:5e:54:cd:41:56:ff:9b:4a:4b:d6:d7:30:14:
         f6:79:8b:7d:22:a7:9c:64:d6:cf:3b:a1:0b:60:a1:e8:87:be:
         29:87:4d:13:f7:f7:2b:8e:d7:65:29:29:4c:68:e2:4e:e7:40:
         fe:24:f8:25:b5:c4:d0:f2:37:a6:50:56:91:ec:e3:e6:94:3d:
         ac:5f:eb:57:04:52:fc:98:9a:39:44:b8:1f:b8:a1:32:e5:aa:
         a6:92:b1:31:99:79:62:ca:27:fd:a0:04:d6:e5:2e:90:f1:d1:
         51:4d:6a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:54:08 2026 by rpki-client