Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0511FA70013C11EFB9BC9846C4F9AE02.roa
File:                     0511FA70013C11EFB9BC9846C4F9AE02.roa (raw, json)
Hash identifier:          LOAhopxfM3ZQUGpFi3ZWXKRlhObMoJxm/wbtjAyxzUU=
Subject key identifier:   CA:D1:0A:58:9E:F7:A8:90:DD:36:84:20:FE:D1:05:4B:A6:4C:38:6C
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F50
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0511FA70013C11EFB9BC9846C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:25:05 +0000
ROA not before:           Sun 31 May 2026 16:25:05 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     152520
IP address blocks:        157.66.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12112 (0x2f50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:25:05 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c60e1-4440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d0:18:fc:af:63:be:a9:4f:6f:07:12:88:12:
                    77:9c:ba:a0:68:0e:00:cd:32:6b:95:68:29:19:68:
                    57:ff:dc:34:53:b4:3e:f2:2e:b2:62:65:32:a9:9e:
                    52:22:4b:ae:8b:b1:a3:d1:0c:6c:dd:6a:79:07:a0:
                    7a:2d:12:c2:a4:76:f1:c1:4d:bc:ce:b0:9c:32:7f:
                    1a:72:6c:df:6c:59:88:6a:81:bb:ea:ad:a2:73:df:
                    01:06:c4:50:ef:cd:8a:23:e0:19:1e:d7:66:92:38:
                    e3:e7:98:bb:24:ac:4d:87:51:42:65:fa:cd:fe:a8:
                    19:2d:f0:21:70:1e:08:15:f3:42:0a:97:b4:4c:2b:
                    92:c2:0a:cd:6d:2a:dc:18:65:bd:87:ef:a4:68:ee:
                    75:22:5e:0f:4f:8d:9c:97:0f:ff:0a:a3:69:93:34:
                    ad:1e:d0:d4:9f:dc:ef:61:0f:7c:8e:c0:52:b3:8d:
                    8e:ba:38:e5:d6:8a:54:e7:64:b3:1a:b3:fa:18:3a:
                    77:ab:5e:db:5e:39:6c:04:97:52:d1:ae:93:df:b6:
                    c8:41:b1:79:61:8b:a8:58:7c:75:af:b0:3e:10:b2:
                    9a:e8:db:90:24:f6:52:96:d6:d9:d6:4f:d1:f3:89:
                    8b:aa:4a:88:33:f1:17:32:17:8d:20:73:5f:1e:a7:
                    7d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D1:0A:58:9E:F7:A8:90:DD:36:84:20:FE:D1:05:4B:A6:4C:38:6C
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0511FA70013C11EFB9BC9846C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:67:92:38:c1:22:3d:d6:62:fb:5e:fd:6e:bd:ff:4f:3e:a6:
         f0:49:6b:c6:7f:30:0b:98:30:ce:56:43:55:63:08:c7:08:ef:
         59:d9:ab:a1:b7:ba:ed:28:28:ea:e6:08:b3:77:58:1d:fb:6b:
         55:10:b7:ac:48:c7:5b:47:f6:fe:87:70:40:a1:55:d0:f2:ee:
         ee:18:bd:04:9c:41:a7:90:c3:c4:d8:bc:a6:c5:d8:bc:e0:17:
         50:bb:e9:15:f8:50:5c:57:41:f7:5d:f6:d3:a3:0e:a5:f9:b6:
         b2:c0:ed:e3:6c:89:2a:97:df:b8:6c:d7:01:9b:4d:fd:85:b3:
         7c:67:b8:82:a1:d7:47:d1:cf:30:2d:ed:2e:3d:6e:ab:aa:4e:
         da:3b:1c:6a:41:e9:4b:60:5a:d7:b2:8f:61:4d:78:20:a4:b4:
         50:9b:2e:e4:ae:12:0e:03:80:4a:dd:e7:f8:ce:f6:85:6f:42:
         5b:96:8e:c0:64:9b:3a:e9:e6:6f:91:4c:fe:ed:b7:78:a5:c0:
         9a:2b:fb:f3:ae:19:43:eb:62:29:41:5f:14:23:79:c6:a2:8b:
         42:1a:43:50:98:55:0c:09:d3:12:4f:a3:14:79:44:94:ce:64:
         ad:a4:4a:36:c2:91:59:63:8c:53:61:15:f6:0e:41:dc:8a:54:
         52:62:13:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:24:01 2026 by rpki-client