Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0AC03CAC007411EFA54F0579C4F9AE02.roa
File:                     0AC03CAC007411EFA54F0579C4F9AE02.roa (raw, json)
Hash identifier:          7qFcVhD9wUHhxTlGQw24htDVUmhNzFuF/1f7UAyIMJA=
Subject key identifier:   1A:76:96:31:6F:31:73:79:14:1C:0D:D6:84:06:37:21:52:16:7E:73
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F32
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0AC03CAC007411EFA54F0579C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:24:07 +0000
ROA not before:           Sun 31 May 2026 16:24:07 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     152483
IP address blocks:        157.20.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12082 (0x2f32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:24:07 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c60a7-ce11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:39:e7:7f:f8:92:bd:cc:ef:3a:49:64:1b:a7:
                    a0:f2:17:06:c5:e9:9b:84:ac:2b:84:b5:ec:e1:9a:
                    60:ef:3d:d6:f9:d2:9e:37:4c:04:d5:88:2b:75:f4:
                    36:c1:41:dc:82:0f:07:7e:6f:04:35:d2:74:c2:a8:
                    05:7e:f7:8b:d2:32:4e:dc:5c:02:fb:9d:93:9b:9a:
                    ad:86:54:85:4a:a7:49:1e:28:81:db:87:6e:ea:c6:
                    73:89:af:47:62:47:81:3f:3c:7e:d5:a8:b2:ba:0e:
                    14:ad:fa:fb:ec:4e:5b:de:48:03:ce:3b:df:1a:91:
                    e2:1b:e5:dc:94:c3:ab:f1:78:f3:24:7b:99:56:5c:
                    e1:2e:70:f4:85:7f:f8:f9:66:98:07:76:c7:32:f3:
                    e3:67:65:41:40:63:33:8d:48:83:9e:fa:35:c9:47:
                    07:7b:45:6f:f3:14:a8:07:18:91:7d:17:db:79:2e:
                    f2:be:31:e5:c4:55:b9:97:b7:60:73:a6:31:af:36:
                    b0:e4:3b:9d:ae:43:e0:d6:90:44:a3:a7:24:d6:b3:
                    dd:8b:b4:b4:4b:30:ff:35:3f:3c:cc:93:8b:08:f5:
                    71:c4:cd:c4:7b:1a:9d:1e:8e:5f:7b:b6:a1:00:55:
                    80:75:a4:96:10:7c:b8:fa:23:5b:d1:40:97:9c:bd:
                    61:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:76:96:31:6F:31:73:79:14:1C:0D:D6:84:06:37:21:52:16:7E:73
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0AC03CAC007411EFA54F0579C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:e5:f1:66:2b:9e:4f:8d:b7:31:6a:62:b1:6b:2c:c1:66:7b:
         63:2c:da:21:fa:53:0b:14:19:94:fd:4e:d1:5f:9a:95:72:64:
         35:f7:4d:a0:18:f2:93:65:ee:ff:14:45:45:5c:cc:ae:3a:29:
         aa:f3:b3:86:09:9a:43:de:a5:1b:16:44:b2:a1:28:21:f5:cb:
         0d:ee:66:fa:79:14:4e:81:49:31:ec:df:fd:bf:13:ba:db:9f:
         cf:a2:6d:c1:8f:a1:54:17:54:d8:eb:9b:66:2e:59:15:66:00:
         e4:42:52:92:ee:75:8a:bb:95:b5:29:be:d5:7a:57:76:a2:81:
         48:0a:99:97:ef:e4:5a:ec:70:a5:08:4d:39:96:14:b3:66:cf:
         1a:b5:0f:b1:93:a3:51:ed:d6:f1:30:d3:fa:aa:a5:14:ab:31:
         38:44:32:5c:07:b6:66:74:10:56:90:9f:29:8e:0f:9d:49:86:
         1a:90:a9:fb:9b:0e:6c:22:29:69:99:28:c7:e4:78:66:25:d0:
         75:8e:a2:56:56:14:75:2b:95:60:f3:1f:5f:99:3d:ad:24:e4:
         f3:19:6b:48:27:57:d4:83:fe:b0:33:cd:57:a6:b4:d6:1d:73:
         12:89:d9:30:3a:6e:82:85:4c:a5:70:62:54:d9:e5:66:5b:5b:
         b3:47:46:5a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNTMxMTYyNDA3WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNjBhNy1jZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuznnf/iSvczvOklkG6eg8hcGxembhKwrhLXs4Zpg7z3W+dKeN0wE1YgrdfQ2
wUHcgg8Hfm8ENdJ0wqgFfveL0jJO3FwC+52Tm5qthlSFSqdJHiiB24du6sZzia9H
YkeBPzx+1aiyug4Urfr77E5b3kgDzjvfGpHiG+XclMOr8XjzJHuZVlzhLnD0hX/4
+WaYB3bHMvPjZ2VBQGMzjUiDnvo1yUcHe0Vv8xSoBxiRfRfbeS7yvjHlxFW5l7dg
c6Yxrzaw5DudrkPg1pBEo6ck1rPdi7S0SzD/NT88zJOLCPVxxM3EexqdHo5fe7ah
AFWAdaSWEHy4+iNb0UCXnL1hqQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBp2ljFv
MXN5FBwN1oQGNyFSFn5zMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMEFDMDNDQUMw
MDc0MTFFRkE1NEYwNTc5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAnRSmMA0GCSqGSIb3DQEBCwUAA4IBAQAa5fFmK55PjbcxamKxayzB
ZntjLNoh+lMLFBmU/U7RX5qVcmQ1902gGPKTZe7/FEVFXMyuOimq87OGCZpD3qUb
FkSyoSgh9csN7mb6eRROgUkx7N/9vxO625/Pom3Bj6FUF1TY65tmLlkVZgDkQlKS
7nWKu5W1Kb7Veld2ooFICpmX7+Ra7HClCE05lhSzZs8atQ+xk6NR7dbxMNP6qqUU
qzE4RDJcB7ZmdBBWkJ8pjg+dSYYakKn7mw5sIilpmSjH5HhmJdB1jqJWVhR1K5Vg
8x9fmT2tJOTzGWtIJ1fUg/6wM81XprTWHXMSidkwOm6ChUylcGJU2eVmW1uzR0Za
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:48 2026 by rpki-client