Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/15279FEC3DEA11EF9749E312C4F9AE02.roa
File:                     15279FEC3DEA11EF9749E312C4F9AE02.roa (raw, json)
Hash identifier:          ohVB1MWgsbgQDiHsqHqjOnm1iQIHFNxzTA190/doy4M=
Subject key identifier:   E8:86:06:9E:E8:2B:AE:55:80:E3:6C:80:7A:1A:B8:E1:42:6B:3A:80
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       30D5
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/15279FEC3DEA11EF9749E312C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:17:25 +0000
ROA not before:           Mon 06 Jul 2026 16:17:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137146
IP address blocks:        160.25.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12501 (0x30d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:17:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd515-b892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1d:35:40:c0:0c:81:67:de:e2:37:c4:04:ab:
                    7e:a9:34:49:7c:dc:f7:7f:8f:e7:87:15:01:4e:65:
                    84:4f:3e:b1:0c:8e:6d:21:79:ed:b1:2f:6f:60:08:
                    80:14:53:b0:ee:07:1b:c4:cd:40:fc:70:0e:86:53:
                    db:93:d1:b7:a0:38:52:2f:a5:6a:34:25:c4:e7:f1:
                    8a:24:2a:f1:ef:0c:b3:6f:14:6c:d5:0e:88:87:a7:
                    c3:4b:fe:c8:32:d2:a8:87:cb:a4:ae:ed:4e:5f:63:
                    a9:77:67:6c:41:d6:30:cc:cb:1e:f9:8d:8e:81:62:
                    cd:d9:52:ee:db:81:22:45:7f:dc:42:02:99:15:b4:
                    90:ed:5b:54:e4:a1:43:53:e1:52:9c:55:35:28:d2:
                    f5:03:de:b8:4a:e5:21:b6:3d:46:dd:ba:74:3d:06:
                    c5:8e:7d:e6:c0:e9:93:fe:1b:29:37:08:cc:4c:19:
                    56:0b:42:bf:4d:8a:41:55:fc:84:43:66:12:d2:da:
                    b9:23:48:af:98:aa:1f:ab:5b:76:4f:e1:45:39:09:
                    52:1f:9f:1c:1a:00:20:be:51:65:a1:5b:41:8d:b8:
                    35:4a:44:47:ce:3e:07:e2:65:5f:f7:0a:36:d8:a4:
                    e0:01:a3:a5:52:df:73:99:8b:80:23:b2:19:5b:82:
                    2b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:86:06:9E:E8:2B:AE:55:80:E3:6C:80:7A:1A:B8:E1:42:6B:3A:80
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/15279FEC3DEA11EF9749E312C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:06:d0:16:d8:50:be:51:15:56:df:5f:ab:d5:83:e5:0b:ff:
         f4:55:55:2f:30:d8:da:c6:38:a9:51:d1:1d:b8:2d:22:fb:53:
         19:af:26:d8:95:98:70:42:95:3d:dd:7e:38:51:25:a8:55:73:
         d3:35:c3:01:fe:30:09:65:ae:e4:1e:07:e8:6e:d9:f8:cc:ca:
         08:4d:08:86:29:a0:a0:54:f8:b5:9f:a3:2c:3c:e4:96:f6:1a:
         d4:91:3e:8e:c4:e8:e1:51:fc:5d:65:69:6b:af:cf:65:01:c3:
         a1:da:aa:cd:bb:dc:90:0c:96:17:73:7e:66:65:9d:08:31:39:
         50:47:b3:f3:c1:4f:4d:05:ad:25:a4:07:19:cf:ec:8a:be:b9:
         1b:e2:c7:07:b8:46:59:3f:20:76:36:dc:14:91:a4:3f:5f:fe:
         ec:29:71:b9:dd:6e:6e:33:01:47:5b:c9:70:e8:af:69:5d:86:
         e3:1a:69:03:88:59:f4:04:f0:fd:7e:64:02:0b:64:1b:04:53:
         7c:38:64:ff:7e:4f:39:29:6a:56:41:7a:52:90:8d:ab:10:5f:
         1f:25:51:6e:eb:51:64:4c:a4:00:dc:6a:96:ba:d5:58:5b:15:
         94:de:e5:f5:a3:24:94:4f:8e:7e:98:df:c2:d5:60:52:e0:e8:
         79:ef:62:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:50 2026 by rpki-client