Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2EE9A7E01EA411F0AFB88E2BC4F9AE02.roa
File:                     2EE9A7E01EA411F0AFB88E2BC4F9AE02.roa (raw, json)
Hash identifier:          P4p5TJNDLAiHwZTURdgxGCHXM1Gh011yE2mDpbI/SBc=
Subject key identifier:   FA:15:6D:3B:23:D8:12:7A:7E:C2:FA:BB:2F:77:ED:9C:FA:5E:81:7E
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F9F
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2EE9A7E01EA411F0AFB88E2BC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:27:33 +0000
ROA not before:           Sun 31 May 2026 16:27:33 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153267
IP address blocks:        160.250.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12191 (0x2f9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:27:33 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6175-b966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:13:e6:83:c0:ec:92:62:ce:f9:ec:7e:ea:21:
                    66:13:65:19:f3:e8:61:3b:b3:2e:5b:25:72:d2:38:
                    cd:4d:cb:5d:65:87:24:42:91:b4:ab:c9:59:bd:c0:
                    b9:bd:58:2e:fc:93:81:2c:db:d2:3c:45:7e:d2:e8:
                    12:b0:4a:21:fc:2b:a3:91:dc:d7:09:ff:7d:3a:43:
                    5e:84:47:7f:ab:20:94:71:9b:46:d5:1d:87:d5:5d:
                    97:91:7e:fa:d2:02:8a:86:5a:e3:b3:4e:7c:1e:16:
                    a2:be:7e:fc:20:27:d8:a6:76:2d:f1:2b:be:db:ce:
                    a2:2a:1d:1d:f6:b3:7d:2d:e9:0a:fe:99:56:89:55:
                    cd:62:a5:e6:03:d3:ab:5a:9f:70:34:1c:86:75:3c:
                    e4:95:5b:bf:00:06:2f:cb:3f:3d:ae:72:13:ad:fb:
                    b8:e3:c9:c0:ad:57:0b:e6:a8:6e:97:ac:4e:2e:7c:
                    b1:f7:ba:f6:33:1f:ed:ad:fe:a8:33:77:df:67:a4:
                    46:78:1c:16:e6:27:c2:48:a6:4c:fd:63:96:59:ba:
                    f0:53:dc:c7:06:98:78:12:7d:1d:ea:6a:46:8c:4a:
                    cf:65:63:6f:22:78:1e:e6:77:d3:96:05:a4:aa:af:
                    3c:76:ad:44:ac:b5:f8:ed:e6:23:45:66:4c:a6:00:
                    f9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:15:6D:3B:23:D8:12:7A:7E:C2:FA:BB:2F:77:ED:9C:FA:5E:81:7E
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2EE9A7E01EA411F0AFB88E2BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cd:2b:db:67:11:05:45:2a:0c:67:13:d1:4d:36:ca:75:8f:11:
         df:56:a8:b0:ca:0a:a3:1f:7b:1b:72:de:91:ef:06:74:f1:9a:
         2e:cd:01:00:0c:a1:ac:90:47:fe:61:f2:1c:84:fb:89:5d:42:
         47:a1:71:2c:52:3b:25:44:8e:60:aa:6b:95:4d:1b:1d:ad:01:
         3f:85:75:0e:41:eb:91:89:69:1b:9a:de:b4:54:14:10:27:a6:
         03:6d:3b:5b:f6:58:b1:58:8c:7d:31:df:20:ed:13:9c:af:7e:
         52:47:2d:4e:8a:ca:1b:ee:90:f9:16:13:dd:7c:d7:7f:fa:7a:
         3f:07:17:13:08:83:aa:a8:d4:d5:83:4a:42:24:08:2b:57:1a:
         e6:07:d9:cc:99:ab:1a:71:78:0a:a4:cf:30:6e:24:0a:2a:81:
         d9:3a:3a:3f:8a:02:35:5c:f5:92:58:65:e4:e0:2e:69:44:0f:
         61:9d:3c:47:61:a0:6e:de:2e:ba:a6:5b:e2:0f:9b:cc:9a:c5:
         bf:67:10:02:fa:f5:4a:e3:5b:47:6e:b0:11:62:42:6f:ca:ca:
         24:0a:d9:5c:cf:a0:d5:dc:f7:da:64:ee:5e:f7:89:69:63:4d:
         92:b3:f6:c1:d2:b3:bf:b8:d1:86:62:7d:4f:e6:ec:fe:36:96:
         12:55:6d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:52 2026 by rpki-client