Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4434A606EF8A11F09F3C2105616F56BC.roa
File:                     4434A606EF8A11F09F3C2105616F56BC.roa (raw, json)
Hash identifier:          87nPgk3ug/Xp60IHCy6Ahbeqy5Ygs/Hup9rEognw9b8=
Subject key identifier:   90:F8:EB:56:D4:0C:D8:95:3A:90:72:35:65:04:3F:7E:59:07:A2:0C
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       31BD
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4434A606EF8A11F09F3C2105616F56BC.roa
Signing time:             Mon 06 Jul 2026 16:25:05 +0000
ROA not before:           Mon 06 Jul 2026 16:25:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153252
IP address blocks:        160.191.108.0/24 maxlen: 24
                          160.191.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12733 (0x31bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:25:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd6e1-b423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1e:68:b4:66:81:97:31:94:14:3f:06:30:07:
                    f1:3b:9c:ed:73:35:d6:c9:fa:b5:3b:8e:7d:2c:b5:
                    54:46:fe:84:53:af:60:d7:d7:d2:4a:d8:ec:37:04:
                    d8:9c:6b:cc:c7:3c:89:5c:20:07:ce:38:a8:43:07:
                    b7:c4:15:7f:2d:e9:59:9a:67:35:cb:ef:80:a6:58:
                    ba:03:b2:f8:81:b2:6d:d7:25:1b:4e:0f:a9:18:09:
                    1d:9b:89:9e:e6:eb:5f:93:4a:dd:b6:93:a3:8f:79:
                    3c:39:1d:a3:c0:16:42:29:3f:ad:e7:e6:75:f1:f4:
                    f6:98:84:65:43:f8:e2:98:80:c4:55:97:11:04:2f:
                    dd:8f:7d:c5:a9:19:f3:84:11:11:80:85:21:e0:7f:
                    ac:bb:b8:c8:1d:94:e1:97:97:dc:f8:b7:3b:0f:26:
                    23:ef:3e:9c:6d:fc:ea:f9:12:bd:80:b9:f0:43:66:
                    2f:87:04:98:5c:6f:ec:ca:2e:01:6f:e8:3f:38:dc:
                    a0:82:d5:a3:dc:b3:bc:f3:9e:38:58:79:fd:64:a8:
                    50:ad:ee:2a:db:5f:99:e9:0b:69:87:41:10:ae:1c:
                    03:18:8e:81:ef:2e:b5:ec:ae:30:7d:81:d8:95:2e:
                    86:f9:a6:fc:7c:50:f0:a2:37:7a:78:e3:09:3b:8c:
                    b4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F8:EB:56:D4:0C:D8:95:3A:90:72:35:65:04:3F:7E:59:07:A2:0C
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4434A606EF8A11F09F3C2105616F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:fa:89:8e:0c:70:62:f1:06:f1:c0:b2:f3:06:3c:b0:45:3c:
         ac:5f:06:e8:1a:c8:56:4f:7e:31:62:1c:dd:74:13:ff:09:fe:
         ad:d1:ce:99:ed:11:93:bc:83:74:cc:b1:04:d6:25:f5:cd:45:
         48:2d:ae:29:ad:b5:06:9d:a6:38:5d:ad:f7:18:58:59:28:5e:
         e7:03:bc:f3:df:05:0e:b2:b8:bb:e5:ae:62:28:37:b9:81:31:
         5f:3f:5e:bd:f6:0a:3a:0a:52:2a:b8:34:40:91:62:09:1c:50:
         e4:1e:18:da:0a:6e:5d:c6:0c:d7:a1:e1:60:69:7c:64:8a:27:
         3f:cd:02:ac:af:6e:f1:6b:81:05:a9:86:2f:d6:b7:16:69:f3:
         5d:93:c1:d8:22:c6:e3:1e:c9:17:6c:0c:ac:59:b0:3c:2d:e4:
         b0:56:8b:c0:95:21:65:d6:eb:ea:b6:80:a4:3a:58:f3:d1:06:
         0d:b3:2c:89:e0:e9:ff:bb:7d:2e:a4:9e:3f:34:f1:9d:ff:4d:
         f9:5b:b2:34:12:af:0c:9f:6b:57:73:13:dd:f1:0b:5c:31:7b:
         25:1c:fc:a6:70:6b:9f:4b:8f:2d:fa:aa:d4:93:d7:a0:b8:c6:
         f5:82:47:61:92:5b:30:da:94:af:b0:fd:65:15:e0:94:95:8d:
         4c:64:c5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:34 2026 by rpki-client