Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5B2F74AC759811EFB4EBF76EC4F9AE02.roa
File:                     5B2F74AC759811EFB4EBF76EC4F9AE02.roa (raw, json)
Hash identifier:          C0PedVmxX3QJHiFmYU6VGjumbnTfFDXRE2tzGP5gOS4=
Subject key identifier:   17:FE:CD:5B:25:76:99:06:6A:11:83:8A:19:8E:45:1F:AE:CE:D9:FC
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       31A8
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5B2F74AC759811EFB4EBF76EC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:24:23 +0000
ROA not before:           Mon 06 Jul 2026 16:24:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153216
IP address blocks:        160.30.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12712 (0x31a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:24:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd6b7-e51a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:68:3b:a7:ad:90:3c:15:c2:cc:a0:23:59:dc:
                    1a:cf:c3:cf:88:25:fd:9c:8f:ee:44:41:50:6f:45:
                    44:cf:17:35:2b:ee:df:0b:c2:32:9d:e0:b0:3d:ed:
                    8a:a9:eb:cc:8a:73:76:db:76:d4:81:f6:ad:e9:d5:
                    37:17:0b:b8:c1:ef:38:7a:c6:a6:a8:01:32:c2:ab:
                    08:a2:dd:e5:8a:a9:00:87:55:67:14:61:3f:34:c3:
                    a2:f2:f2:0f:1d:2f:8b:03:59:d7:55:bd:6b:1f:a2:
                    58:25:6d:11:75:64:a8:53:f3:ff:46:a8:38:c7:37:
                    80:ca:c4:08:5c:cc:41:b5:40:82:83:e3:3c:bb:be:
                    e4:3c:47:3d:cc:6d:39:81:2a:b0:0e:76:52:1b:dc:
                    d2:19:8e:10:1c:07:d6:f5:42:0e:55:23:0f:52:e5:
                    ce:5f:d3:6e:7a:84:79:c1:d5:8a:02:41:4a:c2:76:
                    ca:7f:3b:4e:30:da:95:2d:f9:01:44:b5:43:d7:05:
                    5b:92:86:e5:79:75:3f:45:98:9e:59:ab:b7:c1:19:
                    d6:47:bb:6e:a9:05:27:e9:76:e7:24:02:b5:5a:c7:
                    b1:50:58:04:c7:64:83:c3:31:18:66:c5:80:fd:4e:
                    fe:e8:c0:ba:59:46:90:4b:3f:94:54:57:53:ef:46:
                    0d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FE:CD:5B:25:76:99:06:6A:11:83:8A:19:8E:45:1F:AE:CE:D9:FC
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5B2F74AC759811EFB4EBF76EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:94:e2:3c:39:2c:49:db:54:d2:1f:ec:0a:d5:ee:74:fb:10:
         98:e6:2d:a3:eb:65:f6:77:c9:36:16:58:48:cb:4e:86:32:1a:
         98:b1:81:8d:c4:ac:bb:34:6d:ef:83:cd:91:95:9e:bc:87:35:
         f1:bf:ef:a6:a9:21:7b:1d:47:ff:ea:32:d0:cf:e7:a0:11:37:
         fe:bf:af:d8:31:21:67:32:67:9c:8c:03:34:80:cf:4c:f9:bd:
         04:10:ae:cd:79:57:4b:6e:c2:17:78:b3:29:df:bb:da:3a:19:
         03:12:56:e2:39:f8:36:b6:1f:e1:e5:4d:16:a2:30:0d:ae:d8:
         98:2b:1e:73:9b:2f:cd:fa:5c:99:f6:26:22:d0:0d:bf:3f:8b:
         46:d4:eb:4a:1e:a6:cd:0e:a8:8b:59:d8:81:9e:d3:cb:1e:59:
         77:42:87:7e:a2:8f:64:c6:de:8b:ae:0d:1c:ad:dd:e7:57:14:
         7e:72:44:db:1d:63:54:f7:59:d0:e3:de:1b:7b:e9:85:f4:33:
         6e:04:ff:84:8b:b2:26:63:43:b5:03:9e:b1:5e:44:04:cf:50:
         64:34:a0:45:fc:23:30:94:8c:51:db:6f:1c:43:aa:bb:7b:28:
         86:1c:ec:ec:a1:63:ee:dd:34:f9:11:50:8a:90:b2:45:72:f4:
         ef:70:64:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:42 2026 by rpki-client