Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/676D2776AD4911EFB10AD13FC4F9AE02.roa
File:                     676D2776AD4911EFB10AD13FC4F9AE02.roa (raw, json)
Hash identifier:          KWNNvqyKhKyPpuecZVOXyJBxa/cSb1BDHDCZUevXId8=
Subject key identifier:   AA:D4:97:10:09:47:1A:83:AB:86:5B:48:E1:16:AA:A2:B1:8A:F0:51
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       30C3
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/676D2776AD4911EFB10AD13FC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:16:49 +0000
ROA not before:           Mon 06 Jul 2026 16:16:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135799
IP address blocks:        160.187.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12483 (0x30c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:16:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd4f1-9657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:40:d2:ef:62:0b:06:a8:bd:05:37:1d:8b:c7:
                    d6:df:43:df:a5:da:50:19:29:c5:69:e0:1c:b7:a4:
                    75:ab:42:a0:bb:15:fc:07:c9:c8:f7:9c:a5:a4:a9:
                    e2:60:25:dc:eb:ab:ed:33:ed:b7:e7:78:8c:7d:61:
                    49:48:09:1b:37:38:92:5a:a4:89:da:a1:22:be:a0:
                    af:9a:67:0d:3f:40:94:2e:1a:07:33:30:a5:37:25:
                    d6:9a:50:b2:ea:90:87:85:a8:cf:fd:9a:53:b7:82:
                    0e:64:13:23:78:ce:e6:13:e1:71:c3:52:e2:97:85:
                    8c:3b:f6:49:6d:c3:d5:07:ad:47:e1:8c:7e:6d:e9:
                    a1:09:99:97:60:fd:57:a1:82:b3:84:e0:31:88:1f:
                    8a:6c:05:20:09:5f:8a:ac:25:c6:a7:c6:df:64:d5:
                    b6:16:74:06:9c:c4:6f:61:e3:6c:9c:87:0e:c8:27:
                    eb:81:c5:d0:41:fb:25:43:05:3d:46:72:3e:98:1a:
                    d3:1a:ed:11:45:7e:59:c2:21:64:51:aa:22:d1:a5:
                    c3:3c:37:80:6f:2e:63:f6:6c:f3:d2:01:72:83:50:
                    fb:36:93:1a:6a:a0:3f:17:b8:c2:ee:f5:6e:27:94:
                    ce:98:96:6a:bd:ce:00:26:6a:c1:60:e2:60:69:97:
                    a4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D4:97:10:09:47:1A:83:AB:86:5B:48:E1:16:AA:A2:B1:8A:F0:51
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/676D2776AD4911EFB10AD13FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:99:79:d0:c2:ef:32:79:23:63:59:aa:b5:58:f7:8c:ed:60:
         60:9d:a4:0a:2f:7f:2f:34:ed:11:25:79:bf:b2:d9:f1:0c:87:
         45:60:58:9d:fb:b2:46:76:eb:6c:89:ea:53:f6:31:93:01:e3:
         02:f2:58:2a:93:5c:1d:bc:4f:d2:92:7b:1b:ae:69:87:b0:7e:
         3d:0f:06:88:c4:eb:4a:b7:31:fc:ed:8c:10:36:0b:69:70:68:
         7e:86:f7:6f:28:8d:03:3f:e8:7c:f0:e0:f9:f5:b4:d5:11:8d:
         b5:37:4c:56:60:7e:8e:0b:0f:44:4a:a1:0f:0d:09:cb:d3:40:
         a5:cf:68:bb:a9:b4:e5:92:16:a1:18:23:c0:d0:ad:c6:fd:18:
         cc:c3:7a:45:fb:8b:f0:e4:71:a2:da:2f:17:2e:03:ff:77:a8:
         7a:3a:5a:bc:5f:00:59:11:97:96:40:1c:40:5e:0c:ad:7b:a3:
         bb:f7:8e:bc:74:c7:58:bc:44:af:5c:ef:03:52:b0:e5:43:40:
         53:6e:7c:50:25:e0:64:7e:e5:e6:11:4b:75:ad:65:65:8b:15:
         e0:31:f9:0c:9c:00:4b:44:db:95:8d:a8:68:0a:c1:97:aa:86:
         4a:b2:2c:fe:75:6b:cc:77:b8:6f:4a:fb:db:f5:58:5f:63:c1:
         31:9a:eb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:27 2026 by rpki-client