Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6985399AAE1611EFA961AF3BC4F9AE02.roa
File:                     6985399AAE1611EFA961AF3BC4F9AE02.roa (raw, json)
Hash identifier:          IyRqIWeAaLBzwgtVOGFQekqfZPXF7sZBUwxZcrbIcKo=
Subject key identifier:   D6:C9:CD:8A:C4:17:C4:20:71:24:BF:B3:65:C8:D1:12:7B:89:1B:D5
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       30AE
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6985399AAE1611EFA961AF3BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:16:06 +0000
ROA not before:           Mon 06 Jul 2026 16:16:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134858
IP address blocks:        160.187.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12462 (0x30ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:16:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd4c6-2d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b2:e7:34:61:b3:28:38:49:b8:22:a6:8e:7e:
                    4a:66:fd:2a:14:19:8a:7e:4b:be:ba:cf:a6:ad:38:
                    c7:56:02:4a:79:cb:07:4e:6e:77:fd:77:73:cf:ef:
                    fa:f3:44:d7:04:b7:db:3a:9c:89:f6:d4:29:79:b3:
                    88:5e:23:06:c0:f5:93:9e:c4:3a:33:d5:71:5f:cd:
                    91:33:b2:c4:60:d2:0f:18:04:4a:00:73:ed:3e:2e:
                    fe:9e:5a:17:6b:3e:a8:06:59:b1:8d:69:82:e8:25:
                    73:fc:35:75:3f:f1:04:1a:6f:24:26:5b:f7:09:4a:
                    8f:b8:a6:99:fc:91:7f:76:99:5f:15:cf:ae:63:67:
                    09:67:03:a8:a0:d7:e2:fb:dd:be:e4:0f:b0:39:06:
                    8c:5c:ba:d6:fd:6e:38:aa:92:dc:e7:bd:2c:0c:e3:
                    f4:8a:1d:8a:ef:f4:17:a6:16:7f:fb:fc:5b:8b:0b:
                    f3:8d:f5:51:28:01:90:b5:52:ec:d0:b0:68:a0:3e:
                    1d:48:6d:f4:61:cb:de:89:c4:5d:de:09:0c:5a:24:
                    35:03:9b:47:43:a2:c1:78:0a:68:6e:a9:46:34:7b:
                    77:05:80:24:59:72:e0:be:0f:df:d3:67:00:40:80:
                    06:11:f6:f8:f6:22:b8:5c:6b:10:81:65:d9:ca:8b:
                    d8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C9:CD:8A:C4:17:C4:20:71:24:BF:B3:65:C8:D1:12:7B:89:1B:D5
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6985399AAE1611EFA961AF3BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:0e:3e:c5:68:f8:99:6c:81:bf:68:1a:c9:30:9d:68:d1:9a:
         62:ef:61:5e:bd:2c:6f:39:e3:16:4a:6c:c9:e7:82:b7:81:27:
         b8:c7:3b:50:40:6a:09:e9:9a:71:f6:2b:55:1c:bc:99:7a:64:
         1b:44:da:46:bf:c6:0d:70:b0:b7:a5:82:86:8a:ca:d0:da:60:
         e3:35:57:9a:61:5b:cf:b6:ad:7e:a2:d6:ff:ae:20:33:d1:68:
         7c:39:74:02:44:52:5c:92:9d:18:ef:08:3c:7b:6b:dd:9f:7c:
         e7:cf:84:1b:eb:3c:de:f0:8c:84:d6:a2:b4:7b:72:19:bd:70:
         38:9f:0d:6c:8d:14:e5:6c:1e:b8:74:61:2c:a9:7d:38:4d:44:
         a9:89:40:66:db:e5:da:89:5a:57:ce:30:80:95:01:eb:df:2a:
         f4:6d:6d:a4:cf:79:68:dd:4a:be:82:87:1d:89:32:af:57:7c:
         68:1b:06:f2:78:72:dc:f8:45:d3:83:f5:6a:1c:b5:fe:9c:ce:
         ba:2f:7f:e7:ee:df:5e:eb:c6:6c:86:aa:5a:21:d4:d1:f5:0e:
         89:25:9a:1d:b5:2d:21:ff:ee:b0:92:84:05:09:e1:c7:70:53:
         24:6f:ea:13:fd:db:3c:cd:a9:74:82:ae:11:b2:32:e4:7c:ee:
         31:b8:a8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:09 2026 by rpki-client