Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6A0ED74444D611EFA226D072C4F9AE02.roa
File:                     6A0ED74444D611EFA226D072C4F9AE02.roa (raw, json)
Hash identifier:          aq5ip2KiroSpYAXE/mDxxRNfrDFJokcz4h/uNuJKScs=
Subject key identifier:   EF:0D:66:9D:A6:2D:7D:28:D7:CA:85:A0:71:33:0C:1D:B6:2F:A6:A7
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2FFF
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6A0ED74444D611EFA226D072C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:30:45 +0000
ROA not before:           Sun 31 May 2026 16:30:45 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     58678
IP address blocks:        157.20.27.0/24 maxlen: 24
                          160.25.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12287 (0x2fff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:30:45 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6235-ea0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:87:42:f8:a1:d6:3e:21:5d:47:0e:ef:5c:6f:
                    06:c4:5a:67:b0:9a:13:2e:21:25:52:fe:d8:b2:7f:
                    ba:5c:6b:90:07:b9:0b:17:90:62:0d:f3:09:ca:d4:
                    d1:4d:fa:50:98:04:ed:d9:8f:3e:c8:ea:46:8a:0f:
                    62:f6:c5:da:31:76:1f:14:38:e4:f9:ee:ad:2e:e3:
                    e2:ba:7a:9e:82:fa:03:c0:86:5a:3d:31:12:ab:ff:
                    90:3f:ad:db:f4:b6:32:24:46:13:3f:93:d4:fd:8b:
                    94:8f:9f:14:c1:6d:7b:f1:67:59:41:55:7b:a7:93:
                    a5:6e:85:31:5e:b0:18:78:cc:53:d2:53:05:bd:c0:
                    b6:5c:28:9b:d8:49:fc:d4:3f:a4:7e:35:69:a6:10:
                    ca:27:64:61:f4:9f:90:0e:c8:cb:11:3d:1d:e2:ba:
                    47:6b:f4:2f:68:67:4e:69:bf:63:a3:1e:6b:91:33:
                    31:d6:86:53:a8:d3:fc:ab:a1:6d:06:41:f4:6d:a4:
                    5c:fc:b8:93:60:dd:52:e3:d4:76:c2:01:db:53:87:
                    44:b3:b6:de:72:f1:f7:f8:1e:c8:d5:85:14:9c:e7:
                    e2:b4:3b:f9:7b:62:8e:3f:26:7d:dd:b4:2e:17:85:
                    66:6d:cc:15:01:b3:ea:48:11:d4:ac:ff:29:f6:60:
                    1a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0D:66:9D:A6:2D:7D:28:D7:CA:85:A0:71:33:0C:1D:B6:2F:A6:A7
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6A0ED74444D611EFA226D072C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.27.0/24
                  160.25.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:23:4a:3a:33:fb:58:bb:f1:27:9d:2d:e9:6b:97:f3:4f:92:
         91:15:b7:53:9d:4f:46:46:f5:48:61:6c:45:ee:d2:a1:13:ef:
         16:ba:9c:86:8d:e4:8e:a6:fb:f2:4d:ed:fe:c4:dd:48:b6:91:
         60:8e:cd:6f:22:47:eb:6f:15:fe:94:c8:da:68:92:2e:03:bc:
         fe:0d:5a:95:be:81:8b:bb:33:6c:a2:f2:7f:0c:0a:9e:94:cd:
         30:41:3d:e9:0f:7a:21:8f:0c:c2:d8:ce:33:98:b3:b8:1d:14:
         25:eb:68:e4:7c:7b:14:e3:2c:5c:32:cd:bb:83:27:35:4c:b3:
         19:45:97:b6:ff:5b:d8:21:1e:f6:e1:7c:1d:fe:55:d7:e9:0b:
         42:6e:db:91:63:bd:15:f5:cd:fe:a0:2f:85:91:f7:89:21:8c:
         c7:bb:63:ec:6a:71:c1:ed:18:47:00:17:3d:be:c4:7c:5e:c1:
         f4:7d:eb:fb:3d:6e:5e:50:b0:1c:e8:fd:9c:fb:68:8d:da:28:
         d9:b7:aa:27:8b:bf:6b:68:f3:01:1c:91:8d:85:0f:8f:33:af:
         9a:c5:33:66:70:97:30:51:20:6f:b3:d8:ec:81:33:ae:10:23:
         8e:fe:2a:13:58:89:1f:db:0f:db:71:d7:9f:41:09:54:48:d9:
         58:3b:c0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:40:34 2026 by rpki-client