Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/97F406C8742511F08F1FCE09C4F9AE02.roa
File:                     97F406C8742511F08F1FCE09C4F9AE02.roa (raw, json)
Hash identifier:          /WkCzCxswN0z0qQBxXIf0wBOwNPWCbnexGeB7QLx/8o=
Subject key identifier:   8F:FA:90:C0:AC:4E:CA:90:5C:8C:94:2C:7E:96:A7:42:39:C6:E9:5B
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2E91
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/97F406C8742511F08F1FCE09C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:18:58 +0000
ROA not before:           Sun 31 May 2026 16:18:58 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     135223
IP address blocks:        160.187.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11921 (0x2e91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:18:58 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c5f72-58e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:68:5b:e0:88:9c:f2:3a:be:79:0a:ec:14:
                    17:0f:1c:da:b5:f7:d5:53:4c:a2:bf:c3:37:28:c6:
                    53:1b:c1:a5:7f:73:29:db:ac:56:48:9c:6a:e5:19:
                    7a:06:ac:77:d2:a3:8f:30:93:eb:3e:5f:eb:04:e3:
                    4f:b9:6e:15:5e:66:5b:16:60:51:63:02:fd:f6:1a:
                    9b:44:b7:58:d4:2d:f9:f8:8e:b9:49:56:01:a0:d5:
                    0f:2a:75:9c:6c:64:eb:02:4a:cd:0f:c8:36:0a:78:
                    12:4a:5f:2f:33:5d:83:70:f7:fc:65:cb:24:f7:bc:
                    66:03:eb:38:71:6b:df:00:12:f3:7e:19:61:9b:e4:
                    01:ea:bb:00:aa:39:d9:54:bd:f7:f5:06:36:55:ba:
                    58:98:13:10:d5:b1:e9:eb:4e:91:83:74:79:35:ca:
                    e6:03:b6:63:58:dc:79:dd:28:d0:b8:fb:43:0b:8a:
                    dd:97:6a:96:b6:5c:9e:72:a0:16:8a:bc:45:c4:95:
                    b2:e1:4b:02:a3:99:c9:ec:63:7a:77:10:0a:07:1e:
                    19:77:c3:71:a7:de:c8:22:e0:d0:c4:a9:27:33:cc:
                    55:52:32:2d:3d:06:22:f7:a4:d4:01:17:84:70:b7:
                    c0:48:44:ab:d3:51:c4:2a:14:71:6b:d8:20:13:85:
                    bd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FA:90:C0:AC:4E:CA:90:5C:8C:94:2C:7E:96:A7:42:39:C6:E9:5B
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/97F406C8742511F08F1FCE09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:42:1b:b8:ec:df:56:b5:44:16:c6:ff:4c:31:9c:83:ba:d5:
         29:08:cf:e0:81:ec:57:74:ec:d7:d0:6f:dd:79:cf:91:61:99:
         dc:1f:23:8d:0f:39:1e:e1:26:67:a8:a2:c8:bf:44:67:a3:cb:
         50:24:a7:25:a8:8d:8e:c3:09:3c:79:51:16:68:59:97:ec:bd:
         df:55:64:4a:b0:d9:d8:32:e0:84:bb:c0:3c:57:0c:d8:c4:dc:
         92:b8:f2:92:e1:3b:d3:15:c0:be:6b:cf:fd:19:a0:e4:82:d9:
         65:5e:74:09:47:ff:bc:a9:13:9e:9e:a6:90:96:1e:47:5f:8f:
         0a:b6:1d:3c:49:31:dc:bb:b7:b4:75:0c:c2:24:11:1d:12:33:
         ac:02:e4:59:9d:cc:2c:e9:9c:1f:a3:54:a1:a7:c5:4a:33:55:
         f4:e9:42:a2:86:88:37:24:35:ec:e8:59:3b:9e:c5:e4:14:45:
         70:fd:4f:9b:50:e0:4c:aa:eb:75:f5:36:86:11:b4:80:c7:84:
         2d:df:e7:e9:5a:67:61:30:cc:42:76:3a:18:86:1d:03:88:0e:
         74:e1:c6:18:88:1f:0e:e1:4c:81:f3:63:3d:1c:f2:85:b6:08:
         52:f1:65:ab:ed:10:99:44:01:59:1b:16:be:9e:e2:b3:e0:32:
         9d:48:e6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:51 2026 by rpki-client