Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9E442C70DD3411EF80B4C820C4F9AE02.roa
File:                     9E442C70DD3411EF80B4C820C4F9AE02.roa (raw, json)
Hash identifier:          CBXR6KzkvuyasrwoFmZq2SCO2/u5hX8l60W3oSFtEFY=
Subject key identifier:   AD:F7:A7:C0:F1:DC:A0:30:74:7C:47:16:43:A9:AB:5A:52:B2:98:67
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       301D
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9E442C70DD3411EF80B4C820C4F9AE02.roa
Signing time:             Mon 01 Jun 2026 12:14:06 +0000
ROA not before:           Mon 01 Jun 2026 12:14:06 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153274
IP address blocks:        160.30.84.0/24 maxlen: 24
                          161.248.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12317 (0x301d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jun  1 12:14:06 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1d778d-de3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5c:4f:aa:a2:66:37:55:f8:34:56:26:e2:4c:
                    9d:c3:5f:92:e8:ef:91:ec:42:c4:5e:9e:f1:19:6f:
                    29:97:3e:89:4f:f0:95:dd:96:82:84:c2:78:dd:e9:
                    90:83:ea:c4:29:75:f8:0f:0c:fc:bd:ae:df:01:42:
                    b7:09:a8:8c:49:d8:5a:91:df:4d:40:e5:c6:12:f3:
                    d0:67:ba:c9:21:83:46:8b:2d:b3:43:3c:7d:67:7c:
                    d4:99:03:19:e4:52:65:fb:33:6e:73:a9:06:d1:28:
                    cd:0b:ce:d1:62:67:dd:f9:ce:5a:9d:d1:3a:af:b6:
                    f8:c7:ef:d4:a7:cf:94:cc:9e:40:14:10:dc:24:ff:
                    f7:5c:9e:cb:41:92:f7:b7:d6:86:bd:78:f2:31:3f:
                    8d:50:3a:89:3f:2d:33:40:c8:ba:68:ef:13:6a:40:
                    14:89:29:98:dc:fe:a6:e2:82:c2:ff:45:aa:61:f5:
                    ad:91:cb:f3:03:d6:a5:9e:d6:fa:aa:09:e8:0d:d1:
                    10:07:67:91:e8:a5:4a:b7:62:3d:44:22:71:b9:22:
                    c9:2e:d7:da:95:69:20:af:02:e0:b3:8a:f0:c3:24:
                    e9:f9:a7:72:d6:c8:c3:61:35:3a:11:1e:26:7f:db:
                    01:67:12:67:89:e6:1c:c2:81:be:7a:e0:79:63:09:
                    17:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F7:A7:C0:F1:DC:A0:30:74:7C:47:16:43:A9:AB:5A:52:B2:98:67
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9E442C70DD3411EF80B4C820C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.84.0/24
                  161.248.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:e0:85:32:54:db:0c:8a:04:7e:86:a6:d7:bf:22:bc:31:8d:
         28:28:85:8d:0b:24:08:f8:5c:19:95:51:f5:22:ed:ca:19:50:
         18:b7:41:e9:d4:9a:e1:84:7b:42:8b:93:d4:1b:cc:3b:48:2a:
         7d:09:2f:fd:a0:36:d2:86:c5:e7:fd:eb:f8:11:23:b2:09:4a:
         aa:b0:26:86:14:18:8f:8b:db:38:2f:5f:ad:1a:65:eb:81:5a:
         23:a2:67:52:79:49:0f:6f:21:02:a8:19:df:0e:b3:89:0a:9f:
         39:29:94:4a:63:a0:2a:50:6a:1c:18:b6:1a:59:22:72:4c:f4:
         00:77:1c:fa:03:f8:0d:6d:df:c4:86:cb:9d:be:a6:49:ff:81:
         c8:8e:80:96:6d:f2:d4:0e:18:e3:2f:a1:86:33:1c:45:b0:06:
         f7:d0:a6:58:6a:2a:82:89:73:cb:69:07:65:ae:a9:94:b4:eb:
         ff:61:a1:5f:90:59:99:49:7d:54:c9:75:d4:f5:31:99:2a:2b:
         51:2a:34:2d:e7:c0:9f:53:e4:b3:f0:b9:a3:61:78:7c:51:63:
         2f:44:e5:cf:a3:77:50:49:e9:17:27:39:4b:07:46:30:3b:5d:
         0e:cd:70:7e:bc:80:da:3e:61:c8:10:82:73:a1:f5:3a:bb:bb:
         9f:f3:ee:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:29:20 2026 by rpki-client