Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B177DDD0816A11EFA9CE242CC4F9AE02.roa
File:                     B177DDD0816A11EFA9CE242CC4F9AE02.roa (raw, json)
Hash identifier:          t/7Qiwta41QKoD7bJNlVz7VyNjIQdwDsMLD5ldeJzwk=
Subject key identifier:   2F:20:9B:F8:35:67:7C:6A:BF:84:94:E9:7B:1C:9B:B2:C9:A9:E6:A9
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F83
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B177DDD0816A11EFA9CE242CC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:26:39 +0000
ROA not before:           Sun 31 May 2026 16:26:39 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153224
IP address blocks:        160.187.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12163 (0x2f83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:26:39 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c613f-2916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:88:d6:a6:cb:71:1b:8b:f0:78:d6:f7:99:b6:
                    f9:c9:dd:15:83:a6:8e:2b:af:92:56:5c:e7:cb:ac:
                    72:b5:f2:bd:39:f2:78:46:ff:f1:a0:c4:3b:fa:4f:
                    a5:37:2d:7b:8d:c0:5d:9a:db:9c:63:7a:6a:89:c2:
                    25:d9:d4:7a:62:72:c2:ee:35:14:6d:cd:a6:96:60:
                    ae:43:88:8c:fe:e5:6d:4b:0d:20:e2:d9:84:12:09:
                    74:c8:1e:b8:61:3f:c0:d1:f1:3c:6f:bb:25:f4:1d:
                    5a:29:3a:5e:c6:f7:68:00:9e:a1:0b:c5:43:27:b4:
                    a5:7a:8f:78:99:20:86:86:5b:db:73:83:59:8a:84:
                    98:df:c6:96:80:77:ac:9d:06:4e:29:81:5e:15:fd:
                    99:61:14:bd:90:9d:2e:94:46:c6:98:60:26:b9:22:
                    be:64:0f:91:79:2d:96:5e:79:64:61:32:a5:36:b7:
                    d7:69:75:3d:f0:cb:60:60:b6:51:1a:de:f1:3a:b3:
                    12:61:8c:72:87:47:4f:57:ea:ed:d9:57:09:af:6b:
                    90:59:95:26:6c:67:73:50:c7:f6:09:5e:0d:92:b4:
                    78:c0:c9:1f:bf:be:fa:59:23:05:18:01:2c:b7:9b:
                    9c:a5:88:f8:be:e9:c4:08:fa:13:7c:3b:f5:06:af:
                    bd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:20:9B:F8:35:67:7C:6A:BF:84:94:E9:7B:1C:9B:B2:C9:A9:E6:A9
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B177DDD0816A11EFA9CE242CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:d2:04:16:f6:cb:ea:6b:9b:e5:ab:9f:e7:0c:f8:dd:69:d0:
         cd:5e:5c:da:54:66:b5:b7:99:c1:c7:b2:fd:dd:d5:ad:0f:2b:
         da:2f:16:73:07:e5:1d:4b:1b:47:d7:02:cb:cc:a0:77:7b:ba:
         36:1b:96:34:3d:8c:6d:24:58:bb:fd:ef:0c:71:87:79:64:bd:
         6d:f2:75:4f:f2:00:c2:8d:58:bb:79:a4:87:54:fc:8d:02:3b:
         e1:58:1b:c7:fc:83:3a:01:75:40:b7:40:ae:ce:db:15:57:63:
         3c:be:32:e0:b9:a0:dc:c5:a0:c2:cb:70:56:59:a5:5e:bc:10:
         e6:5c:87:a9:44:46:c7:6c:89:fc:5e:c2:ce:aa:e9:39:cc:11:
         ca:71:1c:ce:f2:d0:f0:85:e8:49:65:25:82:18:e7:66:0e:7f:
         17:13:3d:9e:25:79:ce:33:0f:bb:bd:69:be:d4:b5:97:45:b4:
         d1:e2:e1:36:22:51:c3:c9:a0:0a:a8:3b:c3:ad:e7:9a:d2:f6:
         c2:7e:7b:02:ef:cc:26:ec:1a:10:97:f2:70:9e:7d:9a:e7:9d:
         ca:5b:25:c6:9d:73:e7:9e:8c:31:e0:6e:8a:b3:38:0b:33:2c:
         c7:1c:ec:6b:80:c9:4c:43:49:0d:04:46:d3:53:d1:1b:fb:b1:
         27:d0:13:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:24:13 2026 by rpki-client