Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DA69F07EFF3311EFB7731121C4F9AE02.roa
File:                     DA69F07EFF3311EFB7731121C4F9AE02.roa (raw, json)
Hash identifier:          phWTCFzuKs1V60NwpxYycMy0JTCO/TgOTzFi6n8ROKo=
Subject key identifier:   33:5F:A1:81:C7:C7:58:E4:4F:D2:36:E3:2A:23:18:FD:7C:57:6C:DD
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       30AD
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DA69F07EFF3311EFB7731121C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:16:04 +0000
ROA not before:           Mon 06 Jul 2026 16:16:04 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134375
IP address blocks:        161.248.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12461 (0x30ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:16:04 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd4c4-d1d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:98:df:46:c0:80:59:15:4d:3d:db:bf:34:c7:
                    d8:f1:5a:ca:a5:b0:9f:bc:ed:9c:4e:16:d1:5a:59:
                    f7:76:6f:f1:a1:45:0d:81:ab:fb:73:87:d7:d8:9f:
                    2d:16:5b:c1:da:ee:e2:9a:2e:00:fb:5e:e6:c6:13:
                    9d:e5:e6:9f:2d:f7:d7:e4:91:fc:2e:5a:62:60:48:
                    aa:9f:7b:05:cd:44:99:d8:ed:4b:e3:79:61:a0:7d:
                    d7:3b:3c:8d:a8:2b:66:ac:a6:a1:6e:49:0e:8d:2a:
                    79:cc:e7:31:7e:4f:5b:d5:fd:a3:65:36:a6:07:ae:
                    17:16:d2:e9:d0:34:1d:5b:79:40:dd:d1:75:3b:56:
                    ba:3a:33:3e:80:34:a3:e3:a5:0d:0c:ea:b4:9d:14:
                    49:1f:48:39:d0:15:9c:a9:43:f5:05:91:5e:3a:23:
                    bf:62:24:87:c5:6a:bc:85:13:9c:68:5f:0b:43:04:
                    97:83:7f:a0:77:53:32:45:0d:57:bf:dd:c8:5c:75:
                    e2:6c:e0:e2:ec:05:9e:e5:4d:88:07:22:4d:57:05:
                    5a:c4:55:da:00:99:c1:d8:f0:f9:05:f8:ec:20:be:
                    03:aa:86:3e:8c:fd:f6:03:aa:bb:93:57:05:a4:29:
                    97:a4:f4:34:b8:61:78:af:c0:b0:20:58:9b:62:14:
                    63:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5F:A1:81:C7:C7:58:E4:4F:D2:36:E3:2A:23:18:FD:7C:57:6C:DD
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DA69F07EFF3311EFB7731121C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:3b:70:de:c7:95:77:6c:2f:3e:54:07:50:aa:43:e8:dd:cc:
         d6:a0:c0:f2:62:f0:92:b1:7f:b2:b7:af:af:5d:ad:81:38:78:
         38:d8:57:35:ec:8e:bb:d9:e6:b3:ee:db:fd:cf:24:fc:ec:5d:
         d9:65:9a:0a:87:92:14:95:60:a0:1a:4d:14:b0:75:7f:8f:98:
         78:af:27:43:72:2e:ed:5c:da:14:99:b4:68:ad:0b:a4:8c:e7:
         5a:11:83:be:02:7b:60:17:5f:35:cb:d0:71:16:7d:ed:13:0c:
         79:fb:c3:55:d3:5e:9d:00:ac:4e:36:76:ba:81:05:a0:d5:66:
         6a:53:62:b6:55:9d:dc:76:b3:f6:24:34:55:69:a7:74:f9:ff:
         b3:76:2b:79:cf:ac:03:1e:52:2d:ee:59:24:ca:62:9b:5f:29:
         f7:6e:85:2f:cd:01:a6:c1:97:7e:b3:a8:6c:aa:75:89:8d:a0:
         3c:b9:5a:1a:bb:ad:d1:d2:58:ff:93:05:33:1e:35:7b:70:51:
         ae:e5:91:9f:a0:e6:bc:ae:5a:23:e9:bf:5f:23:ce:46:75:41:
         02:a5:ca:22:69:e2:85:cd:34:e8:31:f6:1a:e6:40:77:82:79:
         a0:23:75:4b:92:f7:e8:3f:5e:cb:13:ef:37:0a:f5:dd:76:9c:
         14:54:0c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:41 2026 by rpki-client