Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E3EF319A4E3F11EFB7712730C4F9AE02.roa
File:                     E3EF319A4E3F11EFB7712730C4F9AE02.roa (raw, json)
Hash identifier:          htmXC6spRbqsiptaqJ5MzSuyQG3Rz6yOjJZg72xZUJk=
Subject key identifier:   E2:27:68:8E:26:4A:DA:DF:1B:B3:76:56:0D:53:90:50:D1:23:9E:AB
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3232
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E3EF319A4E3F11EFB7712730C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:28:58 +0000
ROA not before:           Mon 06 Jul 2026 16:28:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     59191
IP address blocks:        160.25.106.0/23 maxlen: 24
                          160.30.116.0/23 maxlen: 24
                          160.187.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12850 (0x3232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:28:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd7ca-2131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:2f:84:50:fe:b8:79:ad:c4:3f:9b:28:ae:
                    8b:b5:3d:30:64:ce:5a:8b:04:24:12:03:94:6b:f1:
                    cb:1a:42:c0:e3:82:4a:eb:f5:38:b8:ab:bb:b0:54:
                    ee:6a:02:45:cf:de:27:fe:71:83:7c:b6:67:86:1c:
                    e4:88:7d:93:c5:2e:1f:eb:f7:9e:ba:97:19:da:55:
                    10:bc:71:72:cb:58:ae:ad:ae:fd:e5:55:b7:1c:85:
                    61:13:b6:98:ca:ad:b3:87:8a:9f:92:4a:fd:81:47:
                    a1:49:e5:1e:b0:97:a5:26:8b:6d:1d:af:da:36:5b:
                    a7:95:41:54:87:c0:e2:7c:3b:8a:9a:55:0f:28:b1:
                    20:91:42:23:fe:01:31:fd:9f:c9:61:b1:1a:2c:e6:
                    ff:3b:af:2b:a4:be:bc:b6:7b:a4:8a:fd:8c:7d:14:
                    b9:31:bf:d4:78:1e:bc:15:99:57:85:3d:37:58:21:
                    36:70:47:09:45:b6:ee:00:c4:3a:ea:fc:a6:40:f2:
                    ef:36:25:73:ba:47:12:c3:43:3b:c0:e9:49:6d:7c:
                    4e:37:0c:15:f4:73:f8:d1:b8:95:6b:bb:bc:60:0a:
                    df:a3:13:bf:64:44:ca:f6:05:b1:ec:cc:45:06:41:
                    a6:52:2c:3a:19:2a:00:20:cb:86:b5:7b:81:3d:84:
                    15:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:27:68:8E:26:4A:DA:DF:1B:B3:76:56:0D:53:90:50:D1:23:9E:AB
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E3EF319A4E3F11EFB7712730C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.106.0/23
                  160.30.116.0/23
                  160.187.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:78:d3:9e:bf:b2:50:b3:de:22:5a:b9:be:3a:c7:26:82:8a:
         6f:67:27:39:ba:68:3a:b4:75:f2:04:4d:d4:70:c4:1e:57:1d:
         f2:a7:30:b8:67:7e:34:96:4c:bf:0c:47:5d:51:23:6c:ca:fc:
         da:6f:fc:3c:6a:2c:b5:e5:7a:23:9c:11:fb:c6:2a:7e:20:9a:
         10:d1:a4:cd:43:f0:5d:b3:0c:58:98:2e:f1:9d:d6:09:d6:83:
         c1:67:df:35:e7:98:6b:59:fd:08:44:cd:eb:94:06:50:70:0a:
         b6:18:d1:a4:8b:9e:27:43:a3:2c:aa:b9:74:a4:7b:29:2f:9c:
         61:d4:88:86:2e:98:c4:e5:2a:27:22:c1:0b:57:29:b6:8d:58:
         b2:a0:1d:4a:fa:4c:97:2c:e0:2b:ee:5d:c2:b3:ec:b6:c8:0e:
         dc:67:8c:19:b6:13:36:69:a5:9f:fc:31:07:63:68:8b:a1:26:
         21:19:33:53:10:16:23:bf:ce:07:fb:32:49:cd:71:99:85:b3:
         d1:80:85:8f:4a:7f:81:83:fb:cf:c4:c2:7b:d1:94:02:fb:1e:
         b3:ee:78:c5:f9:ef:b2:d9:97:24:dc:82:55:8c:5b:d6:cc:67:
         fa:88:1d:36:13:80:43:00:6b:f6:3f:fe:f4:84:63:5f:77:94:
         e5:83:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:25 2026 by rpki-client