Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EF1206B8492B11F19C58D165A8833773.roa
File:                     EF1206B8492B11F19C58D165A8833773.roa (raw, json)
Hash identifier:          2hdT6SfL1pEXcG3ULQVfS3WrPv3AFc/lLNMssUAX1H0=
Subject key identifier:   60:F7:93:39:68:FC:CE:47:87:77:24:9D:CB:06:08:D5:B2:F1:20:52
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       301B
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EF1206B8492B11F19C58D165A8833773.roa
Signing time:             Mon 01 Jun 2026 11:57:50 +0000
ROA not before:           Mon 01 Jun 2026 11:57:50 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     134303
IP address blocks:        144.79.226.0/23 maxlen: 23
                          144.79.226.0/24 maxlen: 24
                          160.25.110.0/24 maxlen: 24
                          161.248.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12315 (0x301b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jun  1 11:57:50 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1d73be-e056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:08:34:5d:ca:d6:6d:47:3c:d3:96:97:d1:5f:
                    ff:ab:28:db:68:b8:2e:8c:24:c1:ed:1b:a0:b5:d2:
                    06:ce:b3:45:1e:d8:83:05:04:03:50:9e:a1:6c:ac:
                    97:6d:02:4e:7b:f9:ca:1c:af:2d:f3:db:53:16:e8:
                    61:cc:88:1c:23:e8:fc:23:3d:ed:74:b7:00:8d:d9:
                    d2:b4:20:72:38:ee:3e:d2:5e:0d:c8:1b:d4:b9:d3:
                    f7:8a:a3:bb:0e:2c:2c:05:fd:73:6f:b7:16:99:aa:
                    06:3f:ec:ce:01:e9:ca:50:9b:4c:39:f3:6d:6b:54:
                    4a:ec:4a:e4:a3:2c:3d:98:d0:4d:e0:37:03:67:77:
                    90:a6:a0:b8:51:a6:fc:ed:d5:1d:ed:43:b7:45:93:
                    f6:d9:33:c5:71:72:d0:fb:d0:ef:0e:a5:0d:ee:f9:
                    dd:c2:96:05:0a:40:b9:36:3c:b3:f6:c7:98:76:3f:
                    0d:1d:d2:94:fc:fa:27:e9:bf:8f:28:3c:ad:12:4b:
                    b3:00:2e:45:aa:ef:b2:81:0a:09:cb:79:e2:d0:b4:
                    f8:53:2b:97:04:68:c9:6a:ff:50:b2:bd:32:ff:3c:
                    0c:9a:95:94:5b:f7:41:d3:5b:6b:3a:b5:5c:34:51:
                    dd:05:7a:c8:38:a5:a7:9b:f8:2a:9a:87:bb:f6:db:
                    fb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F7:93:39:68:FC:CE:47:87:77:24:9D:CB:06:08:D5:B2:F1:20:52
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EF1206B8492B11F19C58D165A8833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.226.0/23
                  160.25.110.0/24
                  161.248.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:1a:56:cd:97:43:f2:8b:2b:b2:10:d3:65:98:02:85:06:55:
         ab:c6:65:e2:0c:07:1e:3c:31:53:9b:7b:bd:95:c5:c9:c4:fa:
         6c:1d:59:7c:9c:74:05:50:1e:00:42:5c:85:32:86:04:66:8e:
         c5:a2:a1:c7:a1:ad:24:a3:42:1f:b3:23:5f:0c:38:d4:87:a3:
         49:46:ca:b3:b3:98:6f:95:4f:bf:8b:6a:d3:d0:8a:70:a1:f2:
         a7:47:a5:93:08:92:81:42:28:1a:61:9e:af:fb:21:56:90:88:
         f6:e4:96:6f:57:b0:0d:62:90:55:33:aa:71:33:15:2a:a8:a1:
         58:ed:90:1a:e4:1f:c7:18:db:e0:6a:ce:cf:0f:b2:dc:13:98:
         f4:62:c7:c3:be:47:39:ed:67:d3:8b:ab:44:2c:d0:d9:f1:d5:
         7d:16:fc:dd:11:4f:24:d8:4b:ee:79:8d:9b:aa:3e:ff:77:e2:
         8d:9b:6a:3b:6c:e6:29:5d:e9:bd:9e:d2:d4:0e:d7:a4:ff:b8:
         11:05:99:03:bb:41:d8:37:fe:16:63:1d:97:62:3b:fa:7d:b0:
         69:97:f8:c3:5c:7c:00:ec:f8:7e:a9:9d:c8:5f:fa:97:ce:49:
         a7:25:7c:73:ed:64:de:9a:4b:56:22:c8:31:81:af:2d:0b:1f:
         fb:a9:de:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:21 2026 by rpki-client