Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4C921F58B64B11F1B38FB71F6911F970.roa
File:                     4C921F58B64B11F1B38FB71F6911F970.roa (raw, json)
Hash identifier:          C8TtjiIKFoPfCEbQwrdigTm+GhPwATX64TSYadPtKAo=
Subject key identifier:   1F:8A:1A:0D:A9:79:E5:54:DA:FA:90:9E:B9:05:DC:1B:AC:34:0F:39
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       32F0
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4C921F58B64B11F1B38FB71F6911F970.roa
Signing time:             Tue 22 Sep 2026 06:03:15 +0000
ROA not before:           Tue 22 Sep 2026 06:03:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154752
IP address blocks:        160.236.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 15:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13040 (0x32f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Sep 22 06:03:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6ab21a23-b8d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ff:bf:43:ec:2d:0c:d2:b3:4a:46:26:6d:51:
                    f2:a6:f1:c5:7d:80:a9:de:35:03:fa:f4:31:36:ab:
                    e1:ef:26:1a:bc:8a:6e:f0:c7:50:d1:9c:90:cc:00:
                    24:7a:15:2b:db:0e:67:13:19:d3:35:84:2e:36:9f:
                    46:c8:de:da:48:c4:02:f6:6f:92:9e:68:e7:7b:e9:
                    23:dc:d7:d1:59:78:03:aa:7a:a9:3b:89:78:05:12:
                    54:0d:62:75:a8:ce:30:14:8e:8f:8a:39:93:a9:93:
                    e4:0f:fc:cf:27:2f:9c:f2:53:30:75:08:9d:5a:f1:
                    95:78:9a:b8:e4:7c:55:78:66:07:b5:70:69:c6:53:
                    cf:d7:8c:c3:74:98:7a:d4:7a:bd:7c:1b:93:c5:d2:
                    41:f2:53:93:af:12:93:46:81:67:a1:58:ab:c2:08:
                    4a:40:8e:07:c5:3e:45:4f:58:de:ed:26:e0:49:61:
                    70:33:e8:ed:2a:37:09:93:a9:0f:52:29:30:ee:d1:
                    63:17:5e:66:0d:e1:0b:b4:50:f4:d8:6c:7c:53:4e:
                    41:eb:83:f5:87:6e:55:90:c6:8c:83:ad:2e:2f:f2:
                    af:d8:9c:bd:bb:8d:34:82:53:34:19:5d:42:d9:c5:
                    8f:bf:69:16:91:19:06:8c:f7:fc:3a:25:8f:5d:e4:
                    c0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8A:1A:0D:A9:79:E5:54:DA:FA:90:9E:B9:05:DC:1B:AC:34:0F:39
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4C921F58B64B11F1B38FB71F6911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:9a:6a:63:b6:3f:86:1a:24:51:65:42:46:5b:02:5c:c6:a9:
         3f:87:61:31:82:54:11:fb:6d:36:a8:64:19:75:37:b2:54:90:
         19:90:80:74:01:3a:10:5a:80:2f:ab:f8:60:36:45:5a:cf:a4:
         90:7d:14:a3:ab:2f:f9:c4:2d:a5:c6:64:d2:82:8b:46:cf:5c:
         91:3d:d1:78:26:1b:d6:74:d4:1f:1d:84:48:36:5a:94:b6:b8:
         96:9b:8e:3d:cc:62:76:3b:66:48:c9:4a:9a:b4:ca:6e:e2:7e:
         16:01:f9:56:2f:1a:0d:35:99:62:a8:a2:b0:ef:cd:d7:14:1e:
         63:89:26:06:06:ac:f9:f6:29:d1:43:06:39:11:cf:5f:bd:3d:
         1d:d0:9d:ca:64:4f:ce:fe:7c:a5:76:92:bf:ce:10:db:b6:8b:
         e9:76:bd:93:91:52:12:b1:07:99:6d:fd:e9:e6:c6:e7:b4:27:
         4b:7d:d3:23:56:02:6b:78:d0:aa:08:15:86:08:66:9f:65:a4:
         47:0a:f8:85:61:0d:9f:86:a6:f0:6b:3b:de:ce:b7:cd:48:8e:
         2e:f2:2c:f6:a0:2d:61:65:46:e7:2a:0e:fa:ea:39:04:01:a0:
         1e:ed:f0:24:e9:a9:7f:08:ee:db:f4:b4:e7:b2:18:18:74:d8:
         ec:ea:5a:ff
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICMvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwOTIyMDYwMzE1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIyMWEyMy1iOGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi/+/Q+wtDNKzSkYmbVHypvHFfYCp3jUD+vQxNqvh7yYavIpu8MdQ0ZyQzAAk
ehUr2w5nExnTNYQuNp9GyN7aSMQC9m+Snmjne+kj3NfRWXgDqnqpO4l4BRJUDWJ1
qM4wFI6PijmTqZPkD/zPJy+c8lMwdQidWvGVeJq45HxVeGYHtXBpxlPP14zDdJh6
1Hq9fBuTxdJB8lOTrxKTRoFnoVirwghKQI4HxT5FT1je7SbgSWFwM+jtKjcJk6kP
Uikw7tFjF15mDeELtFD02Gx8U05B64P1h25VkMaMg60uL/Kv2Jy9u400glM0GV1C
2cWPv2kWkRkGjPf8OiWPXeTASQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB+KGg2p
eeVU2vqQnrkF3BusNA85MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNEM5MjFGNThC
NjRCMTFGMUIzOEZCNzFGNjkxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoOxSMA0GCSqGSIb3DQEBCwUAA4IBAQAdmmpjtj+GGiRRZUJGWwJc
xqk/h2ExglQR+202qGQZdTeyVJAZkIB0AToQWoAvq/hgNkVaz6SQfRSjqy/5xC2l
xmTSgotGz1yRPdF4JhvWdNQfHYRINlqUtriWm449zGJ2O2ZIyUqatMpu4n4WAflW
LxoNNZliqKKw783XFB5jiSYGBqz59inRQwY5Ec9fvT0d0J3KZE/O/nyldpK/zhDb
tovpdr2TkVISsQeZbf3p5sbntCdLfdMjVgJreNCqCBWGCGafZaRHCviFYQ2fhqbw
azvezrfNSI4u8iz2oC1hZUbnKg766jkEAaAe7fAk6al/CO7b9LTnshgYdNjs6lr/
-----END CERTIFICATE-----
Generated at Sun Oct 4 07:41:45 2026 by rpki-client