Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A1B1E56EB5AA11F1B47D71353811F970.roa
File:                     A1B1E56EB5AA11F1B47D71353811F970.roa (raw, json)
Hash identifier:          SZGHUu260Z4Pc220n6qaGk1OTFpqxEhHWGcOxvx0xa8=
Subject key identifier:   2B:5E:04:49:11:B8:B8:10:61:28:72:F9:25:60:56:E4:63:11:68:4C
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       32EC
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A1B1E56EB5AA11F1B47D71353811F970.roa
Signing time:             Mon 21 Sep 2026 10:53:09 +0000
ROA not before:           Mon 21 Sep 2026 10:53:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154808
IP address blocks:        160.236.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 14:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13036 (0x32ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Sep 21 10:53:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6ab10c95-e867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6c:d6:7a:2a:e2:58:b9:84:e5:c4:3e:d0:c3:
                    5b:8f:dc:51:b4:1d:cb:ab:78:62:2b:e8:22:26:b5:
                    5b:dc:45:bb:0d:fc:ea:e4:ef:45:9d:20:07:3d:45:
                    53:e1:7a:a6:05:40:5f:82:1d:a6:8b:38:4e:b7:43:
                    fe:5f:b2:ed:d5:92:5c:f0:45:cb:92:47:20:98:df:
                    a6:8d:69:43:24:22:70:e3:4b:b1:2a:c6:5a:dd:83:
                    b9:b1:ab:bf:c4:a3:f1:9c:63:6a:fa:39:0e:64:4f:
                    1a:ca:2f:59:86:c4:d3:fc:31:c6:06:af:8e:8b:eb:
                    54:b2:12:b3:9b:3c:06:45:7f:69:fb:a6:08:76:dd:
                    1a:40:df:5b:73:87:fc:31:08:2b:d0:1c:f2:0a:aa:
                    ae:7a:c6:5f:67:01:f3:09:5c:83:1f:a3:6e:d3:ab:
                    cc:e0:1f:7c:9b:87:d2:e2:d9:73:9a:86:f7:f3:92:
                    f6:2d:01:80:e5:df:62:26:a0:82:6e:40:f0:d7:6b:
                    00:30:36:b7:50:f2:07:33:d2:d9:55:a3:ea:48:d1:
                    f8:25:7f:f1:f2:c2:f1:e8:eb:10:9e:97:77:ca:83:
                    77:61:bf:e3:2a:8f:63:6c:11:85:7d:ad:a3:da:60:
                    b6:c0:21:97:c9:96:56:66:54:97:17:32:e6:fd:de:
                    2a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5E:04:49:11:B8:B8:10:61:28:72:F9:25:60:56:E4:63:11:68:4C
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A1B1E56EB5AA11F1B47D71353811F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:ce:ad:41:fe:9b:d7:8c:7f:cc:9a:3d:f2:e4:dd:c0:09:64:
         61:b4:7a:b0:43:39:0d:a1:8f:e7:f8:ec:01:0f:bc:4b:24:9e:
         d0:dc:56:ef:1e:f1:04:89:09:25:69:8c:74:a6:49:cb:ad:8c:
         45:64:e8:d6:fb:42:1d:f3:71:f8:ad:84:b2:9e:de:e8:20:19:
         a9:79:b4:b1:c0:8f:9d:18:cc:3f:6f:b2:cb:f0:dd:28:8c:e1:
         91:32:3e:79:a5:b0:b7:e5:ec:b1:76:d2:ae:18:25:53:48:45:
         d5:db:29:b0:c9:8e:20:67:21:87:25:a3:89:45:47:35:d3:32:
         ff:26:20:66:3a:3b:7f:b2:4b:51:94:14:ae:6b:56:03:7e:47:
         21:58:2a:53:43:59:d7:e0:64:60:b8:84:06:59:43:6f:d4:9b:
         57:94:7f:4c:cc:b3:0a:85:a3:d7:da:28:84:01:d9:80:52:e1:
         6a:b9:f6:08:5d:dd:47:91:38:69:a0:7f:1b:34:84:68:14:02:
         45:5e:2f:75:65:83:84:db:a6:e7:72:e9:83:72:a7:47:58:8d:
         ed:b5:dd:f5:44:a3:7d:0d:5e:cf:36:fd:05:6b:5c:46:76:86:
         04:7e:70:9b:36:d5:ba:cb:0a:6a:ae:67:39:58:97:3d:69:4b:
         e4:6a:ca:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:27:35 2026 by rpki-client