Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/B7547D60211611F1BB46DDA8253D8C67.roa
File:                     B7547D60211611F1BB46DDA8253D8C67.roa (raw, json)
Hash identifier:          4BrnHPdYyx2nAq2NGD+uA7GhClifWXkJBKq44iaOpAc=
Subject key identifier:   FC:43:E3:6F:AB:FA:D4:87:4B:15:FA:12:D8:D5:E6:CD:90:00:55:89
Certificate issuer:       /CN=A9158019/serialNumber=0B30CBC733DDC4686B34554CEE96E27D61EC9C2F
Certificate serial:       26
Authority key identifier: 0B:30:CB:C7:33:DD:C4:68:6B:34:55:4C:EE:96:E2:7D:61:EC:9C:2F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/B7547D60211611F1BB46DDA8253D8C67.roa
Signing time:             Mon 18 May 2026 05:06:44 +0000
ROA not before:           Mon 18 May 2026 05:06:44 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     154343
IP address blocks:        138.252.148.0/23 maxlen: 23
                          138.252.148.0/24 maxlen: 24
                          138.252.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.crl
                          rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 09:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158019, serialNumber=0B30CBC733DDC4686B34554CEE96E27D61EC9C2F
        Validity
            Not Before: May 18 05:06:44 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a0a9e63-8370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1e:07:a0:f3:52:05:c4:d2:3c:14:08:ea:3d:
                    c4:ad:07:c5:ca:76:82:b5:1c:bc:52:a6:5f:02:a0:
                    8e:3d:ca:5a:3b:94:5e:40:f0:cb:7a:8d:6a:97:76:
                    3c:8c:24:b0:e1:69:a2:a9:68:3d:c5:ad:aa:16:57:
                    34:08:c8:3e:18:0b:8b:78:6a:0c:7c:a8:de:df:e5:
                    7c:04:18:3a:0c:8d:dc:85:84:73:67:e2:64:25:dd:
                    c5:92:da:73:01:23:c7:b1:00:3e:0d:1c:8d:c9:10:
                    d5:92:35:08:94:a7:bb:fb:16:b8:ac:4e:a1:d5:18:
                    76:bf:b2:19:2a:22:c1:46:0e:f3:44:c8:a1:cb:e9:
                    35:bb:0c:b6:44:da:50:09:10:51:91:74:24:ca:1d:
                    1e:36:a3:40:68:c1:ca:48:9e:ed:43:3d:48:bf:12:
                    67:2d:67:e7:6b:d3:ca:64:10:35:48:05:76:ed:93:
                    f5:29:2d:45:c9:30:3c:37:00:a3:db:04:21:11:ca:
                    44:21:00:d5:92:19:b3:31:d9:a0:ce:7b:40:f8:f4:
                    9f:b2:59:de:96:21:7f:00:e9:4d:15:c6:e6:5a:32:
                    d6:f5:8d:ff:b4:2d:ad:97:4a:f7:33:0d:d7:94:dc:
                    24:94:fb:6b:bf:b8:88:b7:0d:4e:f9:e3:bd:ac:b8:
                    a7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:43:E3:6F:AB:FA:D4:87:4B:15:FA:12:D8:D5:E6:CD:90:00:55:89
            X509v3 Authority Key Identifier:
                keyid:0B:30:CB:C7:33:DD:C4:68:6B:34:55:4C:EE:96:E2:7D:61:EC:9C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/CzDLxzPdxGhrNFVM7pbifWHsnC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CzDLxzPdxGhrNFVM7pbifWHsnC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158019/FF253538211311F1A859068B253D8C67/B7547D60211611F1BB46DDA8253D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:7a:51:c7:bd:40:ba:ef:46:e7:9e:d3:8b:8f:c4:d1:57:d2:
         4e:89:f4:fe:dd:9e:e1:cc:24:86:c2:cb:bb:88:13:7c:08:c8:
         be:a3:62:f5:ab:c8:0f:6d:58:36:05:60:11:57:e5:0d:44:96:
         9f:c3:73:81:9e:dd:88:76:42:c4:5d:9a:5b:e2:67:3b:34:f6:
         68:de:8e:7e:f9:de:bb:f2:30:0f:dc:bc:af:49:3c:10:48:33:
         7b:99:6d:24:f0:c4:ce:ba:d6:4b:c0:96:0c:c1:0b:78:6e:29:
         8e:03:61:e2:f3:5b:aa:42:32:52:ea:17:55:fe:8a:db:48:2b:
         e2:aa:0b:6a:91:9b:56:e8:b9:39:63:41:92:c2:dd:f5:38:1e:
         05:6c:ff:cb:d6:e4:a6:7d:b4:03:3b:df:d1:7c:d7:50:88:78:
         10:ff:31:5f:9d:c6:6e:23:7d:a4:55:e9:f1:44:ff:a0:6e:a2:
         27:95:20:48:50:c8:5c:06:bf:43:1b:e0:5c:8a:58:c6:53:6a:
         9f:36:92:8d:f1:f7:ab:73:00:9a:c4:2e:c3:95:8d:7d:c8:ba:
         66:a1:61:bd:23:54:42:11:02:06:6f:a6:c9:9b:a5:75:48:b1:
         f3:11:20:a5:14:a1:e7:76:10:ea:88:6e:fa:fb:ce:df:2e:25:
         11:60:c0:50
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:30:41 2026 by rpki-client