Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/579B4ED2266411F1AE95FD6DA8833773.roa
File:                     579B4ED2266411F1AE95FD6DA8833773.roa (raw, json)
Hash identifier:          8bYV5yqT5f/vp8IUk+aSf8PEeGU4OsOngNPeYOyshUM=
Subject key identifier:   5F:DB:BD:8E:51:74:E7:AD:6F:87:2A:AD:3F:E6:31:FC:7A:8B:1F:56
Certificate issuer:       /CN=A91772FA/serialNumber=029771698F283705D4A4DE12E5739585CBEB8F0C
Certificate serial:       43
Authority key identifier: 02:97:71:69:8F:28:37:05:D4:A4:DE:12:E5:73:95:85:CB:EB:8F:0C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/579B4ED2266411F1AE95FD6DA8833773.roa
Signing time:             Fri 29 May 2026 00:30:19 +0000
ROA not before:           Fri 29 May 2026 00:30:19 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        151.158.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.crl
                          rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 00:39:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91772FA, serialNumber=029771698F283705D4A4DE12E5739585CBEB8F0C
        Validity
            Not Before: May 29 00:30:19 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a18de1b-3287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8f:d3:ab:0c:9c:27:b9:9f:a0:68:1f:c7:ee:
                    48:44:a6:33:0e:3d:c1:e8:23:65:19:0e:81:5e:76:
                    c7:1b:bb:8a:94:e0:4f:ea:99:01:9a:64:a8:11:49:
                    b6:1e:e7:a8:6e:59:df:3f:7d:98:30:6d:ba:5a:6f:
                    54:c5:a3:4f:30:f3:d7:04:cd:99:96:19:f4:a5:1c:
                    71:78:06:ce:48:dc:42:ef:71:78:a9:7b:b8:4c:c2:
                    92:7e:5c:cd:81:3e:b3:3a:55:33:78:09:a6:64:8a:
                    e4:2a:79:5d:ee:85:35:50:56:93:b1:94:b3:77:df:
                    76:4c:26:0e:a1:3a:b2:f2:c2:d6:4b:cc:1f:0f:94:
                    58:df:30:b6:fb:9f:d2:00:15:79:22:f5:23:f5:f6:
                    a1:95:02:bb:e5:bc:77:15:78:63:dc:51:fb:d5:ca:
                    7b:a3:e2:de:ff:cb:e8:58:ea:49:06:c6:f1:b3:45:
                    42:d5:36:77:1c:9f:8a:46:fd:dd:00:41:38:9e:2a:
                    66:b5:f0:6a:e8:79:91:a9:a8:09:27:5a:11:55:c4:
                    a5:1d:b6:9b:c1:a2:74:8c:a1:27:8c:fa:09:96:e9:
                    97:d1:11:c8:08:2f:06:34:58:6a:26:3b:b9:36:49:
                    9f:c8:ff:11:08:bd:dd:52:42:5d:02:f5:0c:94:d1:
                    e4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DB:BD:8E:51:74:E7:AD:6F:87:2A:AD:3F:E6:31:FC:7A:8B:1F:56
            X509v3 Authority Key Identifier:
                keyid:02:97:71:69:8F:28:37:05:D4:A4:DE:12:E5:73:95:85:CB:EB:8F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/ApdxaY8oNwXUpN4S5XOVhcvrjww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ApdxaY8oNwXUpN4S5XOVhcvrjww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91772FA/B8FF2F18111A11F18F6995AB173D8C67/579B4ED2266411F1AE95FD6DA8833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:6c:73:83:0d:65:b6:ca:23:b4:fc:88:55:a5:8f:70:53:c8:
         9d:ba:7d:6b:d6:d7:b9:50:c7:8a:f2:85:ab:49:4a:0d:9d:6e:
         53:b6:74:c8:55:61:20:8b:6b:41:6a:02:2b:8f:dd:41:8a:63:
         f8:d8:9b:e9:e7:3c:2c:a2:ab:48:f2:93:1f:78:73:fb:e8:1b:
         00:99:56:6b:96:1a:bf:c7:9d:64:2b:6b:a6:fe:9b:16:0c:c7:
         00:4d:2c:95:79:22:b3:54:2f:90:bd:41:b4:e0:89:0c:a7:b3:
         1c:c1:80:00:6f:6a:63:14:c5:74:98:dc:48:8e:9e:b3:ca:5d:
         18:ef:65:25:78:37:14:37:83:89:bc:a2:be:92:c7:81:68:69:
         1f:d6:58:45:66:27:b7:93:74:e2:19:08:5f:47:a1:43:80:1c:
         fb:94:30:bd:db:57:0a:bc:22:a7:45:08:94:f4:f3:42:2e:de:
         1d:ca:85:b4:bb:c9:d4:a0:a7:95:4f:95:c5:cc:33:14:b6:0e:
         4d:49:d6:4f:de:34:ff:db:82:2b:64:82:a4:19:62:ad:eb:8e:
         d6:d4:3c:e3:37:67:ea:c7:bb:5e:33:5e:36:82:fc:e7:33:de:
         8f:27:c2:7f:d1:de:6d:80:6e:bb:06:22:11:96:78:38:6d:e3:
         10:1b:31:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:20:57 2026 by rpki-client