Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/58256D9AC4A711EEBE4ED82BC4F9AE02.roa
File:                     58256D9AC4A711EEBE4ED82BC4F9AE02.roa (raw, json)
Hash identifier:          8xgjPye3G79BPDImhq8H+i8+71VHroP5VaNJtADTuu8=
Subject key identifier:   88:81:F4:C4:91:E1:E6:B1:3F:23:C9:72:A3:03:B1:09:F3:5B:2B:B0
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3131
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/58256D9AC4A711EEBE4ED82BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:20:26 +0000
ROA not before:           Mon 06 Jul 2026 16:20:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150099
IP address blocks:        157.10.92.0/24 maxlen: 24
                          157.10.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12593 (0x3131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:20:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd5ca-2b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:08:7a:99:2f:94:07:3b:97:de:8f:76:f3:f5:
                    90:a4:81:ed:15:19:9b:7b:33:d8:be:8d:78:08:2b:
                    c2:88:3d:51:01:6d:db:2b:63:12:f8:49:98:fc:71:
                    f1:2a:20:cc:b8:fc:b4:2e:2f:de:00:86:36:b4:3e:
                    79:6f:39:3a:fa:30:5f:41:f4:b6:d1:2f:de:1f:aa:
                    a5:35:58:38:b7:5a:80:17:04:db:38:53:24:5b:69:
                    d7:4b:5a:ad:40:16:0c:0a:d9:f1:c3:e3:70:70:91:
                    39:50:08:b5:d5:de:8b:28:04:d1:5f:6c:23:19:9c:
                    d0:07:ab:34:b1:0c:04:05:6d:0e:36:a4:1c:97:8d:
                    83:61:e8:91:12:dc:e5:b1:1e:3c:f0:3d:98:6d:e2:
                    ed:c4:0b:78:4b:59:cb:e8:46:ff:16:aa:93:e1:f8:
                    2c:80:c5:99:50:ac:0e:22:0b:2f:e1:ff:ad:5c:43:
                    b1:0c:0e:c2:b9:52:5b:82:c2:00:23:19:b5:c3:73:
                    f8:76:92:2a:58:d7:22:d5:9c:71:1b:d4:48:4f:09:
                    ad:68:7b:d8:be:9f:ef:04:fb:c9:05:ce:db:16:07:
                    44:11:1e:bd:9b:2c:56:19:67:30:bd:db:09:91:a4:
                    63:89:5e:f2:b2:27:2b:55:52:d0:a9:3b:51:b0:39:
                    43:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:81:F4:C4:91:E1:E6:B1:3F:23:C9:72:A3:03:B1:09:F3:5B:2B:B0
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/58256D9AC4A711EEBE4ED82BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:56:b7:ac:42:3e:b0:a5:9f:35:67:5d:2a:d4:ff:c5:01:c8:
         c6:af:a3:b1:6f:ba:26:f3:c0:9e:52:94:3d:fc:bf:c1:cb:bb:
         d9:ba:97:5f:2f:64:c5:d4:b2:7b:c0:fd:5c:6d:22:12:73:28:
         56:71:65:0a:ab:85:13:26:68:3f:2f:cf:12:83:d7:32:8c:d0:
         b1:e6:4c:7b:d1:9b:b2:ac:76:52:8b:58:29:99:e9:b0:81:12:
         52:34:38:81:20:27:07:e2:50:a4:12:49:d4:71:62:86:69:84:
         b3:63:e5:b1:69:dc:d5:38:7d:bd:58:14:36:d0:be:71:21:5b:
         3c:fa:96:66:cb:09:c5:7f:9d:b2:cc:56:14:5f:2f:95:8e:37:
         e4:a6:95:bf:86:1f:e5:9c:a0:c6:ff:4c:98:03:31:aa:b6:b2:
         07:28:48:75:cb:f3:a5:aa:cc:a6:f8:97:7c:e9:bf:bb:bc:82:
         6d:19:d5:2a:62:0a:14:38:d4:64:b8:60:33:a8:0c:de:b9:64:
         b1:57:85:e8:90:f5:1f:36:25:09:cc:a4:57:1b:0e:89:03:1e:
         87:c3:f1:64:93:d7:d0:38:0f:06:d0:73:b3:84:a5:da:40:c7:
         30:3d:cc:eb:96:1d:c2:d6:ba:43:2d:4e:b2:22:e3:08:9a:5e:
         14:07:b9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:23 2026 by rpki-client