Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5FF2362E009411EFA47E9D43C4F9AE02.roa
File:                     5FF2362E009411EFA47E9D43C4F9AE02.roa (raw, json)
Hash identifier:          BcywtHFWfNjvCejjLN27YoVx3r4oEu0QgRPCwK/JpO8=
Subject key identifier:   E8:6B:6C:F9:1A:03:E6:A9:A6:0F:06:0F:30:11:81:7C:D5:56:27:9E
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F26
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5FF2362E009411EFA47E9D43C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:23:44 +0000
ROA not before:           Sun 31 May 2026 16:23:44 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     151733
IP address blocks:        157.15.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12070 (0x2f26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:23:44 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6090-0927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e3:4e:e0:a4:8f:35:32:d6:a7:1e:6b:9a:4b:
                    04:6c:89:5f:0b:6a:a5:b9:10:52:05:5c:f4:a9:04:
                    a5:d7:3d:3e:c4:47:00:26:84:cd:f6:a4:f1:14:28:
                    ee:9f:b0:b2:dc:36:9c:8e:ea:16:1c:29:c1:6c:a1:
                    3b:97:d3:ea:38:e7:bf:fd:c0:35:14:f2:ff:ed:21:
                    25:c5:46:1c:18:f1:36:e5:42:94:34:a0:77:2d:ed:
                    a3:b7:1f:76:fd:04:bb:42:64:6a:08:e7:46:6d:b2:
                    ab:eb:29:44:29:53:fe:3a:dd:a2:26:44:26:ca:e1:
                    45:6f:10:5a:68:ef:31:da:d5:7d:ab:4d:a2:9a:d9:
                    06:7e:9b:5b:44:f6:c9:e7:08:9f:30:6c:8f:1b:cc:
                    2f:e5:b9:ad:e2:54:9d:21:f2:9b:79:72:0e:b9:1c:
                    45:ce:28:a2:9e:9e:14:95:42:d5:da:d5:8b:38:ca:
                    31:e7:1a:28:58:01:16:df:34:cc:3d:13:02:a3:b9:
                    a8:12:7c:a5:37:ec:d6:f8:09:91:fe:a8:b9:6a:16:
                    cf:96:04:31:38:08:25:58:6e:7c:af:26:a6:31:a7:
                    39:81:db:88:5e:81:d3:df:e6:bf:7a:fc:69:4a:c6:
                    79:0e:67:a2:46:72:54:5b:81:73:73:06:4c:58:b8:
                    86:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6B:6C:F9:1A:03:E6:A9:A6:0F:06:0F:30:11:81:7C:D5:56:27:9E
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5FF2362E009411EFA47E9D43C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:db:e3:da:bc:71:5a:78:eb:ac:74:f9:1c:fd:54:5d:69:6c:
         ed:a8:9e:38:da:d1:d3:68:30:5f:cc:f0:74:13:fc:e6:84:63:
         d6:23:88:66:f1:0f:34:5d:a1:d7:15:1d:f2:90:5d:1d:26:db:
         1e:54:05:69:bf:1f:fd:51:c5:72:8b:d6:6f:30:2b:14:bb:38:
         3c:43:bb:6a:f9:28:d9:5a:eb:81:c1:97:de:b3:34:cf:f5:2a:
         f8:46:e0:93:f1:1a:e7:1e:b1:b3:66:a4:aa:7a:bd:dc:7c:e8:
         b8:f7:ce:17:83:34:fc:05:75:c2:48:12:bd:2d:59:5a:bc:55:
         85:2f:42:fc:93:9f:6b:b4:ec:a2:47:23:14:a3:4c:f0:cc:55:
         ca:82:d9:18:ab:f7:f6:f1:d2:9b:ca:c9:ed:53:59:27:50:29:
         40:00:60:64:1e:64:b6:95:1d:00:41:ba:3e:f5:b3:f9:91:ad:
         0d:37:7c:e9:6b:68:07:26:3b:b8:b9:88:73:79:6f:4c:ab:15:
         a1:f6:0c:4c:3f:4a:5f:69:13:dd:99:47:89:25:d5:39:39:92:
         23:91:ff:63:08:1e:f1:58:d3:43:02:70:38:c3:57:70:79:b9:
         d0:8e:48:7b:68:c6:ea:99:09:1b:fc:af:4d:da:5f:de:29:73:
         4d:99:d8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:42:23 2026 by rpki-client