Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7DDB96984EB311F1948ABE8AC8833773.roa
File:                     7DDB96984EB311F1948ABE8AC8833773.roa (raw, json)
Hash identifier:          TyhxC+EgA7cADvxpkFYPu9d7EePMzGjU+PRQ0urBz2Y=
Subject key identifier:   74:CB:7E:0C:90:9E:EE:FD:0D:BE:8A:E7:1E:81:80:3A:FA:EB:EF:F0
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F1F
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7DDB96984EB311F1948ABE8AC8833773.roa
Signing time:             Sun 31 May 2026 16:23:31 +0000
ROA not before:           Sun 31 May 2026 16:23:31 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     151720
IP address blocks:        157.10.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Jun 2026 09:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12063 (0x2f1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:23:31 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6083-a069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:dd:d0:87:50:67:41:8c:8f:6d:bf:68:25:45:
                    08:92:e5:99:b0:27:71:ec:87:c4:69:9b:36:08:94:
                    4b:61:5f:b4:bd:4d:24:57:84:e8:92:b3:b1:c7:3a:
                    7d:aa:31:a9:06:c8:3e:6f:6b:91:c5:48:ec:c2:be:
                    57:63:ca:54:29:b8:d7:97:cd:f8:d3:26:98:29:6d:
                    51:e6:93:55:a8:f7:3b:56:a1:0b:ad:ee:61:29:d7:
                    6c:dd:b5:2f:8f:a7:b9:d8:60:33:55:43:bb:4e:cb:
                    0f:47:29:c0:da:aa:02:98:2e:87:b3:c9:f5:cd:b4:
                    a7:ea:9a:11:10:af:41:f5:45:23:4b:73:12:9b:bd:
                    61:64:34:c4:03:f7:d2:fc:10:fa:9b:8c:72:91:1a:
                    22:98:c9:3e:1f:a3:ef:88:0b:83:3a:49:95:3d:23:
                    45:7f:be:e4:99:79:df:c0:0e:f3:4b:ca:28:57:e1:
                    1f:6d:63:d6:9f:89:4d:f0:85:fb:0a:5a:39:e6:1c:
                    43:0b:f0:62:9a:4c:92:63:ea:ef:f1:c6:e7:57:3a:
                    83:5a:a0:5e:c2:a4:5c:0d:b5:d1:0c:b1:58:41:e9:
                    17:b2:3e:cc:11:9d:2d:1a:b4:02:23:d2:52:eb:d2:
                    5f:8f:11:71:ab:fd:ff:6a:70:22:02:af:6c:9d:e0:
                    5a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CB:7E:0C:90:9E:EE:FD:0D:BE:8A:E7:1E:81:80:3A:FA:EB:EF:F0
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7DDB96984EB311F1948ABE8AC8833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:d0:1c:a2:5b:db:81:97:b0:b7:16:82:96:4a:93:88:2a:2a:
         17:72:00:23:13:dc:c4:b5:89:23:e7:87:43:8a:b3:16:56:ae:
         1d:e1:79:d8:15:b2:32:66:45:61:b2:23:2d:a2:49:04:8b:fc:
         fb:f4:a2:e7:db:87:a6:ec:b9:03:8e:b8:bf:11:78:76:38:b4:
         20:77:9a:bc:cb:7f:0f:90:47:3a:f5:0b:51:35:fb:9e:b9:62:
         d6:90:18:43:63:de:dc:61:d1:8b:dc:c9:bc:99:38:22:7d:b5:
         3e:79:ac:8d:37:7f:3a:a1:61:3a:f0:a3:98:b5:10:89:50:11:
         ce:b5:32:83:3e:01:4d:c8:54:ad:31:23:23:14:2b:5d:94:4b:
         ee:e9:5f:dd:c9:3d:90:81:3f:b6:d8:12:07:e1:ef:96:99:6c:
         04:1f:e7:67:65:f8:44:1e:83:e0:a9:bd:6b:3a:26:f1:b2:4a:
         18:32:31:29:70:82:18:17:40:02:31:3e:ea:9d:4c:df:7c:27:
         e0:a4:9c:81:92:2f:73:a1:b1:04:ef:07:09:33:44:a2:ad:9d:
         82:e6:0a:1c:42:ba:3c:5a:c8:64:4e:b4:fb:73:5d:34:e5:26:
         a4:ef:31:f2:c6:dd:ee:b7:0a:4d:bf:4d:a4:cf:cc:10:bb:bb:
         15:d9:73:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:21:42 2026 by rpki-client