Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B67D0D22AF1911F0BAE74926C4F9AE02.roa
File:                     B67D0D22AF1911F0BAE74926C4F9AE02.roa (raw, json)
Hash identifier:          2if7R0+Hjaf54EFIxG4ZcwFTr1w1S9k9cCBbUJLCd8c=
Subject key identifier:   63:1F:EB:AA:4A:99:AF:7D:F8:00:67:72:FF:19:2E:73:F1:28:BB:BC
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F0B
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B67D0D22AF1911F0BAE74926C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:22:53 +0000
ROA not before:           Sun 31 May 2026 16:22:52 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     150584
IP address blocks:        157.15.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12043 (0x2f0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:22:52 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c605c-6ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:66:84:ef:b2:0a:0b:8e:db:c7:78:ba:b7:b3:
                    86:a1:f2:43:ab:ae:cf:22:08:af:6a:56:47:aa:9f:
                    f0:58:b4:e7:cb:16:23:d5:c4:a0:02:f6:36:d2:56:
                    25:30:50:be:cd:ec:ef:1d:ad:c0:95:dc:b7:d0:ea:
                    f0:e6:fe:36:ed:a4:35:77:00:a9:10:78:3a:79:9e:
                    bd:d1:c8:0a:1e:24:2e:ab:69:4c:f9:dd:67:6e:82:
                    b1:7c:d5:21:5e:a1:fe:b5:6e:7c:4d:bf:c3:0e:68:
                    d4:43:a8:d4:2e:ab:51:a2:81:a6:6c:35:e1:fb:09:
                    73:13:30:67:0c:45:5f:73:03:50:45:65:ed:03:96:
                    fc:66:a8:c6:5e:69:2c:05:fb:ee:87:2c:99:a0:fe:
                    d7:33:c1:44:83:06:78:72:d7:df:e5:98:1c:f3:fa:
                    a3:e5:35:76:53:54:cc:34:ed:4b:ae:49:c6:d4:20:
                    09:fd:bf:b4:59:68:c4:e6:37:1a:ff:01:2f:26:0d:
                    83:17:c3:13:c0:91:a2:59:fe:39:f4:03:78:34:30:
                    d0:18:20:0e:d8:11:ee:e0:45:11:3f:c3:a6:21:31:
                    d3:cd:5b:9c:06:7f:1e:e1:64:cd:76:a6:0b:de:58:
                    44:43:db:6d:07:4d:fd:b5:fb:82:07:0f:c2:82:b1:
                    c7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1F:EB:AA:4A:99:AF:7D:F8:00:67:72:FF:19:2E:73:F1:28:BB:BC
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B67D0D22AF1911F0BAE74926C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:5d:fd:7f:97:14:f1:97:60:51:95:98:1c:98:62:9d:f7:cb:
         94:40:43:7d:5b:d4:78:3a:e1:57:95:ce:8e:45:ce:19:f0:39:
         70:90:ce:30:0c:92:58:f6:d5:89:93:a5:6c:35:b1:16:c2:1c:
         01:ed:d4:ec:d1:02:f0:46:e3:66:91:fa:15:aa:94:02:ec:a5:
         a8:f1:09:80:0d:78:47:50:24:fd:14:ca:92:58:ae:48:4c:60:
         69:de:f3:dc:49:a6:d2:f1:8f:79:06:90:11:c5:42:9c:3e:f9:
         24:25:49:ad:ad:6a:68:8f:db:eb:9c:62:17:e7:9c:d8:a3:5f:
         42:2a:6f:13:f2:d3:2d:03:f5:28:1a:f3:f5:20:d2:a0:ec:3c:
         9f:3d:70:fe:4a:50:97:28:d5:98:c6:1d:82:8e:74:60:98:5c:
         7e:55:60:7b:7b:c0:4d:7a:af:a2:47:b9:79:98:ff:09:9b:47:
         fb:db:07:56:7b:db:a6:49:7e:b3:b1:74:cf:1d:49:ad:64:81:
         fe:18:c7:43:b2:74:72:86:ad:68:be:6a:5a:62:47:32:a9:f7:
         84:8d:2c:40:8d:ed:39:75:4a:3d:45:81:bb:f9:42:b5:6c:dd:
         93:1d:8d:35:aa:46:31:bf:d5:fd:58:b3:93:bf:d0:8b:f6:a8:
         af:be:ee:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:08 2026 by rpki-client