Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E150568C4B011EE8840C45EC4F9AE02.roa
File:                     0E150568C4B011EE8840C45EC4F9AE02.roa (raw, json)
Hash identifier:          2jgmEDmMnrE7ExPp20YOT73AU/SI3jPS6PZSzoL6zHk=
Subject key identifier:   67:1F:D4:D2:6D:86:F6:A6:D4:77:F3:AD:E4:07:94:2B:56:B8:47:56
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F60E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E150568C4B011EE8840C45EC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:38:40 +0000
ROA not before:           Mon 06 Jul 2026 17:38:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151700
IP address blocks:        36.50.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62990 (0xf60e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:38:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be820-a1a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d2:ad:a5:39:83:86:7a:fe:b7:94:bd:d9:e0:
                    3d:f2:42:04:d2:3c:29:58:b0:c7:eb:31:7c:e6:29:
                    0b:26:d8:70:57:51:b8:b2:8c:a4:6b:24:cf:fa:89:
                    4f:17:f9:9c:55:45:81:a7:f8:9b:5c:a3:d2:38:3f:
                    bc:a5:d1:ee:37:df:93:a7:fa:48:48:18:7e:b1:c1:
                    f4:a5:a7:26:f8:79:01:ae:7e:2d:48:24:32:60:f6:
                    0f:dd:36:f6:22:4c:2a:02:a3:8b:c8:be:87:0b:f2:
                    02:e7:b7:e0:b5:e9:38:12:94:dc:10:cb:d4:b9:24:
                    7f:af:2c:60:e1:5b:2d:4a:00:fc:18:90:ca:66:b7:
                    dd:0c:98:a8:70:f7:8b:34:4c:2e:da:ee:e5:b0:d7:
                    31:3e:c2:ed:09:32:c1:7f:48:81:2b:be:73:22:0d:
                    d2:75:72:48:93:71:b9:5a:27:42:ac:82:ec:8f:52:
                    f7:d0:12:4a:8d:aa:04:0b:10:94:4e:00:12:fc:a6:
                    09:2c:70:9b:ed:94:b1:4c:23:6f:00:32:b8:dc:35:
                    c1:a1:5a:13:90:ab:cb:08:7a:26:1b:18:b1:05:76:
                    0c:c5:f4:ad:c9:8f:1a:87:39:5e:8d:c8:85:7f:66:
                    49:46:df:1c:9c:b2:81:eb:96:8e:d3:76:75:35:79:
                    5b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1F:D4:D2:6D:86:F6:A6:D4:77:F3:AD:E4:07:94:2B:56:B8:47:56
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0E150568C4B011EE8840C45EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:f6:f4:86:27:b7:b1:ea:fe:e0:08:52:08:47:3a:9f:84:8f:
         ae:c2:5a:47:e7:6c:a5:82:92:aa:46:93:94:03:a3:2d:cd:f6:
         df:95:aa:a1:0d:36:fd:8f:2f:78:12:78:69:3e:92:f0:6f:4b:
         66:41:97:93:d8:39:a4:a6:ce:51:d3:dc:41:fc:59:32:65:99:
         05:8b:ff:d3:da:c5:92:2d:53:f0:b8:6c:e3:b9:d3:84:26:59:
         49:ac:03:89:d8:0a:a5:93:06:28:fd:41:57:0b:13:50:97:f2:
         56:ab:91:62:2f:7b:02:76:9f:01:20:48:3f:d9:16:4d:1b:c1:
         5d:f0:22:8c:06:3e:35:14:f5:fe:2c:66:a9:31:72:11:26:5e:
         aa:b3:5a:9d:94:b6:ab:e7:ae:09:da:4f:7c:22:0b:ed:d6:3e:
         5a:45:66:ea:a9:44:4d:6e:78:28:6e:da:aa:c6:dd:79:c6:9c:
         a0:2a:2f:58:77:2c:05:20:2c:ff:3b:3d:a4:a2:94:f3:71:f6:
         f2:3e:5f:40:0c:39:0a:32:ed:95:d0:21:3d:54:b9:e2:01:50:
         a2:8a:25:c9:de:f5:f5:9b:d9:a2:27:18:64:a8:c2:e5:80:af:
         51:29:6a:48:18:85:9d:39:3f:91:4a:5a:74:73:55:e3:09:f3:
         2a:34:c4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:50 2026 by rpki-client