Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/155C779EBF3711EE9DE9C954C4F9AE02.roa
File:                     155C779EBF3711EE9DE9C954C4F9AE02.roa (raw, json)
Hash identifier:          2sFz3YRDIQaWZS2jkg7RG7M7Qx44wpzyZkRHOHBcW1A=
Subject key identifier:   37:44:11:40:4D:57:C1:40:D8:20:69:B8:8D:90:BE:AF:4B:3C:21:1E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E9EA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/155C779EBF3711EE9DE9C954C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:39:53 +0000
ROA not before:           Sun 31 May 2026 17:39:53 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     151694
IP address blocks:        210.79.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59882 (0xe9ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:39:53 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7269-369c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:32:80:3e:45:fe:ff:93:bc:2d:26:0e:31:8a:
                    4a:71:c5:3c:b7:d7:85:d4:c6:fe:2f:b5:8d:ce:22:
                    bb:52:2a:68:0b:2b:06:40:19:5d:6a:24:4b:65:f2:
                    a1:16:87:13:78:31:ed:5a:10:61:1f:a7:22:36:bd:
                    b0:84:72:38:7b:09:77:26:0f:dc:6e:5e:26:23:05:
                    58:23:98:9f:cc:36:ad:c5:0d:81:50:70:7c:99:ab:
                    41:f0:0d:67:6a:df:9e:91:23:7b:03:9f:f0:77:69:
                    eb:9c:f0:ce:6f:fc:b1:cd:66:be:a8:93:21:7b:a1:
                    0c:9d:a7:bc:cd:9e:5d:5c:68:ba:6b:e4:95:92:6f:
                    09:cd:d1:a5:bf:41:32:3d:3e:e5:87:88:ca:78:58:
                    1a:31:0d:b0:19:68:29:f1:4d:ef:5a:8e:be:89:90:
                    24:ea:33:48:6e:b7:ab:b7:54:57:67:f2:d5:4b:3e:
                    6d:fd:96:9c:cc:0a:91:96:81:c3:52:bd:1f:0e:37:
                    1f:a9:d6:c5:06:bc:70:0d:48:13:a5:0f:f6:7b:d0:
                    53:c5:65:4a:49:a3:c3:1a:b3:11:5a:ee:ad:69:88:
                    b7:63:a0:05:0d:e1:43:52:64:44:76:d6:7c:7c:60:
                    e9:e7:36:79:19:e5:2c:c9:c1:c4:7e:0a:15:0c:c1:
                    26:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:44:11:40:4D:57:C1:40:D8:20:69:B8:8D:90:BE:AF:4B:3C:21:1E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/155C779EBF3711EE9DE9C954C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:91:93:3e:ff:0c:a4:4c:66:d6:fb:ce:7c:d1:38:20:7d:b3:
         82:dc:29:25:94:3d:a6:48:f8:38:37:be:18:7e:74:58:98:06:
         3c:c2:c2:6a:b4:89:07:5f:e6:82:78:af:f0:b6:0e:3d:17:b6:
         e7:44:2d:bd:a8:3d:e4:09:e1:43:4d:8b:47:d6:59:83:f3:5a:
         93:45:96:89:74:3e:f2:bc:7c:52:fe:de:d8:11:4c:42:f0:49:
         93:78:03:48:07:00:7a:3f:e7:77:9a:fd:54:e5:70:12:39:ed:
         79:1d:47:bb:d7:c7:4e:0f:b7:ab:99:61:02:8e:04:ab:2f:20:
         98:5b:b5:eb:02:0e:6a:68:c9:7f:03:27:3e:0a:c9:8e:09:10:
         50:28:de:3f:96:44:b3:fd:5d:10:d3:ef:5f:6a:94:aa:2f:09:
         11:02:65:0a:18:72:f9:dd:9b:9b:bc:cc:0b:7d:e8:48:1a:50:
         16:ed:be:17:f6:a1:cc:87:e2:e6:15:5c:b8:7f:c2:9b:16:9b:
         bd:a8:d3:85:ee:6b:58:de:30:79:29:65:f7:ef:c7:5b:46:b8:
         89:b5:d7:c4:59:63:1e:02:68:e0:ff:5b:0c:c9:ee:ca:e2:15:
         c3:01:52:39:e3:a6:4d:04:5a:c4:78:05:04:9b:9a:27:13:d3:
         3c:db:60:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:58 2026 by rpki-client