Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/75152618582311F1828FFEA5A6833773.roa
File:                     75152618582311F1828FFEA5A6833773.roa (raw, json)
Hash identifier:          0rNeKhj93hmGp345Dcs2VVFV8gwT2f3afgi7s6Y6YqA=
Subject key identifier:   45:27:D8:D6:96:CF:E9:C0:35:6A:FC:14:B4:C0:ED:C0:06:7C:D4:98
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EF1D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/75152618582311F1828FFEA5A6833773.roa
Signing time:             Mon 06 Jul 2026 16:40:09 +0000
ROA not before:           Mon 06 Jul 2026 16:40:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134258
IP address blocks:        157.119.169.0/24 maxlen: 24
                          157.119.170.0/23 maxlen: 24
                          2402:5e20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61213 (0xef1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:40:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bda69-eb3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1b:0e:1c:99:a2:78:e6:d2:6e:59:66:0b:fc:
                    5d:f6:f7:10:b1:1a:93:20:c1:38:e4:c0:cf:98:c1:
                    4d:30:c3:d1:6b:f8:34:cf:c2:26:ba:a8:0f:5b:50:
                    70:e2:5c:81:e1:6f:9b:4b:24:bb:2c:86:ea:c7:49:
                    ba:1a:2d:80:50:3e:01:6d:da:41:89:a5:19:59:e7:
                    3e:d8:74:ff:81:51:b7:46:1b:67:ad:20:ed:3f:35:
                    ef:08:bb:fd:ee:94:14:0b:18:f5:d1:81:ad:f8:21:
                    30:c1:e6:50:69:78:4b:7a:2d:3a:0b:da:c5:7a:f5:
                    bf:b3:a7:64:c9:52:e9:a7:da:1f:10:30:f4:9c:fc:
                    5d:1a:dd:3a:2e:3d:b6:1c:76:0c:31:d3:f2:7d:b3:
                    c9:d6:c6:bb:72:54:85:de:31:c3:12:3a:34:51:33:
                    29:0d:95:98:db:ad:82:04:ad:db:a7:a0:66:bf:aa:
                    b8:d3:9b:67:cc:a6:5f:fa:a8:71:c5:dc:e0:d2:12:
                    df:f0:76:aa:3e:fb:f8:b4:ef:d7:4f:77:1f:d1:69:
                    78:be:60:fc:f1:82:a9:bd:60:54:f4:93:9c:37:a3:
                    99:90:8b:e6:be:eb:f4:27:6d:84:da:63:b8:ba:5f:
                    dc:77:bb:b6:07:a2:96:fa:48:7f:ed:d1:c4:b9:e0:
                    32:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:27:D8:D6:96:CF:E9:C0:35:6A:FC:14:B4:C0:ED:C0:06:7C:D4:98
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/75152618582311F1828FFEA5A6833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.119.169.0-157.119.171.255
                IPv6:
                  2402:5e20::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:13:2b:23:2c:e3:38:ac:e6:48:34:0a:5f:0e:9a:0c:f3:35:
         46:ea:69:64:c1:53:12:d3:62:89:83:2b:1d:60:c7:f6:cc:7b:
         14:8e:e6:a4:1e:30:0a:ed:3f:8c:99:05:df:1d:2e:51:8f:0e:
         1f:78:95:59:18:58:dd:ef:38:d6:55:dd:64:77:9c:04:69:bc:
         a8:4b:68:b7:49:51:8b:22:c5:c1:ba:2d:17:e8:93:48:3c:13:
         56:31:78:a6:7f:03:b9:27:d5:b2:07:76:9b:d6:e7:d6:fa:8d:
         39:16:29:57:c0:64:3a:38:67:6c:ab:8f:23:da:7d:03:cd:58:
         d8:9e:ba:db:1c:d2:16:8b:cb:6d:53:33:f2:03:22:93:c0:87:
         4e:1c:b1:5e:90:a8:92:c4:38:f0:f6:df:9d:60:94:05:07:e0:
         e0:0d:8e:3e:09:90:96:e8:17:89:23:48:c4:39:e5:c9:04:3c:
         58:7d:6a:da:1a:42:3d:dd:e8:26:da:9d:14:53:4d:31:20:ab:
         1f:e5:d5:05:72:10:ac:bd:b6:18:aa:cc:32:98:62:19:44:d3:
         f4:ff:be:3b:d9:7d:b3:62:9b:cb:30:e0:b9:cc:af:9d:bc:6f:
         4a:c8:02:74:f0:b1:5a:c8:33:bb:b1:12:47:55:f2:62:fa:94:
         65:60:fc:e7
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIDAO8dMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2NDAwOVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRhNjktZWIzZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANcbDhyZonjm0m5ZZgv8Xfb3ELEakyDBOOTAz5jBTTDD0Wv4NM/CJrqoD1tQ
cOJcgeFvm0skuyyG6sdJuhotgFA+AW3aQYmlGVnnPth0/4FRt0YbZ60g7T817wi7
/e6UFAsY9dGBrfghMMHmUGl4S3otOgvaxXr1v7OnZMlS6afaHxAw9Jz8XRrdOi49
thx2DDHT8n2zydbGu3JUhd4xwxI6NFEzKQ2VmNutggSt26egZr+quNObZ8ymX/qo
ccXc4NIS3/B2qj77+LTv1093H9FpeL5g/PGCqb1gVPSTnDejmZCL5r7r9CdthNpj
uLpf3He7tgeilvpIf+3RxLngMsECAwEAAaOCAncwggJzMB0GA1UdDgQWBBRFJ9jW
ls/pwDVq/BS0wO3ABnzUmDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzc1MTUyNjE4
NTgyMzExRjE4MjhGRkVBNUE2ODMzNzczLnJvYTA2BggrBgEFBQcBBwEB/wQnMCUw
FAQCAAEwDjAMAwQAnXepAwQCnXeoMA0EAgACMAcDBQAkAl4gMA0GCSqGSIb3DQEB
CwUAA4IBAQCwEysjLOM4rOZINApfDpoM8zVG6mlkwVMS02KJgysdYMf2zHsUjuak
HjAK7T+MmQXfHS5Rjw4feJVZGFjd7zjWVd1kd5wEabyoS2i3SVGLIsXBui0X6JNI
PBNWMXimfwO5J9WyB3ab1ufW+o05FilXwGQ6OGdsq48j2n0DzVjYnrrbHNIWi8tt
UzPyAyKTwIdOHLFekKiSxDjw9t+dYJQFB+DgDY4+CZCW6BeJI0jEOeXJBDxYfWra
GkI93egm2p0UU00xIKsf5dUFchCsvbYYqswymGIZRNP0/7472X2zYpvLMOC5zK+d
vG9KyAJ08LFayDO7sRJHVfJi+pRlYPzn
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:58:24 2026 by rpki-client