Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/0B7DC5301B9111F19CD1C5AE3C3D8C67.roa
File:                     0B7DC5301B9111F19CD1C5AE3C3D8C67.roa (raw, json)
Hash identifier:          qUCL1QmEfhgoj5MvQJnJOoVt1T5bCe8GQA233ey6Q8M=
Subject key identifier:   31:06:36:6E:4F:5F:C0:54:5A:2B:4D:35:2F:59:B3:F5:77:A1:75:CD
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       0654
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/0B7DC5301B9111F19CD1C5AE3C3D8C67.roa
Signing time:             Sun 31 May 2026 17:54:38 +0000
ROA not before:           Sun 31 May 2026 17:54:38 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     142169
IP address blocks:        151.158.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1620 (0x654)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: May 31 17:54:38 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c75de-4444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:74:c6:24:32:c8:7e:34:6c:b8:ee:94:2b:77:
                    36:29:bd:63:ce:dc:f0:c1:5a:06:4a:57:b9:5b:7f:
                    1f:d4:60:70:aa:21:6c:b2:f1:38:41:bb:04:7e:f6:
                    27:45:a6:dc:4f:ff:80:06:59:2e:d9:b7:10:8c:ca:
                    ad:d7:a4:95:32:b6:83:c6:7e:7e:2e:0f:02:05:55:
                    29:f4:0b:7d:ec:1e:69:08:6f:2d:ed:bd:3a:4e:1f:
                    cd:9a:05:e7:74:a3:67:27:97:0c:6b:9e:49:80:3e:
                    f5:7c:f5:43:e6:11:9a:1e:70:8f:5f:b7:aa:8a:80:
                    cd:d2:be:54:9a:87:c9:d3:ba:8e:2a:bb:e6:9e:ac:
                    1d:6f:f5:77:a8:fd:0f:03:26:c6:21:45:d8:06:5a:
                    dd:69:86:8d:13:42:4f:7f:f3:69:72:6d:fa:17:27:
                    b7:40:e5:f4:80:79:74:18:09:a9:ea:89:da:7a:36:
                    77:a7:d8:7c:db:74:03:6b:32:4b:28:e0:fe:de:4b:
                    2e:40:6f:6f:b9:ef:a7:0e:39:a1:5f:37:d3:33:b9:
                    4a:ac:85:c4:3f:7d:b2:66:8c:b5:f1:fd:f1:d4:e4:
                    ec:a3:2f:d3:50:8e:bb:f3:30:07:80:60:28:c1:19:
                    b4:b4:a8:03:85:02:c7:74:93:1b:be:93:0c:12:16:
                    2e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:06:36:6E:4F:5F:C0:54:5A:2B:4D:35:2F:59:B3:F5:77:A1:75:CD
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/0B7DC5301B9111F19CD1C5AE3C3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:c8:69:e7:c6:e3:b3:94:0a:5c:83:c3:57:e8:f2:e6:cb:8b:
         ca:50:e6:bc:ec:fe:ad:d5:8a:f5:1b:d2:82:37:ea:1c:1e:a1:
         6c:92:e7:c1:b0:bf:b3:b2:fa:70:12:7a:f7:ee:b6:63:7b:a4:
         e2:9b:7d:7d:92:e2:c4:e8:5f:46:1f:06:86:9c:69:4b:69:92:
         fa:a4:01:6a:22:e7:67:6e:3a:9c:a2:b2:53:63:ad:f8:bd:ad:
         5a:78:8f:11:01:1d:2d:4f:73:a1:79:26:8b:9a:20:94:59:5e:
         9d:3f:ab:ae:68:d6:27:ee:52:71:fe:2e:3e:bf:fa:1c:83:80:
         8f:e9:5f:16:bb:04:b6:d9:7f:40:2e:4a:91:b0:14:25:47:54:
         f2:18:bc:bf:72:2a:d5:17:fa:46:4c:a3:2f:be:bc:a4:3f:20:
         d3:65:b9:3b:2d:c5:e1:cd:bb:fc:3f:99:3e:53:9d:89:3c:8b:
         1e:7a:38:af:47:0a:34:82:cf:84:36:10:12:ec:57:1b:ad:39:
         e5:c4:42:68:58:4c:47:ef:44:27:e3:54:ff:3b:97:6c:ae:a7:
         ab:2a:33:3d:11:93:c2:6c:e0:15:df:d5:27:9c:d7:31:c0:fa:
         53:53:b6:67:ee:55:ef:3d:a0:08:74:a1:31:6b:db:0c:cc:7d:
         e9:7c:83:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:07:55 2026 by rpki-client