Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/0FDABE660D5011F181251C95143D8C67.roa
File:                     0FDABE660D5011F181251C95143D8C67.roa (raw, json)
Hash identifier:          /QlDe+GltmN9CiSZHKYaaLMfNZekSvKuPPQj9Vo5n2w=
Subject key identifier:   EC:57:F6:0B:CC:08:DA:9C:DD:17:2F:53:EC:2B:6E:8C:22:59:D7:C5
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       0684
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/0FDABE660D5011F181251C95143D8C67.roa
Signing time:             Mon 06 Jul 2026 17:54:17 +0000
ROA not before:           Mon 06 Jul 2026 17:54:17 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138746
IP address blocks:        151.158.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1668 (0x684)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Jul  6 17:54:17 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bebc8-c830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b9:ef:43:14:d2:d6:24:8a:f3:d7:50:03:c8:
                    e8:33:c0:37:ba:39:ee:9a:f7:cb:99:f4:0d:7b:c4:
                    8a:f8:cb:f8:6a:76:b8:25:47:97:d5:7c:67:78:cd:
                    4d:fa:ce:0a:7b:13:56:07:45:f4:67:fc:3f:62:3e:
                    ca:9b:b2:08:01:ed:c3:aa:3a:ae:1f:67:f0:2f:bf:
                    4f:df:82:e8:ee:5d:fe:9d:c9:74:aa:21:33:4f:f4:
                    11:35:09:13:bf:6c:99:d0:2a:29:75:3e:67:ff:3c:
                    9b:09:3a:a6:fa:92:2d:5c:b4:f1:d3:56:bb:50:ee:
                    10:24:5d:98:3b:34:7a:f4:10:34:c1:aa:79:ba:5b:
                    d2:31:4c:f0:f6:e9:3a:5e:da:c6:90:8f:71:e6:da:
                    e2:30:aa:e1:cf:1f:4e:cc:d3:78:10:2c:e2:f2:60:
                    41:a1:11:52:8c:80:69:30:18:18:21:53:b4:62:2a:
                    b8:90:51:5d:3a:a4:df:f0:6d:46:42:ce:52:4d:e1:
                    0e:10:10:b4:ec:91:0b:5c:0a:82:3e:8a:51:d4:8c:
                    f1:3b:28:cf:70:5d:82:d6:c1:a3:08:27:99:91:55:
                    8a:ec:49:0b:b9:16:1e:63:21:7c:c0:79:12:32:af:
                    b1:6b:33:5b:9c:3a:ad:4d:61:75:9e:3f:0b:26:bd:
                    75:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:57:F6:0B:CC:08:DA:9C:DD:17:2F:53:EC:2B:6E:8C:22:59:D7:C5
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/0FDABE660D5011F181251C95143D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:88:6f:0b:3e:17:51:8f:03:ec:82:37:41:12:ca:6a:1f:3a:
         5b:1f:51:cc:94:17:1b:e5:9b:e4:3b:d3:39:3d:3e:29:2e:34:
         4a:e8:0a:0a:75:ba:de:26:5a:c2:13:ed:0e:71:6e:ea:8a:1a:
         cd:50:ec:c9:e0:0b:cd:26:18:1a:cd:b5:10:5a:b8:0a:7d:56:
         14:2a:f3:1d:ab:c4:03:eb:14:12:43:c6:57:d1:ed:9c:47:89:
         6f:ac:9f:a4:dd:38:d4:a8:58:23:7c:05:84:eb:19:17:a6:20:
         32:5c:8a:c3:82:9d:f6:3c:53:58:8f:11:8d:5c:dc:fa:f4:d3:
         bc:de:8c:ad:b0:b6:5e:06:16:0f:f1:17:07:23:8d:b8:c8:6a:
         62:96:31:f5:4a:1a:d8:11:32:69:f4:47:08:47:46:cd:0a:1c:
         20:e3:26:49:28:f7:a5:01:40:8a:50:2b:da:af:db:02:ee:3f:
         24:8e:66:b8:82:f4:1d:bb:71:ed:6e:15:53:29:14:bb:90:e3:
         bb:7f:b9:39:3b:21:f4:09:88:0e:9b:23:dc:11:9c:7c:ef:f6:
         aa:38:93:f9:69:bd:2a:37:33:c3:c5:53:e6:d1:b4:c3:f3:9e:
         75:f3:98:97:f5:ec:9f:e2:4c:d4:41:41:8f:32:c0:f9:51:3b:
         5d:71:d8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:16:36 2026 by rpki-client