Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/4BB1C17A590211F19D599C3CBF833773.roa
File:                     4BB1C17A590211F19D599C3CBF833773.roa (raw, json)
Hash identifier:          5dLgmE1Dy7Vm6jOrrrzz0zFHnMkK65GHbSmMNp38Zpk=
Subject key identifier:   EA:F1:1B:37:31:67:8C:E2:71:C2:A9:3D:E7:E3:00:76:AB:73:DB:AB
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       0690
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/4BB1C17A590211F19D599C3CBF833773.roa
Signing time:             Mon 06 Jul 2026 17:54:40 +0000
ROA not before:           Mon 06 Jul 2026 17:54:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151690
IP address blocks:        151.158.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1680 (0x690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Jul  6 17:54:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bebe0-5d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:38:fa:a2:61:c2:67:83:f4:9d:f0:e9:89:2d:
                    13:0a:49:52:38:90:a4:fc:55:32:ef:47:b3:d4:f0:
                    1f:4c:63:30:30:36:10:0a:a7:8b:fe:3a:36:48:03:
                    d8:a4:cc:54:9f:b7:5e:a9:78:04:af:2a:fa:70:47:
                    b4:3b:86:a7:3d:e4:da:5f:37:96:11:c5:36:34:01:
                    ea:b1:41:ab:83:f6:06:cc:cd:c7:f0:f8:0d:fa:29:
                    83:9d:5f:e0:7d:90:97:bc:aa:2b:bf:80:7a:35:06:
                    5e:76:43:75:b0:3f:96:af:92:bd:21:5f:c2:7f:31:
                    68:1a:8d:52:34:bd:70:01:9e:93:ad:b9:ed:2d:89:
                    3b:f7:29:fc:4d:d8:07:64:ad:4f:3a:a9:ee:30:5b:
                    35:47:ae:ae:6e:85:88:f0:19:b2:ec:55:58:c0:c8:
                    89:6f:71:50:c1:45:38:a4:3d:ab:ce:73:79:bf:bb:
                    9f:6c:80:d1:0b:a0:fc:2d:68:dc:ec:9c:de:29:7c:
                    bd:9c:49:bf:a8:1c:be:a3:d9:2f:42:29:09:e9:10:
                    55:ab:8c:11:01:9e:6a:ca:b5:b8:f0:d5:58:9e:17:
                    34:3e:fc:f4:55:98:dc:b7:f9:45:ef:e8:cf:b6:7e:
                    e1:20:26:8a:b2:6c:a3:68:e5:d6:23:87:0f:53:6b:
                    a7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F1:1B:37:31:67:8C:E2:71:C2:A9:3D:E7:E3:00:76:AB:73:DB:AB
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/4BB1C17A590211F19D599C3CBF833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:ae:8d:f6:75:04:0a:ad:82:3a:3d:31:35:65:07:a5:f2:4f:
         13:bd:e6:45:8e:15:19:7f:cb:9d:14:61:6f:e7:39:97:c6:fc:
         db:fd:ed:07:46:2d:7a:01:56:30:4f:fa:e7:91:0a:0c:31:f2:
         bd:c9:7e:65:76:66:ce:56:ad:55:92:aa:fa:ad:aa:a9:7c:b7:
         2c:7f:7d:b8:3e:42:9a:cf:19:c4:bb:2b:81:02:ac:c8:d9:62:
         c9:58:d5:31:bd:62:09:df:f0:82:b7:63:83:a5:a1:11:44:d0:
         43:a3:c0:93:ee:86:cd:06:7e:66:4b:59:1b:84:62:b8:05:9a:
         30:5e:96:cf:00:1c:10:b9:e7:48:96:be:54:b8:f4:f2:73:ea:
         43:a1:aa:35:6c:a6:a2:10:d8:a2:2f:8a:6b:18:9c:82:a3:e7:
         c2:a2:b2:9a:82:a3:06:96:8c:e0:6e:ff:93:87:f7:ec:a6:46:
         1b:48:62:b8:4c:ee:1b:9a:bc:31:13:9e:1a:fa:e8:df:e6:9c:
         c6:5e:23:86:8e:4b:ed:2d:f6:0c:d5:fe:46:82:61:7e:7a:8a:
         1f:c6:32:cf:d5:f0:a3:f2:33:a6:df:00:23:2f:19:2a:d8:fc:
         c0:ab:4a:08:0a:b7:51:33:0f:d6:96:7c:96:69:a8:e4:5b:5b:
         4a:dc:59:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:33:56 2026 by rpki-client