Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/58C109EA2E8011F1A9E6C7F0AA833773.roa
File:                     58C109EA2E8011F1A9E6C7F0AA833773.roa (raw, json)
Hash identifier:          ifu5LlMkPScSdqOIBcyYaFLl00RmqO0O7WnqJ6+D97c=
Subject key identifier:   F5:36:A1:A6:A2:08:B6:BC:EB:88:ED:0F:2A:8C:B1:66:F5:E0:01:95
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       064E
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/58C109EA2E8011F1A9E6C7F0AA833773.roa
Signing time:             Sun 31 May 2026 17:54:27 +0000
ROA not before:           Sun 31 May 2026 17:54:26 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137210
IP address blocks:        151.158.179.0/24 maxlen: 24
                          151.158.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1614 (0x64e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: May 31 17:54:26 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c75d2-a228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b5:51:68:9d:08:14:30:c9:7d:5b:97:e2:23:
                    eb:4c:da:21:6d:aa:3a:40:46:a3:54:33:da:c3:f2:
                    b5:45:ba:40:4f:be:3e:a1:85:76:6e:49:7a:2c:e2:
                    ae:d2:8f:d0:eb:01:e1:25:5a:08:44:c2:9c:32:c3:
                    89:34:b6:10:b3:c1:f9:95:22:5d:f2:58:99:91:ee:
                    03:a2:60:ae:30:89:19:06:e1:f5:b6:16:31:ea:fa:
                    ad:2e:1e:49:9a:fa:79:f5:b2:67:cc:ed:e6:b9:13:
                    29:b2:17:ce:68:28:c7:c8:c9:7f:fc:58:5d:04:17:
                    0f:01:fc:c8:e7:a8:69:36:8c:54:a9:c2:16:52:de:
                    76:e5:b2:7f:b0:6e:b4:9b:c3:47:84:c3:60:3c:0f:
                    90:32:db:ae:33:c8:3e:4c:2f:48:29:4e:45:d4:f2:
                    e2:76:19:05:c5:c9:3a:5a:0d:be:28:fc:09:1c:28:
                    e4:d9:20:ae:3e:6b:1a:38:77:48:99:23:f7:fa:5d:
                    48:c8:18:8e:fd:24:51:7a:1f:f8:2b:36:9c:8c:2e:
                    a2:48:65:56:92:7d:41:ce:f6:28:df:2b:ad:d2:34:
                    8f:3f:d3:7c:ca:ce:d6:9e:76:ec:83:88:a5:0c:9d:
                    0c:00:0a:12:05:8b:32:eb:76:29:ba:a5:b1:a0:c5:
                    49:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:36:A1:A6:A2:08:B6:BC:EB:88:ED:0F:2A:8C:B1:66:F5:E0:01:95
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/58C109EA2E8011F1A9E6C7F0AA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.179.0/24
                  151.158.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:73:fe:74:e1:14:14:c4:7e:dc:2b:8d:44:08:c7:f2:a8:60:
         5e:0a:75:fd:1b:30:0d:a1:2b:96:c0:c6:0f:d4:4b:d6:92:d4:
         83:84:e4:40:dc:23:96:a1:6d:75:cf:1c:9b:db:26:e1:b5:2a:
         20:cf:38:48:26:41:63:9f:06:1b:40:71:a3:53:7a:93:6c:f6:
         1d:6f:ad:5d:2e:9c:7f:56:21:3e:2c:b5:aa:0a:a5:e4:b8:aa:
         49:a9:50:bd:6a:ca:67:7f:bf:e4:45:0c:e3:12:3f:cf:b0:e9:
         45:ae:5c:5c:27:09:4e:50:92:f5:6f:81:0a:e8:ef:bb:41:94:
         4b:17:f8:9a:dc:3c:87:ff:94:61:2a:5b:90:52:97:93:6f:f0:
         e6:01:27:0a:c5:09:d6:3a:fa:2b:a8:31:8f:05:31:c2:a6:75:
         c5:4e:37:3b:91:ab:09:54:ac:5e:e6:0a:59:ce:0c:24:19:90:
         d3:6a:e3:0f:50:a4:6a:05:05:32:52:6f:78:28:1b:16:a0:a5:
         04:f8:aa:d3:7d:b2:d9:6e:ee:0e:cb:5f:68:d0:3d:8f:18:13:
         11:15:cf:78:48:ac:e5:90:9f:d0:2c:26:7d:c8:2e:b2:6f:bf:
         c7:3e:cf:7a:32:81:4f:8a:b9:2c:8c:b2:e4:52:26:e5:55:a0:
         31:bc:b0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:21:30 2026 by rpki-client