Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/5ED5CC9815F911F190BF9FBE233D8C67.roa
File:                     5ED5CC9815F911F190BF9FBE233D8C67.roa (raw, json)
Hash identifier:          JXBpF4gICjhbfuspL9UHWfyxTF8q3gckLy8JI1lt+ec=
Subject key identifier:   A0:F4:82:0B:C4:FD:F1:E8:5E:5F:4E:9F:61:96:03:56:DC:84:A3:1B
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       0687
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/5ED5CC9815F911F190BF9FBE233D8C67.roa
Signing time:             Mon 06 Jul 2026 17:54:23 +0000
ROA not before:           Mon 06 Jul 2026 17:54:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141265
IP address blocks:        151.158.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:25:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1671 (0x687)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Jul  6 17:54:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bebcf-e67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:15:9d:f5:8f:44:e5:a0:6d:d6:8e:6c:a4:9f:
                    9f:0c:11:50:7a:52:65:6f:74:b6:cf:29:4f:de:98:
                    0a:78:2a:52:69:dd:85:b6:dd:10:14:e1:1a:f2:57:
                    5d:da:ea:1e:42:9e:c9:9c:d2:eb:4c:3d:dc:a4:80:
                    4c:59:cf:30:a5:aa:7e:02:b5:be:17:2b:2e:e3:f9:
                    5b:5a:35:35:d6:b0:b9:1c:ad:18:80:a9:ad:32:d6:
                    96:8d:94:ca:8a:09:14:ba:ee:4e:28:37:ee:ea:d0:
                    95:8b:c9:f5:cd:f4:a6:2c:90:39:5f:fc:c8:5d:a1:
                    b4:8d:d3:bb:08:22:bb:3b:e4:7d:6d:ff:ff:de:d0:
                    97:10:04:39:84:d3:ea:03:4e:ab:28:13:59:75:b1:
                    ea:3d:9e:7c:63:53:f4:0e:b6:8a:42:9d:4d:16:cf:
                    cf:c4:7d:a3:92:c5:75:32:ae:e4:25:62:8f:b5:82:
                    e1:3a:2f:78:a6:a8:e8:cb:01:69:10:3e:cf:8b:c2:
                    f4:11:37:84:b7:9b:a6:2a:45:48:da:78:bb:f7:ca:
                    92:5d:b2:e9:cd:e5:d9:32:48:1f:15:14:ad:16:84:
                    b1:8b:9f:d7:bc:b7:41:2a:9c:fd:ec:25:63:3e:ad:
                    b8:7c:09:b1:fc:57:06:7e:33:d6:b3:94:23:84:6e:
                    01:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F4:82:0B:C4:FD:F1:E8:5E:5F:4E:9F:61:96:03:56:DC:84:A3:1B
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/5ED5CC9815F911F190BF9FBE233D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:77:41:74:c1:70:07:61:2b:c5:e4:ee:45:e2:d2:96:56:f2:
         5e:ff:e6:b5:2e:54:f8:d3:44:bf:c8:e2:71:0d:8e:09:1a:af:
         d8:40:f9:54:05:12:08:0d:45:87:cf:15:9b:61:8b:67:92:e5:
         85:cd:33:4e:e5:82:39:be:5e:ff:13:6e:bf:59:3f:eb:bb:46:
         bf:da:20:15:c6:c4:46:da:06:a6:e1:6b:38:86:60:35:55:5a:
         0a:25:66:0a:30:bf:57:3f:48:20:0f:6b:5b:ba:ff:a5:34:45:
         16:13:f8:7d:a0:ff:d5:7b:ca:b8:ae:6c:97:f2:4a:ec:78:9d:
         6d:19:5a:ba:b6:3a:cd:76:61:5b:45:e5:2c:4e:37:56:79:a7:
         1c:ac:8b:2e:b9:7e:63:e8:69:7c:1d:48:7f:11:49:bc:bf:22:
         f1:41:38:27:59:a7:e9:f9:4f:4f:15:df:fb:0f:bd:dd:3f:75:
         76:62:d8:aa:10:77:50:e6:1a:30:e7:ba:6c:3f:71:5b:37:7e:
         07:e8:9d:c5:21:0c:28:b1:d4:85:f4:b5:f5:91:a9:54:c9:48:
         d4:f4:cd:fb:1d:9b:75:9b:20:49:2d:fc:be:76:0d:ff:11:fa:
         ac:06:6c:92:d2:b5:ee:a7:11:28:0f:eb:33:f3:09:3c:26:3b:
         46:9a:a4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:38:50 2026 by rpki-client