Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/81EF7A300AFF11F1AB9D2207353D8C67.roa
File:                     81EF7A300AFF11F1AB9D2207353D8C67.roa (raw, json)
Hash identifier:          N4xMhBeTmA5C+KLIBk86bxpbYWHPQ70C+pDdfYCFMbs=
Subject key identifier:   FF:10:01:AE:5B:78:F2:0D:71:B2:94:5D:AD:4B:19:00:EF:34:1B:B6
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       068F
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/81EF7A300AFF11F1AB9D2207353D8C67.roa
Signing time:             Mon 06 Jul 2026 17:54:39 +0000
ROA not before:           Mon 06 Jul 2026 17:54:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150605
IP address blocks:        151.158.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1679 (0x68f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Jul  6 17:54:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bebdf-bb28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:99:ae:67:96:d0:8a:91:c0:71:4a:2c:b7:61:
                    c1:5d:9c:57:1c:00:c2:69:e8:4c:1a:7a:96:e3:52:
                    4b:35:12:4d:26:b1:90:75:01:29:e1:ca:52:f3:d7:
                    20:fa:eb:4f:c0:18:03:63:54:b5:22:3d:66:d7:98:
                    f2:e6:ee:37:66:b0:c0:ac:b8:ce:be:4a:35:b8:99:
                    9e:37:b9:dc:ed:79:ee:6b:c6:46:82:24:34:9c:32:
                    df:94:d3:d7:ab:4e:16:d1:fd:8f:c3:ae:af:c7:72:
                    1a:c1:96:b3:da:40:f9:78:6a:cf:b8:f8:d5:63:89:
                    54:42:65:48:75:c2:e1:cf:00:e7:71:31:2a:00:fc:
                    52:cf:50:59:e5:32:e6:cc:fc:58:2d:5a:b0:5d:13:
                    2b:a4:7f:e9:b8:77:c4:8e:86:86:1b:a3:43:d3:1e:
                    a4:82:57:7d:1c:fa:67:a2:f8:17:43:3c:e6:0b:51:
                    e0:11:e8:e0:a2:6c:03:53:83:6c:c4:ee:3b:97:05:
                    ed:1d:12:b9:b4:51:5c:27:99:fd:d5:7f:c0:99:ae:
                    e5:57:49:0a:24:6f:34:aa:28:51:c6:25:fe:d3:91:
                    47:23:86:31:9c:c1:41:7d:24:3d:33:ef:3a:8a:6a:
                    30:9a:c0:69:a3:67:8f:a8:44:c7:9f:c0:df:cd:77:
                    55:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:10:01:AE:5B:78:F2:0D:71:B2:94:5D:AD:4B:19:00:EF:34:1B:B6
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/81EF7A300AFF11F1AB9D2207353D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:9c:8f:3a:f1:5e:bc:88:ff:3c:78:81:2d:cc:2e:43:a7:a8:
         01:94:f4:d4:10:2b:1b:b4:e8:b7:6d:65:15:ce:23:93:7f:01:
         e6:f9:6a:4e:46:56:33:3f:dd:c4:96:78:b2:e9:47:a9:3c:0d:
         81:e0:da:c8:7e:9f:1c:da:cf:5a:e4:66:3b:db:fd:90:75:1f:
         5f:3a:c4:94:a2:9a:bb:56:a7:56:5f:8c:25:0e:97:08:01:43:
         ab:0b:75:62:2d:7e:74:05:e8:01:62:84:23:5a:75:ae:e7:bf:
         81:c7:a9:a0:d4:0a:34:53:cc:8c:8e:69:5b:c1:72:cd:8f:45:
         25:a4:56:6c:5f:95:4d:82:57:0d:b1:4b:58:09:ab:d2:28:9c:
         c1:80:83:65:b0:39:2c:03:25:11:c6:60:87:f4:56:85:43:ef:
         e6:05:f4:3c:23:94:bf:52:09:7d:7d:3c:32:dd:ed:3e:7d:64:
         f0:11:64:a1:45:34:c2:4a:47:83:47:cf:e1:7b:c0:62:8c:01:
         54:14:0b:af:23:b7:f2:f0:aa:4f:73:29:fd:60:a5:5c:28:69:
         1f:1c:d7:5e:b3:00:0d:21:07:79:37:67:b4:80:d8:17:fb:8b:
         a0:ea:29:f8:d9:23:f4:51:0f:b1:08:f3:95:a3:26:dd:6f:8a:
         70:9d:cd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:48 2026 by rpki-client