Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/81EF7A300AFF11F1AB9D2207353D8C67.roa
File:                     81EF7A300AFF11F1AB9D2207353D8C67.roa (raw, json)
Hash identifier:          2Cz7yxu+ab/N529HKCVYga/aZ0TX1LBcI3KmN7/gGIA=
Subject key identifier:   B4:9D:E1:20:93:E9:99:7F:24:34:C7:BC:4F:0C:E8:7B:10:10:78:25
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       065A
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/81EF7A300AFF11F1AB9D2207353D8C67.roa
Signing time:             Sun 31 May 2026 17:54:50 +0000
ROA not before:           Sun 31 May 2026 17:54:50 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     150605
IP address blocks:        151.158.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:22:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1626 (0x65a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: May 31 17:54:50 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c75e9-babf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:52:2f:fb:74:4b:a8:ee:27:e7:7e:18:89:bc:
                    d5:99:df:73:da:b6:7b:46:60:39:b0:ea:b4:bd:95:
                    64:c1:2a:1a:dd:af:c0:8d:0c:72:4f:93:86:f0:1e:
                    8f:b3:68:f1:6d:2c:ec:4f:c6:c0:b5:68:be:eb:1b:
                    1d:5f:c5:21:14:97:56:53:0c:fc:c7:0c:1c:81:a0:
                    aa:f7:1a:64:45:5c:3a:bf:3c:2d:9a:7c:ef:f6:c0:
                    db:4a:02:0b:f1:91:f2:23:7c:15:66:bc:73:82:c1:
                    f6:cf:7a:4b:39:ad:17:7c:53:42:01:cf:f5:5e:53:
                    1c:d0:b5:48:fd:ec:fb:6b:c5:3a:07:a0:32:7b:a2:
                    5c:16:25:13:7c:ac:a6:80:12:70:2e:cb:92:ec:eb:
                    43:fe:ce:26:73:a1:65:ba:d4:b7:3d:80:d7:68:31:
                    c9:88:b8:9a:28:20:f4:86:be:ff:c0:47:62:d1:1c:
                    d6:ce:8f:ac:78:ee:ee:90:d1:e0:f6:1f:89:c5:85:
                    31:b5:b2:88:71:57:1c:31:74:0f:07:5d:d0:16:a7:
                    0c:25:e4:37:05:05:ff:2c:f5:1c:40:9f:99:db:88:
                    66:f2:94:30:1a:a4:eb:7d:ef:71:51:b9:ae:c6:34:
                    b0:f2:6a:5f:71:a2:d6:61:c5:49:c6:b6:31:25:e1:
                    c7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9D:E1:20:93:E9:99:7F:24:34:C7:BC:4F:0C:E8:7B:10:10:78:25
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/81EF7A300AFF11F1AB9D2207353D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:f3:8d:ba:f2:41:2b:ac:db:e0:25:ba:a3:e0:a3:fd:9b:53:
         3e:53:8e:50:3b:74:d3:13:71:e7:79:63:9d:7b:5e:9a:87:06:
         b4:88:44:c5:81:53:65:c5:9d:3a:2f:a7:af:fd:40:ae:96:18:
         6b:cf:4d:ee:83:4d:d6:bc:e8:ba:31:94:55:f8:17:70:ff:e3:
         85:f5:c5:2a:de:b2:fb:de:8e:04:e6:40:23:db:fd:28:46:2a:
         2e:1d:bf:d6:18:41:c3:8b:19:21:a4:ff:26:25:fb:60:56:ed:
         9a:c9:12:58:c6:db:b1:16:03:99:91:1d:5d:20:59:79:a7:18:
         d5:15:7c:52:fc:9d:86:44:23:67:c4:01:d2:3d:33:21:ed:09:
         96:b9:6e:75:42:ac:ab:db:de:18:ca:fd:c3:90:72:b2:23:bf:
         b3:d7:02:6f:1a:90:df:b5:d3:69:fa:ba:15:dd:a4:19:ab:09:
         a4:71:cc:fb:17:40:4a:44:2a:70:0d:74:eb:36:a5:85:ff:c6:
         d5:da:5e:f0:87:a9:7c:7a:96:c1:76:29:34:1b:4e:6c:c6:d1:
         2b:54:ef:f8:8f:6d:16:51:e8:bf:e9:95:2c:c9:66:48:84:ca:
         97:18:d0:a8:3b:ee:e5:8d:fb:91:49:03:0a:6c:a3:9a:90:78:
         65:cc:3d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:23:27 2026 by rpki-client