Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/85FEBF022CE511F1A630748AA1833773.roa
File:                     85FEBF022CE511F1A630748AA1833773.roa (raw, json)
Hash identifier:          5roypKReH7z/iBd9u8z78x71vEPe0xqGHxGHStWRzpQ=
Subject key identifier:   0B:A7:B0:D0:8C:FE:70:C7:AB:5C:B5:0A:D5:CF:9C:4E:50:04:35:CB
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       0685
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/85FEBF022CE511F1A630748AA1833773.roa
Signing time:             Mon 06 Jul 2026 17:54:20 +0000
ROA not before:           Mon 06 Jul 2026 17:54:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     140171
IP address blocks:        151.158.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1669 (0x685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Jul  6 17:54:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bebcb-a7df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:90:85:fe:5b:24:03:da:13:e5:f6:7b:09:82:
                    3e:9c:6d:b1:ca:5b:86:f0:0a:94:76:4b:96:09:d7:
                    dd:38:2d:fc:f5:aa:28:08:f4:7b:37:da:4d:57:4d:
                    2b:33:3a:1a:52:f4:77:d3:5a:31:a4:0a:a6:d5:fb:
                    e2:fa:ff:e7:2a:db:98:ed:3e:a5:97:71:cb:92:0e:
                    c6:32:67:78:57:81:43:a3:fb:06:f7:74:85:ca:8a:
                    2d:11:e5:3f:42:8b:00:43:03:09:15:c6:04:1d:21:
                    19:0a:db:cd:f6:2d:ac:2e:df:d1:29:b2:21:81:2b:
                    2c:cb:ca:49:83:3c:f2:95:e8:f2:8e:96:d6:b4:bc:
                    50:99:77:1c:1f:96:53:72:15:2a:d3:24:4c:99:9b:
                    f3:65:21:9c:9a:ec:0e:89:5c:ff:65:72:05:2b:67:
                    97:69:a5:0b:3c:6f:74:1e:f6:6e:78:44:77:0b:3a:
                    1d:7a:dd:5f:58:a7:bc:cd:13:fa:b4:f4:8d:fb:ad:
                    41:a8:06:17:5a:af:1c:78:18:bf:85:30:2d:35:07:
                    06:da:8c:5a:c3:b3:8a:30:04:47:72:62:84:cf:c8:
                    a4:4d:04:40:72:cf:d7:61:80:c1:87:f1:f3:cc:36:
                    73:5e:db:cf:bb:d0:1b:c5:28:84:db:4a:3f:bb:fe:
                    ae:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A7:B0:D0:8C:FE:70:C7:AB:5C:B5:0A:D5:CF:9C:4E:50:04:35:CB
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/85FEBF022CE511F1A630748AA1833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:a2:c1:40:d7:26:03:4d:ad:ba:4e:f3:83:fa:3a:54:19:03:
         bf:1b:31:2b:ad:a5:ea:96:a7:c7:63:08:b5:98:07:fd:1a:f0:
         43:08:bd:be:1d:b7:44:89:aa:c2:94:0b:02:ae:24:c6:d5:c9:
         ef:d9:a1:07:87:06:a6:85:3c:3d:d8:d7:ed:39:8f:33:a6:2a:
         18:c4:68:90:6d:50:9a:d3:d4:cf:b4:b0:eb:9d:e3:89:87:9f:
         da:0a:e7:79:72:c6:9f:e4:24:30:4f:9d:b8:32:40:73:b7:3a:
         f7:4f:80:93:76:1f:64:bd:a4:f9:d8:c4:79:07:ee:44:e4:82:
         99:dd:79:0f:6c:ff:1b:e2:05:09:68:97:90:4d:29:dd:c0:a9:
         ec:68:e0:97:71:51:b6:6d:55:e3:ce:e8:39:b4:e3:5a:eb:54:
         3a:af:b9:ca:a4:8b:f1:74:cc:39:45:99:e7:a7:69:d0:dc:d1:
         3b:b2:15:8c:7c:c7:ad:e3:87:bf:bd:02:50:79:0f:e5:04:4d:
         05:64:1f:42:3d:df:4c:01:60:fc:b9:7e:2e:2d:0e:0b:ea:e9:
         71:21:c6:0e:f7:a5:b8:02:0a:43:90:23:95:6f:0c:8e:02:38:
         b9:24:db:34:08:b2:f8:e6:02:2c:40:18:dc:dd:17:db:bb:b2:
         c1:3f:7e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:26 2026 by rpki-client