Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/85FEBF022CE511F1A630748AA1833773.roa
File:                     85FEBF022CE511F1A630748AA1833773.roa (raw, json)
Hash identifier:          Gfa+p3+fqO1e0Y8JaoomNrMhA65LrwM9+Ez17UEgOM4=
Subject key identifier:   3E:02:FF:86:14:4C:2F:8F:29:11:27:02:A7:13:71:4F:F0:12:2E:97
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       0651
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/85FEBF022CE511F1A630748AA1833773.roa
Signing time:             Sun 31 May 2026 17:54:32 +0000
ROA not before:           Sun 31 May 2026 17:54:32 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     140171
IP address blocks:        151.158.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:22:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1617 (0x651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: May 31 17:54:32 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c75d8-2738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:38:0e:9c:04:90:12:de:3a:ba:27:a4:23:36:
                    6c:fb:2d:49:f8:99:41:f3:75:80:da:45:38:db:c1:
                    c4:22:bb:b7:77:9a:2e:a6:16:a0:e7:c2:d2:5b:43:
                    50:b7:f7:ce:58:2e:bc:89:24:57:12:4d:dd:66:34:
                    fb:c5:2a:1a:d6:3a:07:b7:02:4a:a8:41:73:16:bc:
                    dd:95:e2:49:91:00:52:ee:6f:cf:b2:15:05:b9:ad:
                    8a:09:0a:d4:09:00:66:d2:44:6a:7c:e8:8f:59:3a:
                    e8:85:dd:04:07:32:c1:a0:5f:8a:92:8f:fb:a1:13:
                    60:a2:00:ca:cf:b4:2a:ea:f8:75:a8:68:c8:c4:dc:
                    20:76:40:6a:2b:36:7f:ff:a9:b9:97:3e:6d:22:b3:
                    5e:7f:e6:df:b1:45:23:96:4d:d2:4d:b6:1b:4b:c3:
                    a1:58:7f:7c:3d:3e:a9:e9:2a:57:12:09:fe:98:ba:
                    1c:f2:d2:f3:95:21:82:6b:be:93:45:2b:01:3d:b7:
                    e4:bb:ab:10:8e:a7:32:3d:b1:da:10:21:04:ca:22:
                    97:bd:79:5d:8f:27:56:b5:fb:7d:2a:d7:eb:d4:6c:
                    25:66:87:c5:2a:82:12:d3:63:ed:33:ba:fa:1e:61:
                    74:e0:c5:e2:eb:43:45:26:48:ed:ac:7c:f0:ce:1b:
                    3b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:02:FF:86:14:4C:2F:8F:29:11:27:02:A7:13:71:4F:F0:12:2E:97
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/85FEBF022CE511F1A630748AA1833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:a7:8f:f7:a6:bf:32:09:8f:09:4e:63:11:18:d5:91:d3:db:
         a8:47:6a:e4:10:54:33:bd:90:ba:6d:80:5d:1e:f1:4c:2e:98:
         86:fd:e1:5e:73:b1:fa:92:76:63:83:fa:d7:9e:f0:02:6b:fd:
         da:d3:d2:22:b2:ac:b4:ab:7f:fa:08:eb:e3:25:1e:a9:04:9a:
         a5:30:d9:a7:80:59:5d:0e:07:6b:58:e4:3d:21:e3:a4:0a:97:
         73:75:26:92:53:8b:df:4f:0c:71:b5:c1:b8:70:f8:82:a2:8e:
         00:64:c4:9c:3a:d4:cb:f9:2c:89:04:7c:1f:ca:92:1f:62:2b:
         b3:11:53:d4:c4:ed:4c:94:a8:eb:9d:4b:4c:3b:dd:dd:d6:11:
         f2:cd:0d:79:c3:b8:c9:f1:ec:3a:48:8d:12:41:6f:31:5b:94:
         7e:1a:95:8a:a7:41:55:2b:c6:a1:2f:f3:c2:a3:69:92:79:6c:
         9d:c5:59:5f:e5:68:9a:e6:b9:b3:cd:73:a6:14:64:73:da:da:
         60:94:11:57:de:05:1e:21:3d:fd:5d:91:b9:1c:1b:63:e5:dd:
         a6:a4:4b:5f:7e:d2:a3:5c:75:5e:7d:4a:e4:b0:27:15:61:50:
         21:1b:7a:a7:b6:93:41:c0:3e:05:45:82:13:0c:1e:e8:df:f0:
         e1:75:65:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:21:57 2026 by rpki-client