Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/A08C2E961BA511F195A2E3A7083D8C67.roa
File:                     A08C2E961BA511F195A2E3A7083D8C67.roa (raw, json)
Hash identifier:          qMgt9HWWy/RpJzgqls8z+VL7Pu3cjeATqJvCDYbhnZ4=
Subject key identifier:   EC:7A:38:7A:AB:3E:AF:A7:1D:0C:2A:27:F8:71:42:0D:26:2B:43:F5
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       0686
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/A08C2E961BA511F195A2E3A7083D8C67.roa
Signing time:             Mon 06 Jul 2026 17:54:21 +0000
ROA not before:           Mon 06 Jul 2026 17:54:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     140972
IP address blocks:        151.158.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1670 (0x686)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Jul  6 17:54:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bebcd-2896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4a:4a:fb:79:1c:4b:7a:4a:f7:3e:29:52:e3:
                    1f:1f:c4:d2:87:d6:01:3b:d0:fa:60:c4:e9:f7:3d:
                    f2:45:53:71:0f:ab:cc:d1:ca:c1:5c:e6:67:2c:c6:
                    a4:db:e3:01:5b:6c:f3:36:f4:58:1e:0b:03:c7:6a:
                    76:52:71:e3:0a:02:58:62:d2:d0:d9:79:9b:d0:8f:
                    25:1f:0f:e5:fd:7f:30:4f:b4:03:90:db:3f:f1:19:
                    e0:1f:12:6d:9a:42:1a:5b:e5:11:d5:c9:87:66:1b:
                    54:6c:be:80:1f:89:95:9b:a0:e7:da:50:e8:07:72:
                    1a:db:8c:f1:0e:d0:69:01:d9:50:9c:8a:5a:5c:f2:
                    b4:b5:ec:22:01:8c:5f:eb:a8:8a:c1:f0:fb:04:77:
                    24:0f:21:df:1d:ec:32:68:7a:67:e7:cd:a1:67:14:
                    45:14:18:c7:1b:a4:24:8a:15:fa:61:96:a9:8b:31:
                    8f:75:1d:ec:46:60:3a:83:f6:db:34:1a:7a:95:3c:
                    2f:45:b2:e8:f6:25:68:c1:d5:25:1e:e6:fd:c0:c4:
                    ea:b0:5f:c0:2a:ae:b6:4a:42:07:b4:c0:9c:91:95:
                    b3:eb:28:95:79:fa:42:82:78:37:c6:86:12:ce:9c:
                    ff:8d:f7:b0:27:15:f4:df:22:6e:d5:83:5f:d1:c5:
                    99:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7A:38:7A:AB:3E:AF:A7:1D:0C:2A:27:F8:71:42:0D:26:2B:43:F5
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/A08C2E961BA511F195A2E3A7083D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:78:73:4e:1c:d9:d2:f9:af:7c:a3:c1:2d:75:1a:31:c2:c1:
         c9:45:de:9b:3a:f9:68:23:ea:8e:5e:7f:ef:55:c3:5e:7c:75:
         01:34:49:17:3c:98:3b:c4:56:99:c7:e4:93:2e:25:39:4c:3a:
         18:e8:7d:88:87:fa:e2:90:a0:75:a6:59:27:57:f9:57:f8:a2:
         72:af:e5:86:2d:13:1f:a8:9e:5e:e8:8e:b4:39:9a:38:28:c1:
         11:a2:9b:12:da:9f:78:7b:b2:5c:f3:a5:bc:d4:96:8c:d6:9f:
         23:c0:b4:42:50:15:c5:c1:9f:b5:a2:3a:1a:71:e3:ba:9e:96:
         53:1b:c7:9c:d3:88:a0:b5:97:00:af:79:c6:29:81:9c:af:b7:
         a7:7b:46:1c:25:9c:e8:19:5a:cf:c7:9d:47:34:42:1b:bd:ab:
         f7:3b:fc:4d:bc:17:d8:2e:b9:03:ce:8f:ff:c0:dc:ae:7e:67:
         06:c9:c6:54:30:8a:4c:9b:8e:10:e7:f1:48:ca:70:79:32:09:
         35:d9:36:db:52:9c:96:8b:7f:85:88:87:3d:a1:12:12:4d:d4:
         a8:8d:d9:12:da:a1:3d:5f:9d:37:51:d8:2f:57:bc:2f:51:cf:
         69:d5:d7:74:c0:33:e8:02:ac:00:df:1a:d0:02:18:7a:9b:b5:
         b9:fb:c1:0b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEVFRDgwQjE5NDI2QzBENEE4MkJDNkYwQjUwQjlCQjEy
NUUxRkQzOEEwHhcNMjYwNzA2MTc1NDIxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZWJjZC0yODk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuUpK+3kcS3pK9z4pUuMfH8TSh9YBO9D6YMTp9z3yRVNxD6vM0crBXOZnLMak
2+MBW2zzNvRYHgsDx2p2UnHjCgJYYtLQ2Xmb0I8lHw/l/X8wT7QDkNs/8RngHxJt
mkIaW+UR1cmHZhtUbL6AH4mVm6Dn2lDoB3Ia24zxDtBpAdlQnIpaXPK0tewiAYxf
66iKwfD7BHckDyHfHewyaHpn582hZxRFFBjHG6QkihX6YZapizGPdR3sRmA6g/bb
NBp6lTwvRbLo9iVowdUlHub9wMTqsF/AKq62SkIHtMCckZWz6yiVefpCgng3xoYS
zpz/jfewJxX03yJu1YNf0cWZtQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOx6OHqr
Pq+nHQwqJ/hxQg0mK0P1MB8GA1UdIwQYMBaAFO7YCxlCbA1KgrxvC1C5uxJeH9OK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi81NDdDODU4NjQx
REExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RVcUN2RzhMVUxtN0VsNGYw
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzd0Z0xHVUpzRFVxQ3ZHOExVTG03RWw0ZjA0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvNTQ3Qzg1ODY0MURBMTFFQzkwNUUzMjUyQzRGOUFFMDIvQTA4QzJFOTYx
QkE1MTFGMTk1QTJFM0E3MDgzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBl574MA0GCSqGSIb3DQEBCwUAA4IBAQA7eHNOHNnS+a98o8EtdRox
wsHJRd6bOvloI+qOXn/vVcNefHUBNEkXPJg7xFaZx+STLiU5TDoY6H2Ih/rikKB1
plknV/lX+KJyr+WGLRMfqJ5e6I60OZo4KMERopsS2p94e7Jc86W81JaM1p8jwLRC
UBXFwZ+1ojoaceO6npZTG8ec04igtZcAr3nGKYGcr7ene0YcJZzoGVrPx51HNEIb
vav3O/xNvBfYLrkDzo//wNyufmcGycZUMIpMm44Q5/FIynB5Mgk12TbbUpyWi3+F
iIc9oRISTdSojdkS2qE9X503UdgvV7wvUc9p1dd0wDPoAqwA3xrQAhh6m7W5+8EL
-----END CERTIFICATE-----
Generated at Tue Jul 21 18:18:24 2026 by rpki-client