Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/A148FF044A0211F198214334BF833773.roa
File:                     A148FF044A0211F198214334BF833773.roa (raw, json)
Hash identifier:          Lxc8M0Q7pB6o5/fPG+6vBF3Z+UdTotEDjN+d6FLXvMk=
Subject key identifier:   2D:69:DB:85:B9:A6:75:59:85:59:55:6C:18:C9:F1:C0:01:87:EE:79
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       0657
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/A148FF044A0211F198214334BF833773.roa
Signing time:             Sun 31 May 2026 17:54:44 +0000
ROA not before:           Sun 31 May 2026 17:54:44 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     142251
IP address blocks:        151.158.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:22:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1623 (0x657)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: May 31 17:54:44 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c75e4-1e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3c:a9:b7:ff:cd:c5:69:52:cc:5f:36:61:54:
                    1e:3e:c6:6d:6f:9e:36:3b:99:7f:70:43:8d:86:29:
                    2b:3f:42:60:8d:d3:d7:f8:26:67:1b:48:6b:aa:f4:
                    fc:70:b0:44:fb:b4:a6:70:87:24:92:2e:a9:dc:ea:
                    6c:70:f7:81:83:55:56:5d:7f:d8:b6:bf:9d:3a:46:
                    42:1f:24:f4:80:1c:02:67:75:e9:e3:86:7f:86:35:
                    bd:ab:3b:9d:d0:e7:1c:84:a8:3f:98:46:40:ff:ef:
                    53:ea:af:de:6e:d3:6f:cc:f9:d6:95:6f:e4:7d:e7:
                    c5:db:85:b5:67:be:5c:ff:6d:c5:b8:32:d4:59:af:
                    a9:95:6a:1c:dc:25:db:25:d4:68:e0:a6:0f:88:2b:
                    c5:10:c8:2d:8a:b3:88:ad:c7:b7:b8:47:8d:fe:e3:
                    25:75:ef:84:ba:4a:7b:04:8a:75:c0:93:a7:db:f4:
                    eb:ed:a9:2f:b8:8f:b0:04:ba:6b:34:f9:09:8e:f6:
                    3a:ce:79:28:53:a2:0d:a7:f9:83:ea:b0:58:4e:b8:
                    84:41:1b:0b:ec:4f:9a:a2:05:09:9c:91:bf:c5:2f:
                    36:f7:d7:54:fa:72:74:16:cf:df:a4:af:a9:27:59:
                    fc:fb:a6:27:10:95:95:5e:6b:73:ab:a6:7e:9d:05:
                    1e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:69:DB:85:B9:A6:75:59:85:59:55:6C:18:C9:F1:C0:01:87:EE:79
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/A148FF044A0211F198214334BF833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:d2:39:71:f4:0a:23:3a:15:97:13:1a:75:fa:cd:51:c7:9a:
         c9:92:ba:67:0e:4d:ad:fd:92:a4:f3:06:d9:f4:3f:77:8e:e8:
         ad:92:c0:ae:6d:49:89:66:b2:9e:57:f4:e0:c3:0f:eb:20:e8:
         3a:c0:ec:ee:ed:5b:dd:81:fa:2d:6a:5b:f2:82:45:a4:c7:43:
         f3:fa:8a:c5:4b:74:bc:3f:51:74:5f:62:82:e8:d6:c4:51:97:
         58:99:7a:cf:36:a8:17:bc:dc:98:ef:5a:dc:79:3c:f4:21:d6:
         ce:3d:42:cd:1a:9d:69:4c:62:d4:54:e2:13:4e:83:eb:b4:8d:
         b2:6e:ac:82:4c:be:3b:03:ee:40:b8:6a:0f:1f:fb:3d:ee:08:
         75:8e:c2:e0:10:77:16:14:aa:1d:4a:68:ff:c6:a7:2c:2b:50:
         7b:77:ef:bb:02:5b:40:c0:9f:17:59:bb:1a:91:b0:5d:5e:b0:
         12:00:88:c6:5f:18:bb:9b:78:76:21:2f:3f:6e:8c:ee:98:de:
         73:64:10:0a:39:df:6b:3b:6c:36:f9:bb:09:2d:96:46:07:6b:
         94:5c:f8:e6:94:e0:d0:5b:c8:00:87:a0:1d:2e:4d:c3:3c:e3:
         ba:c7:2a:6b:ee:a3:4e:20:9b:fd:59:4e:73:48:90:f6:91:52:
         56:87:95:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:57:23 2026 by rpki-client