Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/AA77D2C8031A11F18B50B9B7193D8C67.roa
File:                     AA77D2C8031A11F18B50B9B7193D8C67.roa (raw, json)
Hash identifier:          mg1qgwOXDSlL/VPDP3MpqCc2+Y6HrT25FwybwAzk4bc=
Subject key identifier:   C2:65:2D:59:38:78:95:C5:7C:9F:91:90:76:DE:D5:AD:F9:94:8A:56
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       068A
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/AA77D2C8031A11F18B50B9B7193D8C67.roa
Signing time:             Mon 06 Jul 2026 17:54:30 +0000
ROA not before:           Mon 06 Jul 2026 17:54:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142213
IP address blocks:        151.158.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1674 (0x68a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Jul  6 17:54:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bebd5-3a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cc:6b:40:c3:3b:4d:9e:65:19:ca:1c:af:b1:
                    b9:e9:39:e6:be:df:d6:24:57:f2:de:77:b4:6b:b3:
                    a9:3e:19:4d:04:e4:8a:e3:20:14:4b:08:9d:2e:53:
                    9d:8c:52:a0:30:22:37:83:2b:00:e8:a2:c6:01:1e:
                    97:50:da:25:e1:5b:2c:9b:bc:86:a6:81:5c:e7:7e:
                    5e:c5:6f:d5:21:67:0c:9f:66:b5:96:81:4a:63:45:
                    7f:a6:1c:22:f1:85:f9:e7:90:80:06:45:c1:3d:db:
                    dd:49:ed:19:e7:70:78:66:4b:ed:71:a2:99:05:52:
                    75:47:60:48:3f:7f:9f:73:66:2d:15:bd:b7:3b:29:
                    44:51:46:17:f2:c8:c4:1e:20:7b:d8:8a:94:33:ed:
                    67:00:d6:01:b7:8a:2b:76:16:e7:fb:ed:b4:ee:8b:
                    e8:41:23:00:3d:6e:e9:5b:5a:7a:9e:e3:67:51:2d:
                    23:b6:33:8c:63:d6:ae:6a:39:50:5d:d5:82:0b:e4:
                    05:44:56:ac:d1:ef:6e:b7:7f:71:16:a6:e0:d9:3e:
                    e1:46:cc:d7:63:b1:df:4f:b9:af:a0:07:9d:0f:83:
                    28:68:06:4f:13:80:32:92:fe:5d:64:2f:b2:e5:24:
                    11:ec:39:18:5d:c1:f3:06:11:e5:5a:c3:68:fe:3c:
                    e5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:65:2D:59:38:78:95:C5:7C:9F:91:90:76:DE:D5:AD:F9:94:8A:56
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/AA77D2C8031A11F18B50B9B7193D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:7b:ac:f9:8b:30:5f:9d:b6:c9:a4:9d:b4:31:0c:4f:4a:0f:
         cd:0a:1e:5f:c1:e4:96:94:67:90:c4:b6:16:9b:d2:4d:e4:6f:
         f1:e6:28:8e:17:8b:d1:c3:58:c8:20:43:82:4b:e7:f3:31:bd:
         d8:f6:a0:35:cf:aa:a6:a6:c0:25:75:f1:e4:e1:53:b8:01:1b:
         b8:26:f8:47:f1:ea:22:16:68:c9:d1:81:d8:ad:ba:c0:c5:38:
         86:29:b5:f6:a3:78:14:66:5b:83:57:af:1b:4e:73:b7:07:21:
         99:c7:16:88:69:1b:98:1d:4f:77:1c:ab:ea:aa:13:6c:68:09:
         6c:52:6f:6e:c4:be:8b:36:76:fe:56:2e:9f:ef:b4:b5:2a:85:
         3f:c5:50:26:8b:51:64:29:9d:96:ee:19:b9:d4:5f:aa:82:3a:
         56:31:ac:48:34:34:e4:e1:97:30:0d:9d:34:b8:2c:d6:93:bf:
         07:ee:ad:4e:78:b1:61:da:48:bb:ae:98:63:10:8f:08:c4:c0:
         6e:7f:87:e5:b6:97:33:c5:6f:a7:5c:2a:54:ef:c6:07:4c:92:
         1c:55:88:03:d1:c4:67:9a:4a:67:05:43:56:28:94:9c:0e:3f:
         1b:ae:b8:22:3a:e2:84:3c:b4:8a:dd:b2:cd:a4:80:ab:7b:79:
         dd:67:89:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:08 2026 by rpki-client