Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/C39A0E681C3F11F191DD1E243C3D8C67.roa
File:                     C39A0E681C3F11F191DD1E243C3D8C67.roa (raw, json)
Hash identifier:          hQLjL6uaEzXj5JAnvJVWdPD1jvqNtBt6nBLQSo6Jx78=
Subject key identifier:   71:2D:D2:4D:20:97:2A:44:6A:17:24:74:86:48:17:6B:1E:C9:BF:D2
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       0681
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/C39A0E681C3F11F191DD1E243C3D8C67.roa
Signing time:             Mon 06 Jul 2026 17:54:10 +0000
ROA not before:           Mon 06 Jul 2026 17:54:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136634
IP address blocks:        151.158.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1665 (0x681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Jul  6 17:54:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bebc2-4153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dd:24:fb:c6:9f:d9:9f:28:1b:67:8f:ab:38:
                    63:5b:43:1f:3f:01:bc:cc:26:02:cb:e0:08:25:a4:
                    74:ae:14:e7:28:0c:7b:22:70:bc:b8:a8:91:f7:c5:
                    04:07:2a:87:31:b9:6b:b3:99:2e:9f:8e:12:c5:5a:
                    61:c0:dd:83:88:5a:4a:82:d2:b9:23:2b:36:bd:52:
                    33:dc:8a:0c:ca:73:48:f9:5d:09:79:6c:c3:10:df:
                    37:a3:03:22:42:43:35:ea:bc:e6:4b:58:0e:77:c2:
                    9a:de:f4:44:16:7e:d7:df:2f:19:3f:68:37:01:5c:
                    16:4c:e1:c7:82:6c:08:fd:a0:76:b1:cb:b6:ef:4b:
                    01:d8:67:a6:09:5c:89:36:db:13:ff:10:1f:d2:9e:
                    33:02:2d:82:ff:9b:7c:92:bd:2b:7b:0a:49:7a:e5:
                    48:22:81:74:7f:22:7c:4b:39:08:21:2a:c6:e8:5c:
                    1d:c2:78:98:fb:0e:e8:c7:aa:2b:8b:26:bb:b2:ce:
                    82:8b:b8:97:75:06:b1:19:72:be:5f:07:3c:7b:cd:
                    13:6b:61:b0:44:a6:61:69:71:bc:04:32:39:2d:fd:
                    82:c8:78:2b:61:08:b5:2b:43:25:56:51:f4:0c:11:
                    1e:73:c1:c5:f9:f9:03:38:2f:8f:58:32:8c:e8:f9:
                    53:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2D:D2:4D:20:97:2A:44:6A:17:24:74:86:48:17:6B:1E:C9:BF:D2
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/C39A0E681C3F11F191DD1E243C3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:0b:75:8c:51:ac:53:1f:e7:cd:9f:5a:df:64:12:50:f9:70:
         2c:59:c4:7d:27:3a:c7:44:02:cb:66:f9:48:97:91:0e:7e:57:
         8d:32:27:57:91:a2:39:81:09:0a:2d:7e:41:74:18:99:27:8f:
         4f:91:c1:8f:c0:c3:b6:89:75:25:81:96:ba:9a:9b:89:db:31:
         67:80:ae:bd:d8:f2:9a:0b:72:4d:51:06:61:db:94:79:8d:60:
         c4:2f:29:89:95:5c:7e:80:63:02:59:90:a7:1c:db:55:9e:8c:
         46:f5:9b:60:be:81:5e:fc:bf:26:10:d1:fa:7d:d7:f2:36:eb:
         6d:ae:10:a3:b4:00:0b:23:13:f1:d8:ac:fd:74:8c:d4:8c:81:
         c0:04:f5:80:03:49:4d:19:c2:a5:21:01:c6:ee:6b:44:de:66:
         59:f8:bf:f1:b3:f5:0f:42:97:e5:75:a5:6e:ec:e0:ec:76:a0:
         90:25:a6:1f:21:96:96:b6:90:5c:7e:e9:b2:da:75:a9:f8:73:
         cc:f2:c8:86:30:69:03:70:2f:01:03:dd:d2:60:6b:4d:18:3d:
         3b:68:23:e4:d8:0e:77:cf:a5:3f:68:f9:b7:f3:8d:2f:da:78:
         df:8a:e6:6b:55:e4:3c:d0:25:dd:b9:a1:43:e6:7a:58:b3:ca:
         2e:66:bc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:47:56 2026 by rpki-client