Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/EC7D444E160411F1968984DF273D8C67.roa
File:                     EC7D444E160411F1968984DF273D8C67.roa (raw, json)
Hash identifier:          yP/EjR6LKtbyGpMa4uQPqIj1rucUM9n4zkqTzUpU5OQ=
Subject key identifier:   D0:07:8E:D3:CA:99:CF:2E:4B:3B:E2:A3:81:8D:51:F2:50:D4:C9:1F
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       0689
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/EC7D444E160411F1968984DF273D8C67.roa
Signing time:             Mon 06 Jul 2026 17:54:27 +0000
ROA not before:           Mon 06 Jul 2026 17:54:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142209
IP address blocks:        151.158.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1673 (0x689)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Jul  6 17:54:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bebd2-1a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:28:ed:e2:08:4c:cf:ea:33:db:f8:1c:e8:c6:
                    ae:60:4a:df:b3:ae:6f:d0:98:9d:23:ee:11:84:50:
                    ad:20:88:21:c1:68:16:81:1d:f5:d4:c0:84:73:55:
                    00:de:c9:eb:ea:f2:31:0c:5e:1b:fd:e7:bc:f4:80:
                    4b:b9:e5:32:bc:f0:91:4d:8c:d1:88:41:1d:ee:0a:
                    60:5c:46:73:76:8b:fc:67:51:43:e9:d0:24:c1:17:
                    e6:c9:81:78:52:57:c8:7d:2a:fb:bf:f2:62:09:57:
                    19:d3:f4:03:2b:6c:35:3f:62:3f:9f:29:7c:08:56:
                    bd:0e:60:96:3b:a2:c6:49:94:78:c9:0b:ed:44:30:
                    b1:5e:43:7b:80:44:92:a3:1d:65:5a:a4:b0:2e:bb:
                    cd:7c:39:b0:79:1a:2a:80:71:24:e1:5d:7a:3a:3f:
                    1e:96:d8:60:0a:df:21:cd:25:a4:d7:89:a0:85:76:
                    2f:23:66:7b:b4:81:2d:a1:54:84:d7:0a:01:13:b4:
                    ee:7b:bd:99:61:48:cb:9d:0d:fa:50:0b:c5:28:cd:
                    cc:1c:0e:dc:63:e3:03:10:c7:a6:7a:40:0f:d9:5f:
                    22:e8:8d:88:14:8a:53:1e:f4:cb:9c:8d:98:d1:12:
                    da:78:b7:ec:c3:bf:2f:28:bf:af:10:2d:b4:4f:cc:
                    6f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:07:8E:D3:CA:99:CF:2E:4B:3B:E2:A3:81:8D:51:F2:50:D4:C9:1F
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/EC7D444E160411F1968984DF273D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:d1:5e:46:e4:0f:c1:93:da:fd:c7:17:1f:49:7f:7c:e0:75:
         5a:28:1f:c9:27:dd:98:49:39:61:c0:1e:99:95:01:e2:fd:ed:
         90:24:a2:e0:d5:bd:aa:c4:67:1e:75:42:43:a2:0c:1c:6d:8f:
         90:69:0b:cb:fc:e1:24:5e:2d:50:09:37:e5:80:df:33:cb:c0:
         d1:d1:d1:ad:22:ed:84:60:a6:ce:02:23:61:04:2d:24:57:86:
         03:5d:f5:ec:95:4b:79:f9:65:e7:f6:d4:b5:92:96:c7:38:cf:
         46:04:28:87:76:0a:be:a2:1f:f6:b3:2d:d0:e7:81:48:f1:41:
         76:80:de:30:a0:38:c5:12:3f:78:63:ee:6d:52:63:16:a1:3f:
         6c:c8:69:33:86:ab:fb:6b:0d:b9:6b:3c:9b:85:30:88:8f:8d:
         cc:3e:11:b5:15:8c:be:47:85:c3:90:60:9e:78:cd:db:d7:6a:
         0e:3b:0d:9c:37:67:8b:66:f9:d4:81:25:04:68:e3:fe:1b:49:
         f0:f8:39:44:e3:c5:81:27:e8:c4:8a:30:20:82:78:6e:26:63:
         ff:14:4d:58:f1:79:c1:97:f5:40:02:8e:1c:5a:85:0a:e0:19:
         c4:d0:8c:03:5d:4f:26:49:3a:b5:b3:1f:aa:0a:a1:01:df:c2:
         f5:f8:80:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:25 2026 by rpki-client