Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/FDAF18600D7511F19C67C433203D8C67.roa
File:                     FDAF18600D7511F19C67C433203D8C67.roa (raw, json)
Hash identifier:          igU6kSZmRjtoi3wcokgI1+ZNABRUkpNH2kbVGr6zeUw=
Subject key identifier:   DA:4A:73:AE:8B:A6:17:08:DF:A4:B2:49:03:43:E8:A3:84:6E:C9:FD
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       065C
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/FDAF18600D7511F19C67C433203D8C67.roa
Signing time:             Sun 31 May 2026 17:54:53 +0000
ROA not before:           Sun 31 May 2026 17:54:53 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     152491
IP address blocks:        151.158.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1628 (0x65c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: May 31 17:54:53 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c75ed-def3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:21:b8:a2:f3:75:c8:c1:07:e5:b6:f8:e2:be:
                    be:40:70:44:bd:fa:fc:00:9d:c8:ca:35:1f:79:87:
                    75:a4:e4:ed:d2:23:56:5c:b5:d2:4a:3a:86:14:93:
                    6e:00:45:ac:bc:31:a2:55:3b:bc:e8:3c:92:18:bc:
                    31:3c:a9:03:09:c8:e1:83:ed:50:71:e9:c0:eb:34:
                    f5:8a:33:27:6f:69:38:0c:80:da:b3:7a:d1:9e:08:
                    bb:59:21:74:4f:dd:b2:b0:be:34:56:81:61:2d:66:
                    50:74:19:c7:93:e9:60:bb:c5:0c:5f:da:8f:dd:ab:
                    b7:26:ad:d4:28:ec:4e:62:f3:65:4d:19:a5:07:77:
                    94:09:5c:bf:48:65:e0:de:ca:5a:38:9c:aa:b6:0d:
                    e3:85:54:9b:cb:e7:5d:4f:3b:4a:1e:b3:af:d2:17:
                    7a:b3:21:f2:3c:16:10:fe:4c:00:8b:75:39:e4:e4:
                    d3:06:26:a4:0b:44:8b:3d:26:04:b4:32:df:d7:93:
                    e7:d2:16:9f:df:a3:e5:55:5b:0d:1f:11:ba:ad:19:
                    14:52:44:9c:19:f3:5e:d9:23:da:d3:cd:57:13:78:
                    6d:16:bd:f6:c1:37:88:6d:b3:42:8c:47:cf:5e:b2:
                    88:a3:9e:5e:72:93:ec:f9:52:fe:91:1b:2a:b7:8b:
                    db:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4A:73:AE:8B:A6:17:08:DF:A4:B2:49:03:43:E8:A3:84:6E:C9:FD
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/FDAF18600D7511F19C67C433203D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:dd:74:00:77:14:d7:3a:1c:b5:11:b9:0e:18:9f:0b:c3:8c:
         9a:35:7f:b5:e2:c8:b7:92:5c:b9:79:2c:39:ce:33:ce:1a:d4:
         96:06:d3:e4:ac:50:fb:43:6e:b3:1b:57:76:7d:5d:07:4d:00:
         7c:2c:d0:21:a3:a7:b2:d6:8e:8c:cc:bb:6b:b1:ef:62:8e:fe:
         31:6c:9c:ab:f3:82:21:c6:73:4f:b8:51:d2:89:4b:46:1a:c4:
         40:59:3c:dc:68:71:6a:30:03:6b:1c:65:bc:e1:9e:fd:44:62:
         c9:92:a1:e3:63:6e:23:4c:99:24:4a:50:8f:63:7a:cd:0c:c9:
         ef:41:04:a5:23:eb:50:ae:a8:09:75:9b:61:2f:1a:88:39:40:
         c9:c2:84:7c:ae:dd:81:97:83:c0:42:aa:05:35:cb:ac:f5:13:
         1e:f4:ee:09:96:8b:39:cf:cb:9b:bf:a9:9c:2f:eb:9f:08:09:
         a8:94:b4:66:24:a3:f6:57:2d:de:f3:0e:55:2a:b9:6f:c9:74:
         3c:7e:14:f0:e6:08:83:16:8c:8c:dd:60:cc:36:84:26:40:6f:
         5f:1c:2d:97:3e:2a:4b:13:4d:0f:30:1d:a3:11:6d:09:aa:ea:
         f3:28:fb:38:64:71:26:b5:71:eb:36:ea:10:ab:f8:77:ee:34:
         e7:cf:57:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:08:25 2026 by rpki-client