Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/FDAF18600D7511F19C67C433203D8C67.roa
File:                     FDAF18600D7511F19C67C433203D8C67.roa (raw, json)
Hash identifier:          BKjZPETmmTE+KF1achc790/D55More1QesHxmR/JFm0=
Subject key identifier:   E4:C7:0A:B5:B5:FA:DF:8C:38:28:1E:E8:FF:1C:9B:B2:EC:F4:97:F2
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       0691
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/FDAF18600D7511F19C67C433203D8C67.roa
Signing time:             Mon 06 Jul 2026 17:54:42 +0000
ROA not before:           Mon 06 Jul 2026 17:54:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152491
IP address blocks:        151.158.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1681 (0x691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Jul  6 17:54:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bebe2-b200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9a:45:7c:3e:6d:7c:61:c3:49:14:a9:11:eb:
                    90:f0:f8:5f:55:29:bb:d8:b6:9a:7e:b2:80:ad:a4:
                    ad:f4:61:e2:0a:99:44:f8:ce:d7:dd:a5:ec:f9:16:
                    25:c6:1c:e2:46:8f:9d:99:c3:61:27:ce:56:5a:3a:
                    2a:9a:e8:67:c3:7d:7e:5b:6a:f2:8b:62:38:40:63:
                    c1:e6:3c:74:2c:f6:96:ef:ec:8d:6c:04:0e:24:53:
                    2c:22:1a:07:8b:ef:8f:b2:9e:ab:6b:ad:99:a7:a3:
                    75:79:1b:08:52:5e:e9:d8:69:df:61:f6:f1:6a:ee:
                    e3:ed:58:fc:d9:15:d8:55:5f:33:25:8b:5d:f2:00:
                    e7:e9:b2:50:a1:45:7c:04:39:0a:de:eb:74:ee:4d:
                    3a:8a:f3:50:2b:a3:3b:f7:71:60:9a:e7:0f:bd:49:
                    2d:a3:c6:19:e6:32:ac:51:f9:39:58:b8:f4:5b:aa:
                    a0:86:69:81:80:21:aa:ea:7d:56:4d:5f:e5:56:2c:
                    1b:4b:c8:ee:ed:81:27:ef:0b:e2:b9:00:63:12:03:
                    dd:b2:cb:54:57:4d:79:b5:0f:1c:fd:52:cf:be:71:
                    12:2e:8e:42:de:33:40:94:5d:01:72:6e:63:42:80:
                    d3:6e:97:7a:b1:14:25:3e:a6:a8:85:c0:fe:be:b3:
                    18:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C7:0A:B5:B5:FA:DF:8C:38:28:1E:E8:FF:1C:9B:B2:EC:F4:97:F2
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/FDAF18600D7511F19C67C433203D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:cf:c7:db:b7:5b:4b:d0:b7:99:40:ee:6a:3d:2b:49:9f:30:
         c5:5e:47:f5:9e:f5:8c:6f:ef:dd:f4:7b:8a:9b:9b:d6:0e:47:
         11:b5:d1:dc:94:6e:c2:17:7c:c3:4e:45:f8:6c:73:4a:79:a1:
         77:73:ef:31:10:7f:81:c9:0f:79:ee:57:52:58:d9:8f:b2:30:
         4a:12:3c:dd:e0:38:fd:4c:7b:76:70:0b:9f:1a:d4:2a:7d:7b:
         cf:87:bc:d5:31:cd:07:d0:79:54:fc:f1:14:59:45:50:fd:c4:
         19:79:fb:5d:53:47:c7:83:28:9c:e3:cc:d8:82:d3:7a:15:93:
         3c:3b:11:df:77:7e:4b:5a:3d:d6:36:81:18:18:be:39:88:f5:
         ae:52:22:8d:4f:5a:3f:c2:4d:70:16:b8:d2:64:84:fb:04:89:
         9c:58:0e:40:9c:a1:c0:4f:6d:df:88:3a:fa:0a:53:ba:be:c8:
         e9:f6:e9:38:4d:72:52:87:9d:6f:ad:c2:b9:74:ab:4a:e7:c6:
         23:89:2b:df:5c:3f:d1:b9:f4:71:2b:aa:2b:19:f2:8d:57:5d:
         ca:06:73:2f:48:63:16:ad:d6:d2:06:3c:01:a5:30:cc:08:fc:
         44:4b:02:a4:73:d9:ce:43:41:2d:db:34:14:d3:78:ae:a6:98:
         27:43:c3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:18:44 2026 by rpki-client