Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/8DCB2AB465C411F1A2C791C58147A888.roa
File:                     8DCB2AB465C411F1A2C791C58147A888.roa (raw, json)
Hash identifier:          3ZozKpiD+RF1w4aYWghbR/4Q22EJNvCn5UDnfrs9prE=
Subject key identifier:   7D:A3:9D:28:21:6A:DA:72:62:51:E6:CF:54:49:70:D8:34:4A:31:AE
Certificate issuer:       /CN=A91694A4/serialNumber=E08E2A450BEEBB0146B608FF103888A2C3EEFEAE
Certificate serial:       03
Authority key identifier: E0:8E:2A:45:0B:EE:BB:01:46:B6:08:FF:10:38:88:A2:C3:EE:FE:AE
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/8DCB2AB465C411F1A2C791C58147A888.roa
Signing time:             Thu 11 Jun 2026 18:37:09 +0000
ROA not before:           Thu 11 Jun 2026 18:37:09 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     137081
IP address blocks:        151.158.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.crl
                          rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91694A4, serialNumber=E08E2A450BEEBB0146B608FF103888A2C3EEFEAE
        Validity
            Not Before: Jun 11 18:37:09 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a2b0055-3dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:2d:8d:2d:a1:dc:ba:34:f4:8e:02:dc:7d:
                    06:14:3c:9b:9c:57:43:05:7c:b7:36:78:e7:1d:7d:
                    eb:cd:7f:92:71:9e:cb:ac:21:89:2d:38:45:df:9c:
                    74:4b:91:2b:91:fd:84:aa:37:21:5f:f5:06:9f:5e:
                    a2:68:3d:ab:59:be:a5:ad:3d:1c:bb:19:8c:07:9a:
                    08:a5:0d:58:09:e8:e5:26:b0:67:34:11:28:07:af:
                    14:bf:30:57:90:39:54:f9:13:33:32:38:d5:87:b1:
                    79:a2:63:db:d7:31:33:44:5e:18:2e:ed:f7:49:55:
                    01:07:e3:1c:de:05:f2:a4:c9:d2:b7:1b:3b:f1:dc:
                    9d:93:79:ab:97:0c:fe:f8:d8:98:3e:55:f9:d7:ae:
                    1b:d6:f9:64:98:26:80:d0:90:ac:e6:91:02:a9:7e:
                    b5:25:0f:a0:1f:ed:ce:9f:f6:7d:34:08:ea:67:cc:
                    0f:9c:ad:d3:3a:30:cc:6e:79:87:72:e8:39:6a:b2:
                    a0:85:65:52:a4:73:c5:52:79:5a:0a:e1:b3:3e:07:
                    32:d6:8e:06:08:34:64:3b:da:e9:bf:fd:fa:58:72:
                    0b:8e:f3:6a:d7:be:16:87:15:16:66:32:98:e1:21:
                    03:c1:f5:ec:80:7f:ea:7f:4d:6e:86:43:ed:35:63:
                    29:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A3:9D:28:21:6A:DA:72:62:51:E6:CF:54:49:70:D8:34:4A:31:AE
            X509v3 Authority Key Identifier:
                keyid:E0:8E:2A:45:0B:EE:BB:01:46:B6:08:FF:10:38:88:A2:C3:EE:FE:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/8DCB2AB465C411F1A2C791C58147A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:79:e8:a6:87:96:23:8e:39:7a:fc:7c:85:bc:a0:d8:66:23:
         b8:fd:76:c4:01:8f:ad:6a:7d:36:9e:f9:61:5e:89:8a:34:bc:
         ab:b9:56:96:74:ee:1f:38:5a:3b:42:ac:06:41:f8:0a:86:5e:
         c6:8a:ff:b4:ee:e6:fc:1d:3d:f1:74:68:f6:ad:ad:e5:95:1d:
         a1:e5:57:a1:05:0a:b2:1f:5b:42:f4:23:a1:5d:0b:22:65:ed:
         30:6b:5d:ba:d4:5b:27:86:49:42:7d:8d:4c:f1:98:3c:e3:85:
         0c:92:91:56:aa:45:95:4a:bc:ab:5b:64:05:9d:3f:bd:d1:0f:
         4b:51:a2:44:f2:2f:5f:02:65:8c:fe:12:60:4c:48:e3:8e:90:
         a9:14:55:c4:2c:5d:0c:46:7b:b2:e2:13:0a:ca:06:5f:4c:47:
         97:43:b6:17:27:bd:5a:b6:d9:0f:8c:5f:6d:db:a5:5c:43:d6:
         a8:f7:3f:55:d4:28:03:85:c3:40:ad:3c:9b:5c:59:92:0b:c7:
         fc:4b:2d:2a:19:fb:4a:58:66:bc:a5:6f:da:e9:82:fd:d6:ec:
         04:95:08:3a:55:17:31:a0:e9:26:91:4e:56:01:ff:44:88:c7:
         67:78:79:b3:da:f2:b6:29:48:8b:15:2d:8a:20:c4:3e:63:90:
         36:9a:d1:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:20:41 2026 by rpki-client