Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa
File:                     04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (raw, json)
Hash identifier:          G7CUtd3m+KDiwG1MCgyxY5Ml5ZuJVANVfOkXBqSh68I=
Subject key identifier:   7E:49:19:ED:46:C5:2D:16:EC:0C:BC:D1:4D:23:A3:BE:CE:9D:05:B7
Certificate issuer:       /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Certificate serial:       1828
Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa
Signing time:             Thu 04 Jun 2026 17:19:40 +0000
ROA not before:           Thu 04 Jun 2026 17:19:40 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     135146
IP address blocks:        168.70.150.0/24 maxlen: 24
                          168.70.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl
                          rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6184 (0x1828)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
        Validity
            Not Before: Jun  4 17:19:40 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21b3ac-0bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d4:aa:f0:5b:d6:fa:ec:10:b0:f5:8f:38:84:
                    26:3f:73:14:8a:4b:0b:43:11:5f:25:38:06:05:fb:
                    41:30:a2:98:fa:3c:bf:40:13:7b:cf:91:56:e9:90:
                    fd:d2:08:c5:54:b7:63:1f:2e:4f:f7:3b:1f:05:55:
                    23:8c:c0:5d:05:b6:f0:81:1d:6f:f1:60:8a:30:f6:
                    a9:c7:1f:98:48:0c:16:a4:aa:7b:21:51:93:a6:6f:
                    88:08:b4:d1:fa:55:b6:ac:17:11:d9:ac:ea:6d:ea:
                    e0:16:60:0a:c0:f2:e7:f8:3a:db:f4:b8:12:ed:5a:
                    ac:c1:de:92:7e:c4:c2:47:c1:c4:ad:90:17:e3:dd:
                    e5:53:c8:3f:ab:a5:7f:48:dd:9c:09:b1:60:ba:3f:
                    15:c6:41:a1:1a:fe:ab:23:68:e4:cf:47:b3:be:06:
                    c0:f4:97:89:83:04:09:4b:c9:00:6a:f3:16:8d:ff:
                    d1:87:06:77:1b:ab:0a:83:9b:2d:98:6a:5f:57:83:
                    3e:81:ec:48:d2:23:5f:dd:a4:e7:83:03:36:7e:e3:
                    1c:2f:d3:4f:9f:b0:1b:6b:3f:66:39:a6:aa:7a:eb:
                    48:e7:12:b5:dc:14:0e:d8:30:16:90:ce:ab:6a:84:
                    55:19:5f:79:5b:8a:49:be:14:37:1b:03:f0:cd:9c:
                    83:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:49:19:ED:46:C5:2D:16:EC:0C:BC:D1:4D:23:A3:BE:CE:9D:05:B7
            X509v3 Authority Key Identifier:
                keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.70.150.0/24
                  168.70.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:85:25:d0:69:88:b2:4f:fc:95:26:76:be:c8:cb:76:ff:4b:
         88:ac:55:89:cc:19:6b:da:07:66:03:c2:c6:67:b6:ca:d9:12:
         0e:34:53:e3:04:76:e5:41:df:06:b1:42:34:e7:0c:02:b6:5f:
         96:90:51:08:57:be:c5:15:7f:68:1d:42:19:37:88:47:f4:1c:
         45:13:c2:9e:42:cd:22:cd:44:29:3b:a2:09:d2:f0:a4:cb:9c:
         b7:b0:de:f6:04:6e:8e:a1:29:e6:8e:7c:70:75:3a:f5:4f:a1:
         68:63:37:25:96:cc:6b:57:95:2c:24:a2:2f:50:2d:9a:68:80:
         0c:20:10:7f:87:40:72:e6:35:70:34:12:54:ab:e3:a9:be:8f:
         6a:e0:7e:98:87:70:04:3d:35:b0:f4:86:b5:93:d8:d7:0e:c1:
         a1:a2:c6:9f:be:03:3e:a9:3f:74:81:bb:bb:57:b5:2d:05:b0:
         b1:e0:32:9d:a3:c4:37:74:49:e5:a2:26:16:35:3d:35:14:dd:
         7e:9b:b9:38:2d:79:36:69:13:ee:56:74:00:af:ba:aa:03:cd:
         70:2f:6e:f2:a2:76:fe:96:de:e6:06:dd:33:97:4c:83:1a:ab:
         51:8f:e7:71:95:74:8e:70:af:ae:36:66:0a:5a:ae:ec:fd:e5:
         10:e8:89:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:20:51 2026 by rpki-client