Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa
File:                     04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (raw, json)
Hash identifier:          6SGIVV8UzkYI8imkUH9CHf8Pfdrw5iBU8LEsd0w7wTY=
Subject key identifier:   54:10:D8:F0:32:52:F2:07:B1:5B:FF:91:77:0D:94:6B:5A:F5:FC:45
Certificate issuer:       /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Certificate serial:       17F1
Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:14:57 +0000
ROA not before:           Thu 08 May 2025 17:17:40 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     135146
IP address blocks:        168.70.150.0/24 maxlen: 24
                          168.70.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl
                          rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6129 (0x17f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
        Validity
            Not Before: May  8 17:17:40 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a42dc0-3f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:54:d0:68:8d:46:c6:1e:78:07:90:79:fc:2f:
                    c0:55:fb:c4:42:38:de:ef:50:e2:8a:d3:83:e8:5a:
                    f6:63:63:27:22:33:58:bb:bd:86:35:e1:e5:ec:46:
                    d8:04:35:4e:21:64:2a:67:a2:48:ab:99:25:e4:c7:
                    64:97:75:ce:46:9e:17:01:63:25:ae:16:b8:18:a9:
                    1d:0c:61:63:d0:0e:31:3b:a3:ea:79:1c:ea:04:b9:
                    a8:a7:15:6b:f1:ea:9b:0c:7b:59:47:b7:a3:77:2c:
                    bc:03:17:54:bf:a8:68:5f:17:44:5a:e8:ec:b1:ce:
                    4e:31:7d:b0:0b:fd:cb:53:10:39:03:69:aa:a1:8b:
                    0e:37:c6:57:4a:14:15:9e:ba:eb:ea:78:4e:72:50:
                    19:90:3e:ce:77:0d:21:8b:09:f8:f7:11:e2:d6:e8:
                    9b:7a:0c:6b:6b:f0:b9:6b:09:3b:7b:64:c6:6c:21:
                    bd:de:45:6c:91:55:e2:33:c0:bf:2d:38:19:c2:39:
                    4e:d9:1b:37:e6:af:12:d3:10:1e:41:bf:69:74:56:
                    a6:47:24:14:49:64:07:d9:f1:4d:3d:7e:5b:d8:53:
                    0a:99:09:d5:d6:21:c6:e5:ff:b0:74:6f:ab:b0:f5:
                    10:f2:8f:20:21:85:3d:c6:06:17:75:cb:a4:9b:ce:
                    d6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:10:D8:F0:32:52:F2:07:B1:5B:FF:91:77:0D:94:6B:5A:F5:FC:45
            X509v3 Authority Key Identifier:
                keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.70.150.0/24
                  168.70.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:f6:e0:1b:10:7e:0b:46:c6:85:45:8e:1e:9d:90:11:e7:78:
         84:1c:e6:88:42:6c:87:2c:89:c9:1a:03:04:e9:79:d5:89:0a:
         a2:8a:75:23:63:0d:69:7d:91:a7:7e:06:15:9a:1e:9b:23:b1:
         ca:49:ee:f3:a4:c6:00:df:7d:db:a5:29:6c:83:31:85:a2:ba:
         d1:38:c1:53:1c:44:74:a5:f1:37:88:96:48:9e:15:44:76:e3:
         fa:cf:13:9b:9d:a0:e9:b5:bb:d9:fd:2b:6b:8b:a0:d9:2a:a1:
         c0:49:84:63:85:4f:86:52:53:1b:d6:07:86:8c:de:d4:d4:f9:
         ad:6a:5d:61:26:50:3b:0e:76:8a:39:d9:ce:fa:06:70:17:e8:
         5a:31:73:c3:fb:10:bc:fa:47:b1:3e:64:43:c3:a2:4c:a9:43:
         49:ba:f7:3d:e5:3c:77:c5:5f:72:57:44:bf:d4:93:08:c8:1c:
         7a:ee:4f:ee:8b:47:94:06:98:f9:04:27:33:87:3c:2b:65:a6:
         b6:f4:13:d1:43:29:87:ec:32:1c:3c:23:4e:98:4e:5b:95:f4:
         21:c1:4e:df:e1:f4:ae:41:21:c7:1a:f8:7b:08:54:e0:4b:69:
         00:f1:c5:26:61:a5:a2:2b:0a:42:d8:09:8f:3a:e3:e8:aa:fc:
         e8:f6:68:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:13:36 2026 by rpki-client