Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/02FDC7D2ADFE11EE8512934EC4F9AE02.roa
File:                     02FDC7D2ADFE11EE8512934EC4F9AE02.roa (raw, json)
Hash identifier:          QYhMnYoDKYmLEJvlf5lP7DRxlBwBTpIBXQwk6PS709M=
Subject key identifier:   76:C5:16:B1:B9:5C:6D:7F:20:FE:DF:D1:3A:68:26:29:17:6B:A7:EA
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2BEB
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/02FDC7D2ADFE11EE8512934EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:44:29 +0000
ROA not before:           Thu 08 May 2025 15:53:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151703
IP address blocks:        157.10.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11243 (0x2beb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:53:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c14d-6adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:4b:95:55:20:c7:df:e5:12:a8:28:4b:35:72:
                    ed:18:8a:02:10:ba:40:41:d6:69:8d:78:d0:2c:20:
                    98:86:1f:f7:48:48:44:34:16:e8:72:5e:a8:5e:da:
                    70:55:3e:19:dd:0f:2c:25:c1:1e:7a:be:a9:28:16:
                    b3:f9:df:4d:7e:4b:6b:53:0f:b8:cb:82:36:0e:85:
                    3d:9d:60:a2:ff:ff:38:e0:c8:8a:87:3a:ed:7c:b5:
                    74:09:46:8c:e6:de:80:19:48:b2:0a:b1:69:29:d7:
                    2c:fd:6a:af:40:66:7e:55:e1:7a:d0:df:2c:c6:00:
                    18:60:12:1c:e8:12:1f:62:18:55:94:5e:e8:96:21:
                    63:8b:f9:93:65:23:aa:b6:58:28:a2:b1:4e:cc:20:
                    29:a6:b2:01:33:1e:ca:aa:6d:db:98:20:5e:65:0a:
                    ad:c5:e5:1a:8f:4c:a2:1c:ec:24:ef:a0:57:22:41:
                    86:83:c6:2c:b1:e8:42:e3:1a:cd:02:fc:ce:1a:01:
                    ae:ca:ff:d5:8a:de:cc:f0:ce:8f:82:a1:be:b3:2e:
                    4f:d3:b8:f1:d9:2a:36:cf:99:e7:69:9b:80:de:ae:
                    eb:a9:77:50:44:54:9c:43:c3:ef:76:ee:22:ef:7e:
                    f6:ea:0c:8b:a4:9f:df:09:63:49:60:d6:29:d5:f2:
                    f9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C5:16:B1:B9:5C:6D:7F:20:FE:DF:D1:3A:68:26:29:17:6B:A7:EA
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/02FDC7D2ADFE11EE8512934EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:a1:16:c4:54:94:6c:54:b9:4f:ab:5d:5d:04:f4:ce:b6:8b:
         f4:15:bc:44:50:e9:ab:bc:57:5e:af:df:4b:64:d2:a6:0a:ee:
         71:ce:7c:5d:d2:2d:16:d7:b8:2d:3d:54:7c:af:6a:64:2d:6e:
         97:0a:74:64:94:24:56:f6:8b:5c:ba:e5:e6:82:ab:84:0a:08:
         53:ad:c6:92:86:f0:69:3c:85:8e:72:2b:8c:df:ca:11:6a:42:
         df:92:d5:46:0e:8c:6b:c1:c8:57:df:a4:22:e2:5a:2c:dc:48:
         77:41:96:4c:1f:f7:25:94:32:a8:32:59:b6:d4:7e:75:b9:67:
         11:4f:2b:3f:f0:14:cd:98:0d:9b:8b:b7:72:fb:7a:a4:c3:d6:
         e2:9a:16:87:79:1d:ae:de:36:fd:32:f9:e5:fd:53:31:4c:25:
         29:66:38:58:e8:d0:dc:3f:4b:72:9d:e6:c8:dc:63:e9:97:c6:
         4b:fb:c0:87:b9:ed:32:78:1e:f8:44:87:be:ab:7c:78:bc:33:
         98:cf:cd:d0:d9:9d:e3:f8:51:d1:24:ba:07:17:02:e2:30:a1:
         3f:6f:f3:b3:72:9e:56:37:1d:93:99:4a:aa:e1:06:e7:43:72:
         07:cd:d8:b3:f6:fc:46:f9:f6:d1:8b:fd:d7:ee:a3:7f:9d:23:
         eb:5b:30:05
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICK+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTA4MTU1MzMzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzE0ZC02YWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/UuVVSDH3+USqChLNXLtGIoCELpAQdZpjXjQLCCYhh/3SEhENBbocl6oXtpw
VT4Z3Q8sJcEeer6pKBaz+d9NfktrUw+4y4I2DoU9nWCi//844MiKhzrtfLV0CUaM
5t6AGUiyCrFpKdcs/WqvQGZ+VeF60N8sxgAYYBIc6BIfYhhVlF7oliFji/mTZSOq
tlgoorFOzCApprIBMx7Kqm3bmCBeZQqtxeUaj0yiHOwk76BXIkGGg8YssehC4xrN
AvzOGgGuyv/Vit7M8M6PgqG+sy5P07jx2So2z5nnaZuA3q7rqXdQRFScQ8Pvdu4i
73726gyLpJ/fCWNJYNYp1fL5dwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHbFFrG5
XG1/IP7f0TpoJikXa6fqMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDJGREM3RDJB
REZFMTFFRTg1MTI5MzRFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnQo6MA0GCSqGSIb3DQEBCwUAA4IBAQCEoRbEVJRsVLlPq11dBPTO
tov0FbxEUOmrvFder99LZNKmCu5xznxd0i0W17gtPVR8r2pkLW6XCnRklCRW9otc
uuXmgquECghTrcaShvBpPIWOciuM38oRakLfktVGDoxrwchX36Qi4los3Eh3QZZM
H/cllDKoMlm21H51uWcRTys/8BTNmA2bi7dy+3qkw9bimhaHeR2u3jb9Mvnl/VMx
TCUpZjhY6NDcP0tynebI3GPpl8ZL+8CHue0yeB74RIe+q3x4vDOYz83Q2Z3j+FHR
JLoHFwLiMKE/b/Ozcp5WNx2TmUqq4QbnQ3IHzdiz9vxG+fbRi/3X7qN/nSPrWzAF
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:12 2026 by rpki-client