Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/2D1602DA066411F182222C40373D8C67.roa
File:                     2D1602DA066411F182222C40373D8C67.roa (raw, json)
Hash identifier:          tF3EoKXHAddcRS9uP57reOt3Rur5sJdGBEzSbzJ+4k4=
Subject key identifier:   17:54:19:4D:6F:4D:53:EC:5A:11:82:4B:A1:81:BE:29:B7:D0:F9:E8
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       05D1
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/2D1602DA066411F182222C40373D8C67.roa
Signing time:             Sun 01 Mar 2026 18:52:05 +0000
ROA not before:           Tue 10 Feb 2026 09:37:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150126
IP address blocks:        151.158.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1489 (0x5d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Feb 10 09:37:55 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a48ad5-0f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c9:29:a9:c1:e3:13:c9:6f:3b:5c:02:18:80:
                    14:16:9a:83:de:ec:36:f8:16:bb:6a:ea:96:7a:0c:
                    4f:a4:19:32:74:2f:0f:a9:36:20:d8:9c:a0:bc:30:
                    c5:9f:59:2f:d3:3a:df:7b:58:37:a3:d4:57:b3:b6:
                    f5:ab:58:3a:15:83:d1:0f:39:ca:cd:58:ba:22:8d:
                    e6:54:c8:8f:43:96:d7:c7:aa:50:f2:3a:fa:55:43:
                    04:94:b6:c0:75:39:e9:ed:4d:6c:f9:75:88:3d:34:
                    8f:8f:0c:8c:13:fd:a3:0e:d3:6d:f2:e8:7f:a9:1f:
                    e5:9e:09:a0:8c:1f:2f:00:54:0e:aa:02:f1:81:ab:
                    82:82:57:5a:22:f2:b3:26:16:25:3d:b1:7f:33:15:
                    73:f0:99:62:08:a9:01:29:ae:c8:d2:8b:27:65:e7:
                    d3:c7:f9:4f:8f:e6:c0:01:99:c8:e3:da:13:c9:a9:
                    7b:ea:75:aa:2d:7f:ba:c0:fd:57:6c:00:29:39:d5:
                    1d:8a:b1:f2:2e:f4:d4:84:a2:0d:80:8a:10:d0:94:
                    59:b5:89:26:69:60:58:40:c6:51:d3:b2:f8:7c:05:
                    63:07:9a:00:68:57:0a:32:03:7e:c8:bc:87:6d:1f:
                    4e:74:91:6c:8a:19:45:2c:f3:34:f4:73:b0:40:6c:
                    1a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:54:19:4D:6F:4D:53:EC:5A:11:82:4B:A1:81:BE:29:B7:D0:F9:E8
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/2D1602DA066411F182222C40373D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:5f:fc:50:bf:95:2d:f2:b0:93:a5:06:64:57:02:79:80:37:
         62:bc:eb:1a:82:2a:62:b8:3f:98:02:43:78:af:33:15:34:e8:
         96:d1:28:83:52:c9:e6:ba:17:b1:b7:c5:df:a8:65:bd:0a:b3:
         da:8a:29:0b:2c:27:d3:9f:b1:6b:51:99:af:ab:6f:74:76:f7:
         5f:ff:ee:3c:fb:a0:05:b6:35:e4:23:e0:86:24:21:19:2b:62:
         1a:d9:bc:9c:08:2e:e8:b4:b7:4f:c2:96:3f:34:c1:35:ef:73:
         ef:24:3c:51:c2:ad:4b:93:07:36:72:20:57:d6:3f:ea:4d:fd:
         73:27:a5:0c:22:88:d4:4c:94:20:29:3e:63:90:84:a9:47:a4:
         78:39:0e:36:60:c8:34:b1:d1:87:51:ff:b3:85:f4:f3:43:e5:
         95:25:12:b8:8e:18:3a:e8:aa:f8:db:7a:18:d8:2b:79:b8:eb:
         6d:5f:ad:65:2e:b6:ff:c4:89:bc:7a:91:97:9f:23:e2:59:57:
         b8:46:db:96:60:7e:da:a0:29:10:e5:8f:22:2a:97:b9:75:85:
         e1:c8:c9:3b:fd:b8:ea:94:c8:06:3f:5a:09:74:a5:43:91:b7:
         89:cb:c6:74:39:b6:59:ee:4d:4f:e3:21:a0:16:fb:d4:90:ac:
         6d:14:8a:96
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEVFRDgwQjE5NDI2QzBENEE4MkJDNkYwQjUwQjlCQjEy
NUUxRkQzOEEwHhcNMjYwMjEwMDkzNzU1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGFkNS0wZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqMkpqcHjE8lvO1wCGIAUFpqD3uw2+Ba7auqWegxPpBkydC8PqTYg2JygvDDF
n1kv0zrfe1g3o9RXs7b1q1g6FYPRDznKzVi6Io3mVMiPQ5bXx6pQ8jr6VUMElLbA
dTnp7U1s+XWIPTSPjwyME/2jDtNt8uh/qR/lngmgjB8vAFQOqgLxgauCgldaIvKz
JhYlPbF/MxVz8JliCKkBKa7I0osnZefTx/lPj+bAAZnI49oTyal76nWqLX+6wP1X
bAApOdUdirHyLvTUhKINgIoQ0JRZtYkmaWBYQMZR07L4fAVjB5oAaFcKMgN+yLyH
bR9OdJFsihlFLPM09HOwQGwamQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBdUGU1v
TVPsWhGCS6GBvim30PnoMB8GA1UdIwQYMBaAFO7YCxlCbA1KgrxvC1C5uxJeH9OK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi81NDdDODU4NjQx
REExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RVcUN2RzhMVUxtN0VsNGYw
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzd0Z0xHVUpzRFVxQ3ZHOExVTG03RWw0ZjA0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvNTQ3Qzg1ODY0MURBMTFFQzkwNUUzMjUyQzRGOUFFMDIvMkQxNjAyREEw
NjY0MTFGMTgyMjIyQzQwMzczRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBl56OMA0GCSqGSIb3DQEBCwUAA4IBAQAbX/xQv5Ut8rCTpQZkVwJ5
gDdivOsagipiuD+YAkN4rzMVNOiW0SiDUsnmuhext8XfqGW9CrPaiikLLCfTn7Fr
UZmvq290dvdf/+48+6AFtjXkI+CGJCEZK2Ia2bycCC7otLdPwpY/NME173PvJDxR
wq1Lkwc2ciBX1j/qTf1zJ6UMIojUTJQgKT5jkISpR6R4OQ42YMg0sdGHUf+zhfTz
Q+WVJRK4jhg66Kr423oY2Ct5uOttX61lLrb/xIm8epGXnyPiWVe4RtuWYH7aoCkQ
5Y8iKpe5dYXhyMk7/bjqlMgGP1oJdKVDkbeJy8Z0ObZZ7k1P4yGgFvvUkKxtFIqW
-----END CERTIFICATE-----
Generated at Tue Mar 3 01:57:33 2026 by rpki-client