Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/302F85C664B611F18385CA9D9947A888.roa
File:                     302F85C664B611F18385CA9D9947A888.roa (raw, json)
Hash identifier:          EkkvVe7L5JXOdvY2FoH7kvR+tt+bCSxA6dBmQqqxGr4=
Subject key identifier:   C6:7A:59:49:04:28:B4:A2:A0:30:16:26:07:0D:57:69:2A:BB:A1:79
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       066B
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/302F85C664B611F18385CA9D9947A888.roa
Signing time:             Wed 10 Jun 2026 10:21:48 +0000
ROA not before:           Wed 10 Jun 2026 10:21:48 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     154529
IP address blocks:        151.158.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1643 (0x66b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Jun 10 10:21:48 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a293abc-eef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9e:16:bd:ef:a7:a6:6f:bd:f0:16:14:6e:15:
                    ea:5f:39:d7:2c:9a:cd:ec:00:f7:a7:45:69:fd:20:
                    ba:6a:cb:f3:0b:9a:21:97:45:70:15:d4:74:ae:ee:
                    2c:6c:43:3e:df:47:53:c4:98:3c:bc:a0:8d:4e:ee:
                    66:fe:9b:be:63:7a:1d:e6:fb:b3:cd:dd:bf:29:49:
                    6c:a5:c5:dc:75:7d:60:10:b4:b8:c5:d1:49:08:5b:
                    41:2e:dd:92:63:8b:ff:52:09:00:6b:4a:63:9b:da:
                    94:30:05:4f:81:ea:00:f1:58:41:ac:26:ff:2c:9f:
                    19:96:b1:cc:73:98:dc:20:cc:c9:d1:2d:e7:e2:9e:
                    b0:2a:66:4d:14:6e:02:38:73:46:84:18:71:e0:74:
                    ee:d1:bb:ed:55:b9:06:34:4d:b3:c1:57:09:3b:0c:
                    b7:35:31:93:36:f5:f4:9e:4e:5f:2f:c5:7e:4f:2e:
                    c2:d9:84:4c:35:56:bd:57:e1:42:a7:25:9d:67:be:
                    5a:8a:ac:32:8d:b7:de:23:e5:54:24:69:0f:1c:c9:
                    f5:af:eb:55:09:64:10:25:8f:73:c3:91:6b:d9:6f:
                    1a:6f:ec:52:68:28:bd:ab:d4:a2:f1:e1:a8:e0:f3:
                    68:f7:df:57:8e:1d:7d:22:2c:a3:d3:94:c4:18:4a:
                    05:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7A:59:49:04:28:B4:A2:A0:30:16:26:07:0D:57:69:2A:BB:A1:79
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/302F85C664B611F18385CA9D9947A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:93:a2:3f:23:82:20:aa:82:ee:7c:40:17:07:8d:c9:cf:b0:
         ee:e7:63:a4:f6:30:e2:e0:58:9d:01:d3:81:e4:c5:94:ac:c0:
         7e:bd:d6:57:e3:d5:b6:93:29:c9:80:41:5e:2c:78:dd:31:bc:
         d6:69:37:16:e6:aa:b2:8d:f6:69:cd:3f:35:c0:59:12:af:1a:
         c6:0c:aa:ad:6a:d0:4d:ee:f7:60:29:8d:70:d7:11:c9:52:17:
         92:7b:3f:35:3b:ef:dd:d2:e5:ed:95:4d:b8:4e:13:72:d3:82:
         12:1e:73:ae:e0:a2:67:cc:4a:71:e1:03:85:ff:b9:99:a5:a0:
         fa:e6:34:f0:6e:e0:c3:d6:0b:8e:b2:b5:1a:86:93:8a:d6:5e:
         66:1b:45:8d:ae:df:a4:d3:43:68:dc:f2:7d:b2:d0:c5:c9:cc:
         63:6d:04:9e:6a:b9:ab:bc:fd:e5:7d:80:8e:61:65:89:54:3e:
         1f:98:12:59:3a:ec:0d:2f:a0:7a:d6:3d:6b:fc:0e:48:49:43:
         0d:f4:15:1e:9f:13:db:a0:ed:78:10:77:88:e6:f3:f3:9f:6e:
         de:00:a8:4d:cd:ea:9b:fa:58:32:45:3a:d7:35:3b:fc:70:4d:
         b0:82:df:c6:db:ce:f5:c3:90:ea:1f:db:bb:92:b3:78:9c:84:
         09:6e:16:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:28:40 2026 by rpki-client