Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/6D9D508608A511F1AA864D1A173D8C67.roa
File:                     6D9D508608A511F1AA864D1A173D8C67.roa (raw, json)
Hash identifier:          U5F9MHDP1pi1NPDx9fyy89zsctiZ3TRffslMoWF56JE=
Subject key identifier:   DF:9C:FE:9D:5E:77:60:38:D9:C3:FC:9E:44:3F:B1:F5:62:E6:1D:B6
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       05D2
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/6D9D508608A511F1AA864D1A173D8C67.roa
Signing time:             Sun 01 Mar 2026 18:52:06 +0000
ROA not before:           Fri 13 Feb 2026 06:30:03 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132912
IP address blocks:        151.158.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1490 (0x5d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Feb 13 06:30:03 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a48ad6-45ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:07:e8:10:41:e0:8d:e6:81:c5:1a:1c:6d:1d:
                    af:62:3a:bd:37:da:be:e3:2c:67:42:b6:b1:1e:f2:
                    5a:27:01:ac:af:78:58:fa:e8:d2:20:d2:24:3b:ff:
                    ac:58:6f:bf:64:63:a4:37:b9:50:e4:5d:6a:ab:f3:
                    9b:b7:2a:67:18:fa:25:83:98:b1:99:40:fd:de:36:
                    ed:0b:c5:67:40:47:2e:e7:c8:fe:ba:c7:d5:4e:5f:
                    7b:22:74:2f:7f:bd:c0:ce:27:c7:e9:32:64:11:99:
                    3e:b1:eb:bd:d5:13:7f:72:80:6e:0d:e7:35:33:f4:
                    13:b8:42:bd:2b:b3:87:b5:b5:29:ef:93:f3:cc:dc:
                    4c:f1:08:09:19:49:1a:d9:13:a9:13:f3:66:53:7e:
                    a5:56:3d:9a:57:19:bb:40:27:b3:a1:2e:5f:38:19:
                    f1:7c:ea:20:c1:58:70:35:b6:4a:70:29:18:31:e6:
                    07:16:08:1b:de:b8:01:86:b3:17:cc:64:a8:55:47:
                    25:67:e3:66:59:d0:80:c3:13:07:08:23:65:fa:4d:
                    85:8f:3c:30:fd:89:40:d5:a8:92:9b:9d:f3:d0:dc:
                    83:23:a5:6d:a2:dc:14:09:d1:4e:52:52:ea:4b:e0:
                    a0:3b:ba:ee:82:00:48:31:7e:ac:9a:e4:4f:68:18:
                    0e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9C:FE:9D:5E:77:60:38:D9:C3:FC:9E:44:3F:B1:F5:62:E6:1D:B6
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/6D9D508608A511F1AA864D1A173D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:e3:45:1e:bb:cc:b5:be:fb:5c:ee:52:c2:ec:49:c5:87:65:
         d5:28:a4:1b:b3:bf:52:1c:24:3c:5a:a4:b7:5d:27:ae:c0:c3:
         b1:b9:2e:45:2d:08:47:ac:5f:bc:c5:bb:ff:1e:ff:e6:08:0b:
         6f:9d:d8:f2:c2:f8:4b:fb:2d:3a:95:b8:ac:0e:36:95:03:02:
         9d:7f:2b:5b:d3:45:40:90:3a:de:19:2f:57:1f:fa:df:52:9c:
         d5:25:f7:6d:cf:bd:2d:af:cf:9a:b8:cb:e6:fd:a2:9b:62:0f:
         9d:02:af:af:0c:89:b8:af:98:f3:de:b7:5d:0d:b6:ae:17:37:
         b5:b5:de:53:08:93:19:66:e1:f5:f7:84:20:62:05:57:e6:a6:
         20:01:aa:06:bd:39:ea:0c:9a:20:3d:9b:9a:7f:58:6a:b6:84:
         b8:a3:b2:69:8a:52:47:4a:cc:71:0c:00:b6:cb:e2:31:52:fb:
         e7:08:da:ba:52:c8:dd:06:65:7d:0a:0e:89:e2:8a:b9:36:1f:
         de:44:f5:d6:23:fb:b1:d8:b3:71:23:af:05:a0:6b:71:8c:e7:
         23:94:ca:b7:58:60:b2:81:b6:1b:c6:4d:b2:1c:7a:4e:0a:56:
         fb:25:1d:6b:9f:cf:c6:24:7b:e4:11:3a:f0:5c:a4:51:80:b6:
         e1:49:40:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:28:59 2026 by rpki-client