Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7099A354108211F1B8BE851C313D8C67.roa
File:                     7099A354108211F1B8BE851C313D8C67.roa (raw, json)
Hash identifier:          hKh92vIyKXevAYFStDC8psA0ZlOkqsaoG4drmztVgRY=
Subject key identifier:   63:0E:E7:F4:16:A7:B7:1C:DF:0B:3F:34:52:2C:3F:76:3E:A9:D7:B1
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       05D9
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7099A354108211F1B8BE851C313D8C67.roa
Signing time:             Sun 01 Mar 2026 18:52:13 +0000
ROA not before:           Mon 23 Feb 2026 06:39:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154512
IP address blocks:        151.158.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 06:56:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1497 (0x5d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Feb 23 06:39:45 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a48adc-5245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3a:73:c5:ea:20:8f:a3:78:9c:fe:1e:68:8a:
                    03:55:7e:a0:3d:89:50:d1:13:26:a9:b4:c6:00:3f:
                    b9:d8:fa:5c:a4:6b:61:4a:4d:4a:f9:04:fd:30:1a:
                    8f:6a:91:6c:4f:ac:72:d6:b1:22:ac:9f:11:77:28:
                    38:5f:a1:59:0f:34:de:56:94:cf:80:d0:09:2b:4d:
                    d5:a5:a7:07:38:b5:97:0a:43:4c:57:12:e2:94:b9:
                    f3:3c:b6:ae:21:e2:19:92:e5:fd:6b:41:36:db:3d:
                    4c:43:1a:55:ee:0f:f0:63:8d:7e:61:8b:ba:03:c2:
                    03:fb:07:0e:17:41:26:60:b9:bb:b7:46:48:88:fb:
                    02:b2:8b:c4:a8:39:3d:ad:ff:95:d0:ab:64:a4:f6:
                    fa:75:e6:d7:70:8b:f8:d6:15:4e:0e:2e:0b:cc:34:
                    dc:10:2d:0a:f7:9e:b1:2f:2f:e9:61:c1:db:1d:44:
                    e0:9e:cc:d7:0c:18:15:18:7c:30:46:70:b9:0f:ee:
                    3c:7e:ac:bd:8d:70:b5:e8:19:be:d7:d4:b4:5b:c2:
                    b2:f7:df:ae:86:1c:35:0d:78:83:0e:d9:02:4e:7c:
                    f8:99:a2:d2:98:da:8a:13:9c:86:9f:c3:35:c8:98:
                    32:d8:54:71:de:ef:76:93:2a:0e:03:74:06:52:7c:
                    c1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0E:E7:F4:16:A7:B7:1C:DF:0B:3F:34:52:2C:3F:76:3E:A9:D7:B1
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7099A354108211F1B8BE851C313D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         db:e1:a7:cb:2a:b4:da:7f:f8:0f:4f:ba:0d:fe:22:e2:87:87:
         67:f1:d0:78:c7:11:04:53:a0:fb:5d:81:6a:57:69:5c:27:1e:
         88:d0:ef:10:97:24:64:37:e0:05:3e:68:70:58:e1:a7:1f:eb:
         7d:bb:ba:d8:87:d2:6d:e4:68:d2:84:ba:f3:aa:13:31:3c:05:
         14:f5:ad:10:a1:25:99:4f:03:02:0f:78:44:85:82:c4:d4:ab:
         68:54:63:f3:56:8d:42:52:57:37:6c:e4:37:f2:83:71:3d:fe:
         15:56:48:32:c3:ff:b3:dd:a3:61:ff:31:8c:01:c6:fe:14:7c:
         aa:97:e0:16:26:58:aa:19:1d:4c:cb:0a:aa:d8:38:e0:ae:ef:
         dc:05:a1:93:8e:b0:4a:a8:7b:12:6b:9c:c1:b0:e2:69:f6:3b:
         cc:54:2b:1a:77:fd:b4:7a:ad:c9:a6:ea:42:b6:5e:f2:71:35:
         33:5c:19:f4:35:b1:75:3d:86:28:e7:c5:00:cf:a4:f3:72:7e:
         87:76:2d:80:19:a4:0a:db:82:3e:27:c7:65:a0:38:83:c0:ef:
         aa:04:81:4b:60:ca:a3:3b:08:ec:59:f8:01:c2:1f:3a:37:3a:
         9e:71:97:a9:28:7c:0f:45:1e:af:94:f1:d1:a2:25:8c:ee:db:
         9c:9a:29:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:03:24 2026 by rpki-client