Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/9962399E0E3F11F1809F84CD183D8C67.roa
File:                     9962399E0E3F11F1809F84CD183D8C67.roa (raw, json)
Hash identifier:          4lFqzlNV7STQ3/98Y8ZlA3hQJAe5coNdXxwEnnsQihc=
Subject key identifier:   8C:B7:82:5F:07:00:E5:0E:A8:0A:D3:1D:88:77:64:01:2C:C3:F3:39
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       05D8
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/9962399E0E3F11F1809F84CD183D8C67.roa
Signing time:             Sun 01 Mar 2026 18:52:12 +0000
ROA not before:           Fri 20 Feb 2026 09:36:14 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137210
IP address blocks:        151.158.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1496 (0x5d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Feb 20 09:36:14 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a48adb-a014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d8:ea:b1:58:05:2f:ea:08:5f:0e:18:b7:3e:
                    30:6e:3b:a6:4b:73:ac:c1:ba:dd:51:5f:36:da:47:
                    a9:71:f2:20:15:fe:8b:02:8e:3c:98:f7:88:e2:9d:
                    fc:b1:a6:fd:17:bb:b2:36:58:94:87:0d:73:6b:b3:
                    da:1a:cb:72:16:7c:8e:b5:5a:d2:79:a2:eb:b5:e3:
                    9c:be:29:7e:dc:9a:9a:17:45:49:8d:3d:a3:2c:65:
                    05:f4:3f:cd:44:c3:cf:a8:a8:2a:da:a6:5a:55:42:
                    e7:30:f7:b4:83:b3:9c:78:21:ad:a4:01:a2:95:da:
                    19:5c:a3:e2:78:95:21:de:13:94:49:ca:8c:c1:b2:
                    74:ed:8c:ed:bf:c3:40:1d:88:aa:89:d6:5b:ce:4e:
                    34:d5:82:ed:dc:97:6d:dd:ed:37:f1:d5:a7:2d:b2:
                    9e:ff:a1:3f:9d:f7:0c:a6:14:58:24:e4:60:c7:0b:
                    ae:6c:1e:8d:b2:ed:b6:f3:cd:e9:6d:75:db:f8:af:
                    f0:69:b8:18:e2:cb:5e:55:ae:22:f1:6a:2a:7b:49:
                    82:de:f0:ab:fe:5e:91:94:53:82:06:e8:45:b4:bb:
                    75:a7:d8:96:2a:fe:3d:a6:11:a6:b8:f1:9c:ab:eb:
                    fb:ff:2d:48:48:d5:89:e9:21:df:a1:1f:38:c5:07:
                    2b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B7:82:5F:07:00:E5:0E:A8:0A:D3:1D:88:77:64:01:2C:C3:F3:39
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/9962399E0E3F11F1809F84CD183D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:76:e0:78:b7:45:fd:ee:33:b7:b3:f8:2d:45:6a:7a:1b:a3:
         a8:7c:99:b9:27:a4:b3:6d:d7:83:fa:c1:69:66:08:59:22:d1:
         d2:10:cb:ba:ee:16:0c:45:74:d1:3c:5a:1a:50:36:8a:d7:e5:
         aa:3a:ae:7e:81:37:df:b0:b1:e6:9c:cf:e6:d7:02:99:54:37:
         61:ce:25:50:c6:df:af:93:fc:48:d0:62:93:e1:b2:f2:f2:56:
         b3:12:87:08:33:ea:6e:e6:54:ad:93:51:ce:c4:1d:37:7c:8d:
         24:84:07:c8:2e:a7:a5:07:bf:9b:fe:b6:2f:b6:cb:d7:fe:d0:
         4d:a2:05:3d:86:5e:9c:0a:4f:2d:ad:7a:54:26:a6:6c:c6:13:
         38:5a:a8:fc:a8:2a:a2:12:70:30:7b:6c:7c:89:89:ad:21:e7:
         3d:63:cc:04:12:15:7b:04:5d:60:66:70:58:05:70:82:46:fb:
         b9:5f:e1:51:c4:f8:c0:47:d7:5e:aa:89:40:c1:92:e7:03:e1:
         bc:c2:77:12:10:62:7b:68:fa:83:80:32:5a:90:41:66:97:1e:
         b2:57:0d:33:33:28:59:20:78:ce:e5:43:44:50:56:a0:cc:40:
         77:c3:50:0c:fa:d8:b1:09:98:f4:ca:b7:8c:bb:31:af:e5:b6:
         e4:a3:aa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:20:49 2026 by rpki-client