Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/BA97D3D6899F11F18FB0DA873C11F970.roa
File:                     BA97D3D6899F11F18FB0DA873C11F970.roa (raw, json)
Hash identifier:          utRoLEkLuZ8/VYFnLqAi74EZAeKUy+Uy8JeUOd3Q7Bw=
Subject key identifier:   69:46:E9:4D:A6:25:15:12:16:48:90:CD:01:1E:D4:D7:19:33:4D:81
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       06A4
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/BA97D3D6899F11F18FB0DA873C11F970.roa
Signing time:             Mon 27 Jul 2026 09:44:15 +0000
ROA not before:           Mon 27 Jul 2026 09:44:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137210
IP address blocks:        151.158.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:25:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1700 (0x6a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Jul 27 09:44:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a67286f-d31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:74:31:00:e7:1b:86:6a:84:a6:e7:cf:3e:75:
                    71:ac:c5:79:76:86:ba:5a:98:d7:dd:b9:4a:68:d6:
                    25:95:cd:c7:3b:9d:e3:f7:70:19:df:bd:d0:70:e0:
                    33:58:f7:20:44:76:a7:52:d8:ca:4f:4d:fd:8e:24:
                    36:fa:2e:1a:cb:2f:f9:b7:63:cf:86:64:eb:d5:1b:
                    d3:91:cd:81:cb:45:d1:97:0c:d7:c4:f3:09:15:47:
                    15:07:18:97:d6:75:ff:b4:1c:3b:3e:f5:ae:aa:bc:
                    a2:50:9a:f7:48:39:ce:69:68:25:07:9f:83:d7:18:
                    a1:7b:66:23:10:7a:c8:66:96:63:0f:ea:ac:a0:ba:
                    da:18:5c:b9:e3:ef:d6:be:50:11:76:20:36:24:e0:
                    4f:6b:fb:c3:1e:9e:99:9c:19:68:7a:dd:3f:16:91:
                    ce:5c:f4:4b:15:28:37:2c:61:71:70:53:e3:64:39:
                    7d:12:c4:f5:be:8f:a0:68:93:e4:ff:6f:e5:73:d3:
                    07:8c:83:a1:5c:f0:8c:7c:c0:66:22:c1:f0:e2:80:
                    96:2b:0e:c5:f9:81:e0:fc:ca:20:9e:d1:1a:20:39:
                    7d:82:8e:e8:90:48:ff:89:03:b3:da:75:00:f3:ea:
                    6e:51:a9:ba:36:87:a9:7b:d4:06:01:5f:45:45:dd:
                    bd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:46:E9:4D:A6:25:15:12:16:48:90:CD:01:1E:D4:D7:19:33:4D:81
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/BA97D3D6899F11F18FB0DA873C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:2b:95:1c:40:cc:71:0f:bf:dd:26:29:c3:bb:c4:21:ab:9b:
         db:8a:bf:91:b7:27:31:9e:fb:d7:f2:a5:e3:c3:53:18:11:3c:
         4a:a4:e3:8c:47:f3:ca:35:92:d7:e8:8f:57:24:5b:15:b7:99:
         67:51:11:26:21:a9:88:cb:d6:47:90:1d:64:e4:08:52:33:ff:
         a2:2a:a0:f2:bb:4b:21:a3:f8:a1:71:c7:43:a2:4c:b0:b4:d9:
         01:f0:e6:a5:20:40:7e:96:b0:55:23:4c:ee:b7:2e:f2:a8:e3:
         c3:5d:66:8d:ab:fc:ba:fc:d9:66:bb:34:6f:2b:23:d1:87:90:
         d0:83:df:60:be:2c:ae:14:a1:17:56:b6:50:dd:a5:8a:11:38:
         6d:dd:61:32:0c:39:56:39:8d:28:07:8c:29:2a:77:a0:36:88:
         39:f2:39:79:58:92:22:d7:37:0c:58:fd:3f:2a:c0:8c:10:9e:
         e7:d5:3a:fc:e9:34:ed:1e:03:68:ee:64:8e:0c:7d:6d:19:5a:
         b6:3c:81:60:43:c1:2a:6e:d7:e9:a6:46:fe:cc:fa:3a:e4:08:
         14:52:e0:ad:88:68:48:55:07:3f:fd:8e:15:ca:8d:f3:26:b3:
         e1:db:f4:c0:15:ba:58:38:27:9a:48:40:58:e3:2a:62:9a:0d:
         4f:be:9a:67
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEVFRDgwQjE5NDI2QzBENEE4MkJDNkYwQjUwQjlCQjEy
NUUxRkQzOEEwHhcNMjYwNzI3MDk0NDE1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY3Mjg2Zi1kMzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvHQxAOcbhmqEpufPPnVxrMV5doa6WpjX3blKaNYllc3HO53j93AZ373QcOAz
WPcgRHanUtjKT039jiQ2+i4ayy/5t2PPhmTr1RvTkc2By0XRlwzXxPMJFUcVBxiX
1nX/tBw7PvWuqryiUJr3SDnOaWglB5+D1xihe2YjEHrIZpZjD+qsoLraGFy54+/W
vlARdiA2JOBPa/vDHp6ZnBloet0/FpHOXPRLFSg3LGFxcFPjZDl9EsT1vo+gaJPk
/2/lc9MHjIOhXPCMfMBmIsHw4oCWKw7F+YHg/MogntEaIDl9go7okEj/iQOz2nUA
8+puUam6Noepe9QGAV9FRd29zwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGlG6U2m
JRUSFkiQzQEe1NcZM02BMB8GA1UdIwQYMBaAFO7YCxlCbA1KgrxvC1C5uxJeH9OK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi81NDdDODU4NjQx
REExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RVcUN2RzhMVUxtN0VsNGYw
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzd0Z0xHVUpzRFVxQ3ZHOExVTG03RWw0ZjA0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvNTQ3Qzg1ODY0MURBMTFFQzkwNUUzMjUyQzRGOUFFMDIvQkE5N0QzRDY4
OTlGMTFGMThGQjBEQTg3M0MxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAl565MA0GCSqGSIb3DQEBCwUAA4IBAQBJK5UcQMxxD7/dJinDu8Qh
q5vbir+RtycxnvvX8qXjw1MYETxKpOOMR/PKNZLX6I9XJFsVt5lnUREmIamIy9ZH
kB1k5AhSM/+iKqDyu0sho/ihccdDokywtNkB8OalIEB+lrBVI0zuty7yqOPDXWaN
q/y6/NlmuzRvKyPRh5DQg99gviyuFKEXVrZQ3aWKETht3WEyDDlWOY0oB4wpKneg
Nog58jl5WJIi1zcMWP0/KsCMEJ7n1Tr86TTtHgNo7mSODH1tGVq2PIFgQ8Eqbtfp
pkb+zPo65AgUUuCtiGhIVQc//Y4Vyo3zJrPh2/TAFbpYOCeaSEBY4ypimg1Pvppn
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:22:42 2026 by rpki-client