Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/CED17ACA08BA11F182E596311F3D8C67.roa
File:                     CED17ACA08BA11F182E596311F3D8C67.roa (raw, json)
Hash identifier:          BeQkPnokkNWqCf4Shm6HGhkTvps7aINDAGBIRbhuSMw=
Subject key identifier:   81:16:B8:4C:47:A2:48:EE:9F:08:FC:AB:24:BA:5B:4A:26:F6:A4:EB
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       05D3
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/CED17ACA08BA11F182E596311F3D8C67.roa
Signing time:             Sun 01 Mar 2026 18:52:07 +0000
ROA not before:           Fri 13 Feb 2026 09:03:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153477
IP address blocks:        151.158.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1491 (0x5d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Feb 13 09:03:05 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a48ad7-73a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cb:55:4c:05:a8:bd:e5:d0:3f:98:19:47:c1:
                    1f:f0:ee:af:66:34:51:49:96:99:d4:67:e9:14:bd:
                    1c:87:6d:07:94:8e:7a:a9:6a:92:3f:6b:ef:e8:36:
                    ca:dc:d4:84:e1:58:5e:96:0e:c3:fb:25:c5:4d:99:
                    8b:95:d5:0f:3a:86:e9:01:0d:a7:7f:70:c9:d0:f1:
                    41:78:a3:82:36:7d:f6:b1:6f:f6:c4:4d:0d:d6:3a:
                    99:e1:5d:fc:ff:74:26:80:42:48:56:70:7f:69:c6:
                    70:34:3d:9b:49:68:bd:c3:9b:c0:74:76:76:b7:dc:
                    76:b1:9b:15:0c:12:47:31:b8:2b:52:77:11:f9:39:
                    b3:8c:1c:c9:de:f4:ad:b6:f1:88:da:2b:e6:1b:2a:
                    0f:12:7d:a8:03:39:a2:9c:99:04:a1:80:f7:a8:39:
                    18:72:35:0f:dd:b5:41:47:7c:b1:a8:ed:8f:b1:a3:
                    1a:75:7c:a9:ee:fd:29:9d:92:38:02:d7:e6:98:9d:
                    5f:4c:c8:7b:98:a6:b9:3d:71:01:3b:8f:10:f6:25:
                    65:e2:a1:91:6b:5a:f5:95:f2:8e:e1:97:8d:33:06:
                    2c:af:de:7b:f4:17:7a:8e:a9:87:96:72:48:ab:ee:
                    1c:72:ea:27:f3:b6:ee:ef:a4:0d:cb:54:ca:56:77:
                    46:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:16:B8:4C:47:A2:48:EE:9F:08:FC:AB:24:BA:5B:4A:26:F6:A4:EB
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/CED17ACA08BA11F182E596311F3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:08:3a:48:62:69:8c:f5:00:05:b2:7b:90:36:53:af:48:e2:
         0f:ce:2b:86:fe:de:e2:eb:ea:8f:3e:04:7c:30:53:3b:1a:fb:
         bf:95:91:8c:01:32:f0:1d:b2:98:48:11:c7:04:13:be:a4:12:
         78:fc:a0:fb:11:f1:7d:67:3c:31:f8:3f:aa:18:d9:ab:ab:15:
         a5:c7:92:a0:06:f2:09:73:22:a5:76:06:2b:6e:95:a3:f4:13:
         22:22:6e:83:e0:e9:5c:49:b5:41:f6:2f:d1:ed:83:e9:c9:db:
         a2:21:a7:e9:36:ee:85:ff:85:3a:37:58:06:07:20:71:78:7f:
         7a:b1:a3:11:a4:b4:87:db:d3:e1:2b:fd:d1:a3:2b:b9:1f:34:
         cf:80:e5:09:7b:59:01:25:9f:f5:20:74:14:05:b3:08:8c:38:
         bd:32:af:0e:11:20:8f:31:9d:27:eb:0f:3d:df:43:16:64:8c:
         ca:91:1d:76:af:46:b5:34:8f:79:2c:69:40:6d:e1:80:82:01:
         d4:ac:ce:a7:d8:c9:41:2d:de:c3:cd:d4:ca:3d:13:fd:c4:17:
         57:a3:6f:9e:86:3c:6a:0a:51:7e:d0:b8:02:92:a6:e2:28:53:
         92:d6:27:ad:e9:1e:4e:53:22:71:7b:ff:35:92:3e:4a:50:30:
         60:b3:07:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:20:16 2026 by rpki-client