Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/DB8A251A059411F18B30AAF03F3D8C67.roa
File:                     DB8A251A059411F18B30AAF03F3D8C67.roa (raw, json)
Hash identifier:          SBSfsDpKl/lvqVEjdgGHbdzCI5Fl+6Fw3TjACuxE6n4=
Subject key identifier:   22:65:A4:67:78:5F:C3:31:62:49:DF:AF:5E:0E:5F:BC:FF:23:6D:4B
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       05D0
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/DB8A251A059411F18B30AAF03F3D8C67.roa
Signing time:             Sun 01 Mar 2026 18:52:05 +0000
ROA not before:           Mon 09 Feb 2026 08:53:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150589
IP address blocks:        151.158.32.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1488 (0x5d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Feb  9 08:53:52 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a48ad4-2e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:24:cc:ec:16:e0:b1:03:5b:9a:12:9e:fe:66:
                    00:b1:8d:58:e6:35:63:96:69:a6:c5:73:6b:e8:81:
                    2b:f2:ce:ba:0a:45:6a:52:be:c0:4d:ee:26:52:c5:
                    e3:28:ca:50:ac:11:8e:de:a4:ac:73:ed:59:4e:ef:
                    bc:a0:4a:10:ee:a1:68:28:4f:3a:44:ca:60:d7:01:
                    cf:9e:e1:80:1c:79:98:67:67:ee:c5:1d:00:b3:93:
                    d8:ca:f6:19:97:c5:24:14:76:67:72:c5:ff:85:a4:
                    fa:b9:81:ae:aa:68:bb:51:df:b7:c9:14:e4:50:57:
                    77:1f:3a:e2:f7:8b:39:dd:7d:9e:f8:a9:07:86:f4:
                    c6:4c:53:11:13:88:22:ff:a8:d2:e7:e5:73:bb:14:
                    b1:64:ad:e0:a0:47:35:ee:22:35:33:5e:a5:a9:a4:
                    67:9c:1a:80:82:8e:23:c5:a5:9f:fc:b3:7b:12:f0:
                    8f:c7:ae:56:53:ab:71:e2:b6:29:27:47:c9:29:06:
                    eb:77:2d:54:36:ee:78:d1:a9:5c:16:6f:30:c1:68:
                    e8:6d:99:f0:6c:4c:73:cc:0c:01:40:a2:0a:09:da:
                    16:0c:ae:96:ea:22:b0:a0:fd:1a:4c:5f:38:df:a7:
                    3a:df:13:62:a5:6a:fc:a3:0e:04:b9:aa:c7:83:cb:
                    bd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:65:A4:67:78:5F:C3:31:62:49:DF:AF:5E:0E:5F:BC:FF:23:6D:4B
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/DB8A251A059411F18B30AAF03F3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:20:c1:cc:fc:a1:0b:a3:90:06:2e:d2:62:48:b9:14:24:39:
         c5:2a:d1:e2:fa:9e:9f:eb:2f:11:41:ae:73:d0:73:d8:34:7e:
         6b:19:9d:00:28:c5:3c:e3:da:17:43:b2:ff:89:76:40:e4:9f:
         d6:b6:8e:8b:08:3c:c2:8d:1e:04:b3:45:20:ef:1a:f9:34:84:
         48:76:37:44:33:44:ef:fe:a0:2c:d7:91:c7:f7:01:5a:eb:2e:
         aa:9a:b9:b5:b6:07:e1:97:d6:4b:b9:b0:94:7a:70:b9:99:88:
         c4:b3:54:e0:0e:75:cc:19:5f:ba:51:7f:71:2e:75:55:c5:2d:
         ba:7e:92:d7:98:4a:ee:95:b3:dd:f0:94:ba:f3:f5:3b:5e:5c:
         ad:83:45:1c:3c:d2:92:e1:5c:c1:14:7b:31:d8:2b:dc:1a:b5:
         5c:4c:62:80:55:6f:47:b2:e3:6b:0f:39:2a:c3:33:0d:d9:db:
         76:35:1c:37:9f:e8:47:ad:2d:cc:ff:58:f8:e1:4f:2b:ea:ba:
         d1:b7:81:7f:6b:e2:15:02:16:2c:a1:0c:1b:4a:b9:c8:04:5e:
         6a:d2:2a:6b:7f:13:dd:be:b7:db:da:d5:42:92:ff:22:37:72:
         77:57:bf:d6:6e:ad:92:5a:85:24:4d:69:11:7a:bb:7c:a7:37:
         a5:14:58:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:20:05 2026 by rpki-client