Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/EC7D444E160411F1968984DF273D8C67.roa
File:                     EC7D444E160411F1968984DF273D8C67.roa (raw, json)
Hash identifier:          bb8UP9hrazRsE2K8CObQWVVb8F5OILhyWnD7mwzcTSk=
Subject key identifier:   23:8D:91:84:61:57:E7:AE:E7:D6:DC:5C:96:51:D7:CB:35:24:CD:E9
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       05E3
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/EC7D444E160411F1968984DF273D8C67.roa
Signing time:             Mon 02 Mar 2026 06:56:23 +0000
ROA not before:           Mon 02 Mar 2026 06:56:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142209
IP address blocks:        151.158.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1507 (0x5e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Mar  2 06:56:23 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a53497-d0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:26:81:4e:e7:2c:f4:9a:4e:aa:a2:88:ce:27:
                    2a:3e:29:ec:98:0a:1d:b9:11:4c:84:0a:d9:f5:74:
                    13:7b:53:61:d2:9d:4b:2f:bf:82:f8:c2:12:7b:48:
                    ba:41:aa:a2:cb:92:f8:a8:8e:63:b9:98:fe:07:f0:
                    79:32:12:4b:51:58:8c:d3:54:88:82:97:4b:a9:ed:
                    a7:87:a2:6f:7d:02:77:04:05:46:ce:64:b9:0f:89:
                    51:28:3f:cb:14:8e:5c:7f:f0:a3:e0:2a:36:1d:80:
                    28:16:91:ea:2e:37:21:b4:b6:33:45:af:42:e6:53:
                    19:a1:df:a7:b1:2f:52:46:dc:42:77:a5:d4:cd:fe:
                    01:2e:97:90:5d:e3:75:7f:f4:4a:ca:78:99:c2:4c:
                    8e:f8:1d:9a:74:68:b6:bf:df:76:01:8e:5e:fd:4f:
                    1f:99:3f:02:8c:d0:ed:c7:b9:42:de:a1:6b:57:6b:
                    98:74:94:0f:45:58:e3:cc:7e:a5:80:5a:14:14:e1:
                    34:10:e7:dd:ec:7c:64:d1:b1:b5:a3:c7:3a:0b:ec:
                    c8:89:6c:a6:55:eb:e9:3a:47:a2:b9:8f:74:99:f8:
                    d9:5b:3f:09:d0:fc:89:10:6f:41:fa:31:43:f4:0f:
                    8c:60:e3:68:9c:f0:67:2d:2b:af:24:ac:d4:44:93:
                    4a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8D:91:84:61:57:E7:AE:E7:D6:DC:5C:96:51:D7:CB:35:24:CD:E9
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/EC7D444E160411F1968984DF273D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:2f:81:8f:ee:0b:29:83:7b:24:41:c2:84:cb:02:0c:b4:6f:
         2a:58:33:87:fb:e0:e8:c9:8f:6f:02:00:7c:61:7a:72:c7:62:
         42:4e:0a:44:ab:31:32:c2:3e:54:e4:35:3c:32:fc:3c:0e:c1:
         61:b8:e2:09:61:d7:3b:f0:8a:25:d3:67:6f:dd:be:fb:ce:32:
         e5:43:ed:cc:57:50:57:d2:b9:96:d9:cc:cf:6e:4f:35:7c:0f:
         f1:34:11:af:b2:fa:90:d0:f3:27:44:c8:a3:fa:52:9a:77:a5:
         69:45:25:cb:32:1b:c9:7a:48:87:bd:da:6f:19:bb:7a:42:ad:
         38:34:86:59:29:3c:f7:91:18:2b:8b:f9:ca:f7:ad:49:66:4b:
         0c:73:7e:23:99:2f:89:0c:50:f2:0d:e4:68:3b:a8:64:eb:29:
         ee:61:82:37:9b:ec:df:29:1e:12:13:cd:0e:33:6e:1e:e3:b0:
         33:2e:93:4f:99:bc:43:02:c5:0c:97:8a:57:67:2f:68:ab:f0:
         1e:63:c6:5c:95:95:e6:38:87:cf:0d:c6:71:78:ca:04:ff:68:
         6e:4a:0e:af:bf:cf:06:23:b6:5b:c9:a0:28:4c:0b:e9:e1:66:
         13:ff:34:e6:bb:59:85:bd:2a:a4:82:b1:6b:e6:6f:be:0b:b9:
         43:e4:ad:cd
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEVFRDgwQjE5NDI2QzBENEE4MkJDNkYwQjUwQjlCQjEy
NUUxRkQzOEEwHhcNMjYwMzAyMDY1NjIzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1MzQ5Ny1kMGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzCaBTucs9JpOqqKIzicqPinsmAoduRFMhArZ9XQTe1Nh0p1LL7+C+MISe0i6
Qaqiy5L4qI5juZj+B/B5MhJLUViM01SIgpdLqe2nh6JvfQJ3BAVGzmS5D4lRKD/L
FI5cf/Cj4Co2HYAoFpHqLjchtLYzRa9C5lMZod+nsS9SRtxCd6XUzf4BLpeQXeN1
f/RKyniZwkyO+B2adGi2v992AY5e/U8fmT8CjNDtx7lC3qFrV2uYdJQPRVjjzH6l
gFoUFOE0EOfd7Hxk0bG1o8c6C+zIiWymVevpOkeiuY90mfjZWz8J0PyJEG9B+jFD
9A+MYONonPBnLSuvJKzURJNK/QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCONkYRh
V+eu59bcXJZR18s1JM3pMB8GA1UdIwQYMBaAFO7YCxlCbA1KgrxvC1C5uxJeH9OK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi81NDdDODU4NjQx
REExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RVcUN2RzhMVUxtN0VsNGYw
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzd0Z0xHVUpzRFVxQ3ZHOExVTG03RWw0ZjA0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvNTQ3Qzg1ODY0MURBMTFFQzkwNUUzMjUyQzRGOUFFMDIvRUM3RDQ0NEUx
NjA0MTFGMTk2ODk4NERGMjczRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBl54SMA0GCSqGSIb3DQEBCwUAA4IBAQCpL4GP7gspg3skQcKEywIM
tG8qWDOH++DoyY9vAgB8YXpyx2JCTgpEqzEywj5U5DU8Mvw8DsFhuOIJYdc78Iol
02dv3b77zjLlQ+3MV1BX0rmW2czPbk81fA/xNBGvsvqQ0PMnRMij+lKad6VpRSXL
MhvJekiHvdpvGbt6Qq04NIZZKTz3kRgri/nK961JZksMc34jmS+JDFDyDeRoO6hk
6ynuYYI3m+zfKR4SE80OM24e47AzLpNPmbxDAsUMl4pXZy9oq/AeY8ZclZXmOIfP
DcZxeMoE/2huSg6vv88GI7ZbyaAoTAvp4WYT/zTmu1mFvSqkgrFr5m++C7lD5K3N
-----END CERTIFICATE-----
Generated at Tue Mar 3 01:57:10 2026 by rpki-client