Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8A07/2671B0FE621811F18BFC7B426D47A888/4540F274621811F18288576E6E47A888.roa
File:                     4540F274621811F18288576E6E47A888.roa (raw, json)
Hash identifier:          7iqxVD+kSjgqfWsBGi87KUrgaPlk08Xl21lUjyM4sDg=
Subject key identifier:   BE:AD:13:C3:74:85:93:41:A1:0E:F3:D8:09:F7:79:A7:61:5B:29:FC
Certificate issuer:       /CN=A91C8A07/serialNumber=B76C358CEF98C36A89667A075E38CADFA728B1EC
Certificate serial:       02
Authority key identifier: B7:6C:35:8C:EF:98:C3:6A:89:66:7A:07:5E:38:CA:DF:A7:28:B1:EC
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/t2w1jO-Yw2qJZnoHXjjK36cosew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8A07/2671B0FE621811F18BFC7B426D47A888/4540F274621811F18288576E6E47A888.roa
Signing time:             Sun 07 Jun 2026 02:26:21 +0000
ROA not before:           Sun 07 Jun 2026 02:26:21 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     4846
IP address blocks:        151.158.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8A07/2671B0FE621811F18BFC7B426D47A888/t2w1jO-Yw2qJZnoHXjjK36cosew.crl
                          rsync://rpki.apnic.net/member_repository/A91C8A07/2671B0FE621811F18BFC7B426D47A888/t2w1jO-Yw2qJZnoHXjjK36cosew.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/t2w1jO-Yw2qJZnoHXjjK36cosew.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8A07, serialNumber=B76C358CEF98C36A89667A075E38CADFA728B1EC
        Validity
            Not Before: Jun  7 02:26:21 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a24d6cc-4065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:55:de:ed:24:b7:68:65:2c:ce:5a:b2:67:78:
                    36:92:9a:ad:c0:e8:1d:be:88:20:3f:91:fe:3a:fb:
                    89:b2:eb:2d:50:eb:e8:46:aa:d2:eb:c6:16:11:d1:
                    df:16:e2:bd:b6:c4:75:2d:65:ba:58:eb:23:4d:b5:
                    a5:b1:93:0c:8a:00:4b:77:78:6f:a9:4c:07:01:7b:
                    cd:f7:df:f8:dc:c6:5b:c0:06:69:6f:31:c3:c7:26:
                    40:8a:0e:dc:d5:9a:39:09:40:d4:d6:be:bd:9f:0b:
                    03:1b:76:aa:0d:09:c4:8d:eb:16:e4:60:ce:93:b9:
                    1b:36:e6:f7:dd:9a:1e:03:e9:cc:91:82:10:e5:d1:
                    94:af:87:89:d2:10:76:53:70:0d:00:43:9c:9b:9f:
                    39:8a:da:c5:ea:df:b3:d1:d4:8c:f8:6f:37:22:b8:
                    5b:9c:cd:f5:42:61:a1:b0:66:c6:88:cd:e8:8b:d2:
                    7a:31:99:e1:e7:b6:75:27:e0:05:e3:fc:b6:09:9e:
                    de:4d:a8:af:7d:a4:21:cd:f3:1b:b9:aa:59:38:3d:
                    61:40:05:35:ed:b1:82:0a:f0:d4:d4:9a:7d:9e:07:
                    d2:e3:6c:85:31:f0:6f:dd:37:f9:38:98:71:dc:17:
                    c4:72:d4:07:8a:4d:be:3b:09:82:e9:d4:29:97:b7:
                    16:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AD:13:C3:74:85:93:41:A1:0E:F3:D8:09:F7:79:A7:61:5B:29:FC
            X509v3 Authority Key Identifier:
                keyid:B7:6C:35:8C:EF:98:C3:6A:89:66:7A:07:5E:38:CA:DF:A7:28:B1:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8A07/2671B0FE621811F18BFC7B426D47A888/t2w1jO-Yw2qJZnoHXjjK36cosew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/t2w1jO-Yw2qJZnoHXjjK36cosew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8A07/2671B0FE621811F18BFC7B426D47A888/4540F274621811F18288576E6E47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:63:f6:46:63:32:da:4e:02:4d:42:93:9a:3e:c3:23:92:9d:
         4c:d8:88:e9:6b:1e:8e:d5:82:51:e8:0d:09:e2:10:b9:95:69:
         c8:8a:b1:e1:54:cc:82:7c:97:d4:e2:ed:ac:2e:b6:6f:1e:95:
         d3:57:f5:3c:2a:ab:a0:b5:16:7a:a9:fc:06:fe:e1:e5:c5:ce:
         f5:98:38:2e:38:45:d8:7a:d6:5c:e3:9a:b2:16:ce:f9:84:98:
         0f:f6:90:ba:97:f7:7f:67:a8:7c:37:ee:85:be:bf:55:f3:fc:
         de:fb:fd:bb:20:80:6f:df:bb:0b:97:6b:73:db:24:49:92:20:
         08:7b:4b:ad:32:67:28:aa:9f:17:d5:3b:c3:0e:fd:92:f4:ba:
         58:32:69:fe:41:64:96:64:91:52:fe:60:6d:a4:3e:1c:29:a0:
         bb:7c:f3:f7:d0:14:f9:bf:d9:e2:a2:b7:61:ec:2e:32:f2:03:
         80:06:68:0b:38:94:ca:7c:d9:1b:c1:60:87:5c:eb:c1:38:45:
         25:16:04:bb:63:3b:b9:7f:1b:56:54:e6:b4:09:05:2f:90:83:
         ae:9d:cd:e5:32:8b:6e:51:d0:6e:21:f7:c0:06:0f:18:39:a8:
         37:23:1a:aa:71:ec:24:7e:15:5e:a1:1b:66:74:75:c6:3b:ad:
         cc:3a:1d:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:57:36 2026 by rpki-client