Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/198EDB1034E511F1828F838E91833773.roa
File:                     198EDB1034E511F1828F838E91833773.roa (raw, json)
Hash identifier:          5rQyQHbY+5t3PI7uWTPeIpLhKz0IBw52hEVYsHCpwMw=
Subject key identifier:   9C:AC:E6:AF:5D:0D:57:C7:5D:E3:51:C5:EB:02:28:CF:CC:20:49:31
Certificate issuer:       /CN=A91FBC9F/serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF
Certificate serial:       4A
Authority key identifier: 9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/198EDB1034E511F1828F838E91833773.roa
Signing time:             Tue 09 Jun 2026 10:08:23 +0000
ROA not before:           Tue 09 Jun 2026 10:08:23 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     140687
IP address blocks:        151.158.206.0/24 maxlen: 24
                          151.158.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.crl
                          rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBC9F, serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF
        Validity
            Not Before: Jun  9 10:08:23 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a27e617-c1a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f4:e8:5d:70:a8:a5:8b:9b:58:4c:cd:dc:57:
                    be:a1:f5:66:1d:2a:73:2a:48:d0:d4:c5:eb:25:17:
                    3d:f3:8e:d6:e6:9b:65:a0:4f:d0:f7:01:f8:e6:b6:
                    6d:06:11:14:4c:c2:7c:43:dc:ff:97:1e:0e:8b:58:
                    94:9e:a2:ac:4e:fa:34:79:bc:b5:41:27:06:e8:61:
                    8c:ed:d2:1a:42:91:ea:bc:4d:09:5a:f0:38:26:e7:
                    97:61:ca:6c:07:0d:dd:f7:60:77:71:c1:7e:ae:74:
                    b9:e6:3e:41:d3:53:a6:6b:30:18:fa:47:71:5a:30:
                    60:19:d3:09:b7:7a:e1:44:f2:07:20:71:e8:c0:f0:
                    6f:8f:a2:46:a5:6c:09:ef:c1:e6:e7:39:cc:cc:44:
                    ce:4b:ba:46:e7:be:0c:f7:d6:44:b4:6d:9d:ce:53:
                    11:5e:36:d1:f4:29:d5:bb:f2:22:e6:49:94:ca:9f:
                    b4:85:33:a2:97:c0:8a:0d:4c:64:7a:6d:b5:61:b4:
                    99:28:68:24:ae:65:a4:75:36:69:db:8e:78:ab:a8:
                    d9:4b:59:26:df:f7:a8:f9:96:50:7d:6f:52:0f:fd:
                    47:fa:0e:75:56:0d:fa:6e:e9:c8:f5:20:72:c7:e8:
                    70:73:67:36:7e:7a:a7:fb:d9:b8:e4:78:7a:5b:8c:
                    9e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AC:E6:AF:5D:0D:57:C7:5D:E3:51:C5:EB:02:28:CF:CC:20:49:31
            X509v3 Authority Key Identifier:
                keyid:9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/198EDB1034E511F1828F838E91833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:39:e3:0b:06:3a:fb:d2:c2:43:10:13:57:c7:0b:f9:c7:ad:
         71:87:d8:a1:97:d1:33:97:53:70:e0:8e:b7:90:e7:3d:c1:e4:
         19:93:5f:bc:f2:e4:fa:2b:36:a8:a3:65:3c:fe:34:5f:94:18:
         52:5c:0d:f9:81:71:b7:2b:47:7d:0a:e2:91:b3:a7:7f:8d:1b:
         09:81:79:fa:10:48:10:30:f5:bc:94:8a:09:d0:fa:04:a4:ab:
         e4:f9:b2:38:e9:10:05:8d:71:be:25:1d:7a:2a:fd:70:f0:0e:
         27:0e:46:3a:f2:e1:f6:45:4c:3a:07:5e:03:c7:5d:ae:54:34:
         7f:8f:52:8f:b3:11:f2:7b:56:d6:68:1f:3a:c7:e1:3b:1d:ee:
         06:81:4e:d9:fe:94:ee:c1:db:48:9e:b0:c7:83:de:82:5e:52:
         06:e2:37:14:b6:51:bb:53:7b:e4:24:19:93:de:5c:a4:1b:fb:
         79:b8:5a:84:24:79:f0:e1:9b:c8:60:f8:04:4f:9f:2e:49:f8:
         e5:ca:e3:ed:3a:d2:47:c2:8a:34:06:ac:ea:48:66:9f:67:37:
         f7:c4:2c:2b:a5:e3:67:26:51:d5:0a:dc:08:20:ab:b3:34:bf:
         b9:07:ae:f3:aa:61:e2:98:26:39:02:0d:ef:ca:a1:69:67:40:
         6c:ab:02:7c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:22:24 2026 by rpki-client