Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/28E7910A1FC911F19CD315063A3D8C67.roa
File:                     28E7910A1FC911F19CD315063A3D8C67.roa (raw, json)
Hash identifier:          R2AlqbhHVnfmyAFdsG6D/MvPgbamdWxUkMT2LqjIQUA=
Subject key identifier:   66:77:82:4D:AB:44:8D:45:96:D5:82:21:A8:A4:1E:66:9D:0B:8A:F3
Certificate issuer:       /CN=A9178AFC/serialNumber=93C019BFD60799D73622C1185F4A39BA5F5F9217
Certificate serial:       3A
Authority key identifier: 93:C0:19:BF:D6:07:99:D7:36:22:C1:18:5F:4A:39:BA:5F:5F:92:17
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/28E7910A1FC911F19CD315063A3D8C67.roa
Signing time:             Tue 12 May 2026 13:17:58 +0000
ROA not before:           Tue 12 May 2026 13:17:58 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     136952
IP address blocks:        151.158.210.0/23 maxlen: 23
                          151.158.210.0/24 maxlen: 24
                          151.158.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl
                          rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 13:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178AFC, serialNumber=93C019BFD60799D73622C1185F4A39BA5F5F9217
        Validity
            Not Before: May 12 13:17:58 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a032886-b071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:aa:0b:5b:6f:f5:b6:fb:99:03:5d:76:a0:4c:
                    21:22:ca:2d:16:3b:c7:29:80:b3:75:90:c2:f9:88:
                    8e:e0:c0:6a:32:eb:3e:14:0f:68:ac:10:12:a8:cc:
                    da:04:44:cd:ee:4d:96:a1:60:eb:8f:9d:23:8a:cd:
                    dd:b4:d8:16:d9:2e:5b:7b:c1:cd:04:7a:6c:1c:8e:
                    46:e5:f9:ae:0a:b5:61:8a:e0:4b:f8:cc:30:24:27:
                    1d:86:1c:e2:c8:df:b3:89:b4:6f:42:14:37:d2:81:
                    29:7f:fa:95:c1:d9:3f:49:e4:42:20:d7:21:ae:eb:
                    53:ea:2f:0f:5e:e6:57:d3:9c:b2:46:6e:74:3a:6a:
                    1b:c6:c9:38:6d:6e:01:d1:66:52:8a:49:70:1d:37:
                    3f:a6:84:4a:5a:04:36:2d:5f:c8:fa:e6:9e:19:8a:
                    58:64:1c:ce:d4:0f:eb:bd:66:80:d2:1c:b0:c6:ef:
                    5e:cf:e8:e5:19:f8:5a:0e:c6:30:cf:14:e4:58:f3:
                    6c:b9:e6:39:fc:90:a5:d0:26:81:a2:5e:4e:35:de:
                    13:7d:4c:d0:76:16:8f:dd:d5:35:1c:51:f0:df:09:
                    ea:86:8e:ce:86:75:60:8a:74:c3:30:ff:21:1f:87:
                    43:3b:33:75:55:2a:57:4c:8d:10:3a:fd:34:e8:df:
                    0a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:77:82:4D:AB:44:8D:45:96:D5:82:21:A8:A4:1E:66:9D:0B:8A:F3
            X509v3 Authority Key Identifier:
                keyid:93:C0:19:BF:D6:07:99:D7:36:22:C1:18:5F:4A:39:BA:5F:5F:92:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/28E7910A1FC911F19CD315063A3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:8c:13:c4:6e:17:13:17:78:a4:02:ee:38:2f:87:4a:f5:3a:
         87:3a:84:85:98:66:56:18:c3:55:cd:21:74:ef:fb:89:fe:a8:
         fc:b7:22:c0:8e:09:5c:4d:1a:57:01:4f:dd:45:ec:f3:37:37:
         72:fe:20:7d:1d:51:bd:04:87:24:de:12:fd:cb:14:a4:39:bf:
         67:d8:fa:3f:80:61:02:8d:5a:8e:14:2e:41:ef:5c:47:cb:8b:
         f1:1f:8f:5b:3c:16:f7:75:f3:a7:4c:38:32:9a:4d:47:bd:02:
         eb:36:58:63:10:16:e8:1c:55:bf:ee:c2:83:b3:26:50:ad:49:
         47:9c:12:cd:5c:d7:68:3a:27:f5:bf:65:6c:ce:af:5d:f4:03:
         22:13:c9:19:db:ea:af:ba:a5:5f:f2:23:36:64:04:3c:bc:f9:
         cf:b2:85:17:35:85:82:cf:a4:49:5b:01:c3:ec:d5:7d:2b:84:
         4c:f1:17:1d:d8:68:4e:a8:c4:41:17:7c:ff:99:6d:85:23:cd:
         89:5e:1f:4b:69:99:74:7a:97:53:52:8c:8b:9c:d6:b8:f2:21:
         7a:ce:46:f2:30:9d:db:1a:b8:8b:1c:28:28:90:81:11:45:41:
         db:85:0f:1d:93:0c:85:86:39:9a:bb:f4:be:f9:fc:41:f1:96:
         8d:99:09:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:33:23 2026 by rpki-client