Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/E685F69A372D11F1A4767B088F833773.roa
File:                     E685F69A372D11F1A4767B088F833773.roa (raw, json)
Hash identifier:          FJIzDWY4FUZYzGXG6swI0+oNcll13LRpA1sEgGuP3vM=
Subject key identifier:   F6:6E:4B:5F:B6:18:1B:1B:62:F7:CE:0F:D3:D7:60:8D:25:EB:81:FA
Certificate issuer:       /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Certificate serial:       0F
Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/E685F69A372D11F1A4767B088F833773.roa
Signing time:             Mon 04 May 2026 13:20:22 +0000
ROA not before:           Mon 04 May 2026 13:20:22 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     132165
IP address blocks:        151.123.224.0/19 maxlen: 19
                          151.123.224.0/24 maxlen: 24
                          151.123.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
                          rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
        Validity
            Not Before: May  4 13:20:22 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69f89d16-06c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d3:4b:8f:02:dc:72:69:03:a1:64:ee:38:d0:
                    54:dc:48:58:8f:72:35:e0:3e:72:4a:03:4c:bd:0b:
                    07:c4:81:7f:25:37:39:dd:c4:91:aa:0f:07:d6:5a:
                    05:22:eb:ed:20:8a:0d:0c:7a:4e:83:6b:7b:18:06:
                    23:b3:6e:84:de:7c:96:f2:40:33:17:97:00:db:26:
                    72:a1:91:6a:8f:38:5b:4c:e3:47:19:22:2c:29:cf:
                    0a:29:35:c1:13:f8:28:5e:78:47:d7:1d:af:ac:ad:
                    75:bd:ad:1f:17:17:3f:8b:df:74:8b:ce:ff:d2:c7:
                    a5:aa:d6:de:5c:cc:43:be:15:90:5b:4b:b1:fb:67:
                    a8:85:c4:36:2b:2b:72:5b:5f:79:94:36:79:f8:d8:
                    a6:64:0f:08:bd:9b:44:33:64:12:98:7b:08:fc:88:
                    5f:e7:43:a9:3c:92:be:54:7c:38:52:c5:5c:b8:14:
                    ed:44:b0:16:53:bc:72:fc:a4:3d:22:d7:e1:ec:59:
                    58:f3:8d:bd:5b:86:a0:e6:73:4b:51:84:31:0c:67:
                    48:84:f6:a6:89:80:30:eb:25:13:48:01:87:7e:24:
                    4a:fa:9d:61:29:9b:51:f0:8a:9a:73:9a:54:4a:4a:
                    f4:5a:65:2e:38:8d:07:ca:8c:6e:73:83:0a:88:67:
                    4f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6E:4B:5F:B6:18:1B:1B:62:F7:CE:0F:D3:D7:60:8D:25:EB:81:FA
            X509v3 Authority Key Identifier:
                keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/E685F69A372D11F1A4767B088F833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.123.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6a:04:f8:e0:6e:e3:64:f3:de:75:7c:b1:3a:57:0f:27:b9:70:
         0f:01:3e:46:7f:6d:61:67:1f:92:2c:83:e8:da:96:75:6e:e5:
         32:f0:35:b2:b7:74:f5:1d:0b:43:86:62:37:f0:44:3f:14:05:
         bc:98:6b:aa:92:69:0e:12:7e:8c:89:c4:c2:cb:71:dc:ee:a0:
         ab:e8:ae:70:6c:7a:09:8e:4d:b7:32:cb:a4:05:89:13:04:23:
         bd:86:94:3d:ea:24:a2:2c:2b:9f:c5:c7:81:49:6b:15:8a:ff:
         6b:ac:d8:4d:57:ee:9d:a2:d8:7b:7f:a3:68:03:d6:8c:58:36:
         e8:30:cc:6a:90:8e:16:64:b3:f4:24:ec:df:f4:d0:a0:50:57:
         09:02:88:c3:7c:a3:c7:65:21:51:3e:ed:4c:3e:dd:31:08:72:
         54:91:a0:29:1a:68:f1:52:93:8a:7d:48:22:7a:e0:ad:fe:40:
         04:1c:74:12:e5:85:59:22:91:02:d6:8d:93:11:69:46:40:47:
         ee:7b:21:6f:db:13:c6:24:c1:53:0e:f4:f4:cf:d6:ad:ba:c6:
         05:0e:3f:ca:c3:ff:ba:82:c8:45:7e:bf:74:0c:e6:f2:33:4c:
         59:e0:cc:aa:be:06:f4:83:db:70:81:37:c9:05:9b:bb:58:02:
         b2:65:57:d5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 12:28:41 2026 by rpki-client