Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/0B7DC5301B9111F19CD1C5AE3C3D8C67.roa
File:                     0B7DC5301B9111F19CD1C5AE3C3D8C67.roa (raw, json)
Hash identifier:          9OULIw110zlijx22rtiLadpgzE1Xfff+derfiBE9vKE=
Subject key identifier:   75:BB:6D:B6:88:A7:66:B8:77:88:D1:EE:DB:1D:02:DA:42:4A:56:75
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       05F0
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/0B7DC5301B9111F19CD1C5AE3C3D8C67.roa
Signing time:             Mon 09 Mar 2026 08:22:00 +0000
ROA not before:           Mon 09 Mar 2026 08:22:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142169
IP address blocks:        151.158.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1520 (0x5f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Mar  9 08:22:00 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69ae8328-61b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:95:e6:53:f7:fa:ff:fc:7d:c4:65:27:b9:e9:
                    a7:2b:f4:f0:1e:a2:a6:42:89:bd:24:f0:eb:ba:21:
                    72:a1:12:8d:70:05:41:8a:32:2e:8e:06:c8:54:c4:
                    4b:9e:a6:ce:7f:98:3c:cc:42:02:2d:82:89:c6:01:
                    79:88:1d:13:3c:cc:53:e6:05:0d:a1:e4:31:ef:07:
                    33:d1:7a:f7:77:64:c5:a6:b3:7d:01:92:ae:c6:2f:
                    54:d5:d0:5b:fb:fa:89:0e:54:50:11:59:4a:33:d0:
                    24:96:6a:28:2f:42:0c:4f:c8:56:c5:e5:95:4d:1c:
                    81:65:7f:92:05:3c:52:94:1d:96:9d:b9:a0:15:89:
                    07:65:32:17:54:ed:6d:ce:6e:3d:69:48:f0:aa:4b:
                    6c:7f:b2:db:a3:32:27:77:15:30:fe:47:b2:1f:84:
                    d5:8c:97:02:26:d4:5f:6d:fd:c8:10:8d:99:43:1f:
                    be:21:93:9e:96:84:75:8f:be:39:1e:f5:fb:6a:05:
                    38:9d:1c:95:53:08:23:ab:ba:cd:4b:79:a5:b3:66:
                    44:6f:f9:c7:1a:a2:c2:80:a7:36:c4:4b:da:b7:9e:
                    d5:2d:a1:9d:84:bd:fc:52:20:32:6a:35:1b:2d:24:
                    75:4a:2b:f0:99:b2:e8:ae:d6:a1:90:4b:b6:cf:a0:
                    6b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BB:6D:B6:88:A7:66:B8:77:88:D1:EE:DB:1D:02:DA:42:4A:56:75
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/0B7DC5301B9111F19CD1C5AE3C3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:7d:25:93:02:45:76:06:7c:12:a2:f7:0c:de:75:ed:37:2a:
         23:5c:87:70:1a:3b:53:e6:4c:b2:18:dd:12:e7:8e:f2:1f:9a:
         47:97:e9:c9:e8:ef:68:86:67:40:f7:0c:8b:36:b2:de:33:6b:
         d0:18:a7:c6:29:c5:a2:f7:4a:bd:8d:6f:aa:06:ce:5a:11:cd:
         18:2c:f8:98:ef:19:e3:1d:2a:9b:c3:28:48:ad:11:dd:85:29:
         cb:43:5e:76:64:cc:fc:8d:cb:5a:a1:71:2d:81:88:24:d5:2f:
         60:0a:9e:c9:72:37:96:db:a3:24:20:06:d3:c3:e8:51:56:cd:
         2e:85:07:12:8d:5a:3b:6e:60:3d:10:ef:f4:62:08:99:f6:4b:
         80:2a:03:d9:b6:c8:d8:93:16:7d:a1:91:4d:f1:49:cc:df:6a:
         ce:f0:a0:a1:06:73:cd:54:9b:54:76:6d:ef:f6:3d:af:8e:ee:
         37:1f:63:07:dd:81:70:13:67:3c:be:8c:de:0c:90:b6:ce:8c:
         c9:b1:6d:c8:50:f7:06:28:e8:f2:f8:0e:27:06:05:1d:fd:31:
         a9:b6:30:48:a4:f7:e2:d2:bb:ae:89:49:91:9f:f7:dd:7e:0b:
         6e:09:90:c2:64:bc:7c:26:a0:75:6e:97:d6:85:14:6d:02:4a:
         13:79:71:d8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEVFRDgwQjE5NDI2QzBENEE4MkJDNkYwQjUwQjlCQjEy
NUUxRkQzOEEwHhcNMjYwMzA5MDgyMjAwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWFlODMyOC02MWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtpXmU/f6//x9xGUnuemnK/TwHqKmQom9JPDruiFyoRKNcAVBijIujgbIVMRL
nqbOf5g8zEICLYKJxgF5iB0TPMxT5gUNoeQx7wcz0Xr3d2TFprN9AZKuxi9U1dBb
+/qJDlRQEVlKM9AklmooL0IMT8hWxeWVTRyBZX+SBTxSlB2WnbmgFYkHZTIXVO1t
zm49aUjwqktsf7LbozIndxUw/keyH4TVjJcCJtRfbf3IEI2ZQx++IZOeloR1j745
HvX7agU4nRyVUwgjq7rNS3mls2ZEb/nHGqLCgKc2xEvat57VLaGdhL38UiAyajUb
LSR1SivwmbLortahkEu2z6Br8wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHW7bbaI
p2a4d4jR7tsdAtpCSlZ1MB8GA1UdIwQYMBaAFO7YCxlCbA1KgrxvC1C5uxJeH9OK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi81NDdDODU4NjQx
REExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RVcUN2RzhMVUxtN0VsNGYw
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzd0Z0xHVUpzRFVxQ3ZHOExVTG03RWw0ZjA0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvNTQ3Qzg1ODY0MURBMTFFQzkwNUUzMjUyQzRGOUFFMDIvMEI3REM1MzAx
QjkxMTFGMTlDRDFDNUFFM0MzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAl572MA0GCSqGSIb3DQEBCwUAA4IBAQAPfSWTAkV2BnwSovcM3nXt
NyojXIdwGjtT5kyyGN0S547yH5pHl+nJ6O9ohmdA9wyLNrLeM2vQGKfGKcWi90q9
jW+qBs5aEc0YLPiY7xnjHSqbwyhIrRHdhSnLQ152ZMz8jctaoXEtgYgk1S9gCp7J
cjeW26MkIAbTw+hRVs0uhQcSjVo7bmA9EO/0YgiZ9kuAKgPZtsjYkxZ9oZFN8UnM
32rO8KChBnPNVJtUdm3v9j2vju43H2MH3YFwE2c8vozeDJC2zozJsW3IUPcGKOjy
+A4nBgUd/TGptjBIpPfi0ruuiUmRn/fdfgtuCZDCZLx8JqB1bpfWhRRtAkoTeXHY
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:33:24 2026 by rpki-client