Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/361AC848277511F18B7E0008C6833773.roa
File:                     361AC848277511F18B7E0008C6833773.roa (raw, json)
Hash identifier:          G5FT5+fslpDg1fZC1VngGXlaSVr6fRhDOCK04OEXtIo=
Subject key identifier:   DD:0A:F8:10:82:18:F5:A9:37:4B:67:77:96:BD:6F:1A:18:56:C7:0C
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       0609
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/361AC848277511F18B7E0008C6833773.roa
Signing time:             Tue 24 Mar 2026 11:33:00 +0000
ROA not before:           Tue 24 Mar 2026 11:33:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154487
IP address blocks:        151.158.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1545 (0x609)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Mar 24 11:33:00 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69c2766c-851d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:62:30:95:9f:ea:6b:2f:d5:62:28:86:fb:3d:
                    bc:8c:0b:43:d5:4f:8d:af:19:44:1f:c5:f4:0a:56:
                    46:fe:53:d5:76:4c:a4:07:1d:1a:34:c8:b3:f8:60:
                    38:bd:49:06:0b:7b:40:75:ed:2a:6a:11:19:34:3d:
                    fd:78:9e:74:b6:cf:a7:5f:3a:14:1e:75:5a:22:18:
                    81:1a:57:fc:58:bb:24:6f:6f:4a:41:f4:79:de:c9:
                    aa:73:4c:1f:a0:88:03:16:6e:15:eb:d5:2b:89:9a:
                    11:9d:28:5f:8d:9a:94:80:48:6d:17:a2:f4:84:6c:
                    af:50:58:a6:b4:86:94:3e:b1:12:95:af:86:49:a5:
                    99:8c:0c:b1:da:f4:8a:41:60:4f:40:f4:d7:d6:55:
                    4c:3a:49:b9:e0:12:eb:5f:8e:be:ca:18:eb:0b:84:
                    f8:97:24:31:cb:ce:d0:89:64:9c:9e:15:ce:b8:ae:
                    ae:ae:3b:16:bb:3a:be:2c:fe:65:4a:15:1c:4f:f7:
                    9f:c7:bf:5b:98:ad:2d:97:f5:ac:fe:ac:3d:5f:f0:
                    5a:b7:e8:99:9f:cd:12:31:db:e6:63:fa:ce:b8:ba:
                    b3:89:e7:75:98:cc:d3:c7:64:48:41:0d:46:3d:5d:
                    6b:09:23:d8:bb:68:cd:61:48:54:3f:af:10:4a:07:
                    14:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0A:F8:10:82:18:F5:A9:37:4B:67:77:96:BD:6F:1A:18:56:C7:0C
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/361AC848277511F18B7E0008C6833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:a3:62:c1:bd:d6:bd:90:6e:30:9e:cc:74:87:af:ac:d1:ec:
         b3:95:6a:1b:64:1e:74:2e:67:74:e0:1f:4b:93:83:1a:f3:14:
         be:75:ac:79:df:86:03:01:33:bf:4c:3c:ad:0d:c8:e4:5c:8a:
         d2:9b:e3:59:ab:50:38:9f:9b:8b:48:e1:39:c7:31:f0:49:85:
         95:c4:6a:7e:2c:69:d6:53:e4:db:83:40:c5:4f:5f:86:d5:9c:
         5c:a0:c2:f4:10:38:ba:f6:12:4f:a2:ec:cb:51:52:05:33:3c:
         b0:2f:0c:7f:65:23:6f:b4:79:ea:26:27:41:68:0f:a1:5b:e0:
         18:ca:97:34:40:3b:d6:b4:d0:85:9c:99:d7:2f:1b:a0:c5:70:
         38:4f:3d:2b:b4:ec:11:dc:f4:62:fb:a9:da:3d:39:38:34:d4:
         1d:fb:4e:1e:a0:f8:9c:af:7e:09:68:1f:1e:e1:4f:05:13:bf:
         4d:0a:d1:6a:11:38:e5:0c:3c:53:69:0b:90:85:68:22:02:fd:
         cb:9c:57:03:e1:78:12:f6:8b:26:57:68:8a:af:00:f1:3f:70:
         ba:85:de:b5:e6:fb:3b:b6:58:bf:8a:02:00:f0:53:b3:3b:7a:
         d5:7d:d1:0a:03:e8:6e:52:6a:36:d7:20:fd:15:ab:f7:58:60:
         21:44:05:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:26:39 2026 by rpki-client