Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/A148FF044A0211F198214334BF833773.roa
File:                     A148FF044A0211F198214334BF833773.roa (raw, json)
Hash identifier:          oyIe6iMJKI+8e2z7WOj6GTH4AJrrKRkOWKIHqpLejZA=
Subject key identifier:   49:54:1C:0D:BE:F6:9D:A6:C9:68:23:AA:89:29:7E:B5:26:62:9B:06
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       0638
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/A148FF044A0211F198214334BF833773.roa
Signing time:             Thu 07 May 2026 10:50:58 +0000
ROA not before:           Thu 07 May 2026 10:50:58 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142251
IP address blocks:        151.158.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1592 (0x638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: May  7 10:50:58 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69fc6e92-a889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:39:9a:5b:c9:7c:09:e0:da:85:15:90:61:d6:
                    cd:54:33:1b:ed:f1:8b:6b:0c:ee:67:d1:82:f0:c0:
                    7d:02:fd:97:75:85:07:ca:93:4e:28:70:0b:fa:1a:
                    52:3e:a2:99:dc:78:b2:3b:0b:e6:13:56:71:25:6f:
                    a9:28:66:04:b7:04:dd:71:8c:02:7f:2b:a7:0d:e9:
                    39:e3:9e:12:5c:53:ee:c0:63:67:b8:8b:a4:c6:95:
                    82:2d:dd:dc:d4:97:64:a2:c8:20:9e:43:69:49:f6:
                    19:0d:65:6e:d9:6f:b2:46:03:ed:86:ec:66:3e:2f:
                    e9:39:2d:0a:5b:1c:21:2d:48:10:90:60:7f:e5:81:
                    06:63:20:ca:45:a2:a5:bb:62:9a:3a:5f:b1:b1:37:
                    24:00:82:61:44:8f:eb:38:8f:0e:1d:9b:32:5c:f9:
                    a4:b1:b2:0f:d6:67:01:b1:7a:4d:55:f8:a8:14:c6:
                    07:cb:f9:53:74:4e:eb:5e:bf:5f:22:30:fc:d5:4d:
                    e2:c0:c1:34:9d:f7:af:24:e6:16:06:22:dc:8a:3e:
                    7c:94:6b:65:bb:64:b1:5a:9d:f3:15:89:f9:16:83:
                    db:cd:71:e1:93:92:23:ea:86:ff:aa:a8:ad:2c:d4:
                    8a:e3:f0:ed:f7:29:c2:16:55:0a:04:c7:a5:70:a7:
                    55:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:54:1C:0D:BE:F6:9D:A6:C9:68:23:AA:89:29:7E:B5:26:62:9B:06
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/A148FF044A0211F198214334BF833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:06:d8:27:3d:08:a4:31:d2:6f:89:a7:00:08:9f:3d:b7:0b:
         82:7b:03:d7:7d:9a:73:66:2c:3c:02:95:15:16:bb:3b:c0:07:
         7c:ed:e7:10:50:72:95:b2:83:7f:a4:54:27:63:a7:6f:e2:cf:
         d8:50:dc:c5:c4:e8:76:cb:46:08:68:32:34:25:ae:1e:e2:09:
         8e:ce:de:72:31:19:30:85:80:f8:76:35:cb:77:c7:39:1f:07:
         d1:5c:22:06:ab:af:06:1e:b2:e0:5e:56:9f:76:03:5b:64:fa:
         9e:16:b9:3a:dc:7e:13:31:88:06:b1:4f:e8:09:ce:3e:f9:d4:
         d1:f3:2f:e4:b1:a2:2f:87:49:69:63:ea:22:f8:94:9f:2f:7d:
         bc:d1:84:83:64:11:7d:b9:23:a3:02:71:42:14:6d:f6:6b:c0:
         56:f3:ff:26:d5:47:c1:c1:d1:72:01:19:f1:dd:f3:ff:e0:ac:
         10:36:fe:56:b6:4d:2f:40:de:31:58:f3:db:21:d2:1b:e5:90:
         31:c6:a9:5b:99:a2:09:45:47:0b:93:6c:ec:49:86:bb:3f:ad:
         70:f1:a8:30:d7:15:aa:5e:84:01:a2:9f:31:91:eb:21:b1:d7:
         11:14:16:01:3b:1a:54:4c:ef:7a:1c:08:d0:ee:48:e7:ce:b3:
         e1:a6:71:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:41:12 2026 by rpki-client