Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/A6762246057D11F1B9448C30373D8C67.roa
File:                     A6762246057D11F1B9448C30373D8C67.roa (raw, json)
Hash identifier:          geZ+Juwd/ngZK1p90ogISyybqZrADAs8/05GaOot88M=
Subject key identifier:   F7:80:C4:B7:C5:73:B4:21:22:7F:97:6D:B1:BF:59:86:4C:DF:8F:5F
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       05C2
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/A6762246057D11F1B9448C30373D8C67.roa
Signing time:             Sun 01 Mar 2026 18:51:52 +0000
ROA not before:           Mon 09 Feb 2026 06:07:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138232
IP address blocks:        151.158.24.0/24 maxlen: 24
                          151.158.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1474 (0x5c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Feb  9 06:07:45 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a48ac8-2a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:43:0b:81:b7:bb:f2:4a:e8:19:a1:1c:ff:
                    56:52:25:9a:d2:d3:28:4f:fb:39:26:a7:0a:96:c5:
                    25:59:89:22:1c:3c:74:64:80:2e:58:72:71:40:35:
                    13:09:59:f4:d0:0d:ed:b8:91:45:d9:5a:eb:e7:30:
                    bf:f2:97:36:87:e8:ba:c2:a2:81:d7:0e:fc:3f:8f:
                    a3:24:9c:42:5e:94:4f:45:66:d7:78:19:30:90:57:
                    3e:bc:95:9a:21:85:92:b0:2f:7d:86:e3:01:29:c1:
                    97:6b:64:d6:e2:27:56:ac:da:e7:15:32:4e:58:fb:
                    af:be:18:7c:7b:db:75:d7:48:bd:a0:f6:a9:a7:e3:
                    5f:fe:12:1e:4e:2c:5b:1c:e1:1b:bc:c9:d6:c5:44:
                    7b:f6:7a:1b:7d:94:4f:17:6b:c8:69:36:7b:ad:d9:
                    bd:27:53:a7:5f:04:39:68:4d:89:dd:34:8f:aa:6f:
                    e1:7a:dd:69:5b:89:f2:af:15:8d:e6:e0:2b:2e:2e:
                    41:9e:df:eb:bb:ba:4c:41:ab:d3:98:19:e6:f3:08:
                    4c:a1:ea:5f:75:50:e4:79:54:80:c2:75:68:1a:6d:
                    6d:24:f0:fa:c7:2d:61:a7:78:0b:71:5f:23:48:13:
                    ae:07:ae:45:67:1b:ea:2d:dc:bb:02:e7:bc:03:25:
                    b2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:80:C4:B7:C5:73:B4:21:22:7F:97:6D:B1:BF:59:86:4C:DF:8F:5F
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/A6762246057D11F1B9448C30373D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:d3:21:66:aa:3a:54:07:53:cd:b7:ed:ef:66:5b:f3:10:22:
         33:27:d8:67:82:a8:f7:b2:d1:d9:8a:3d:8e:54:1f:af:79:b7:
         08:ad:e2:89:6e:9c:60:b4:d1:81:e7:2a:aa:65:d6:c5:09:f1:
         c6:f0:74:97:32:8b:07:16:59:85:f2:59:c7:92:d1:59:b8:87:
         c2:0e:f8:06:39:de:40:ac:c2:63:5d:64:47:9d:11:89:91:29:
         c6:a3:44:84:59:29:16:0f:c1:fa:e3:10:56:57:5c:91:cc:05:
         20:32:86:b5:0e:cb:40:9f:62:38:da:54:fd:12:00:5b:d4:48:
         dd:2e:aa:df:01:63:2e:fd:98:f5:aa:ec:a7:31:16:e7:ac:71:
         98:76:f6:03:e0:93:63:7c:86:5b:f6:22:f9:4b:d5:6a:77:db:
         1a:74:bd:98:ee:8b:7f:4d:d3:35:0f:6f:b8:37:f2:9c:ec:c2:
         b4:37:af:36:ce:0c:ca:12:6a:f6:6e:67:41:59:16:34:44:77:
         f7:de:25:dc:4b:5d:72:e8:24:46:a9:bf:3e:e6:e3:33:92:83:
         c7:c5:79:85:a2:3f:b0:70:72:86:f5:56:90:88:ae:a7:34:78:
         31:1a:aa:01:3a:89:08:9d:6a:b7:e9:f2:ad:07:71:a5:86:f3:
         11:ce:9c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:12:08 2026 by rpki-client