Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/AEA6DD8EB5A911F1866264E73711F970.roa
File:                     AEA6DD8EB5A911F1866264E73711F970.roa (raw, json)
Hash identifier:          dG5QzLEoRu/b5oS/acOu/fnsK3Kz1Y/Ebls1zVZLMGI=
Subject key identifier:   8D:21:E1:F2:A3:EE:FC:63:FA:1A:58:BE:91:9A:D7:C1:8F:93:96:25
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       06CC
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/AEA6DD8EB5A911F1866264E73711F970.roa
Signing time:             Mon 21 Sep 2026 10:46:21 +0000
ROA not before:           Mon 21 Sep 2026 10:46:21 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142233
IP address blocks:        151.158.66.0/24 maxlen: 24
                          151.158.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1740 (0x6cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Sep 21 10:46:21 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6ab10afd-829f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f5:ee:7f:fe:f5:21:f4:c1:0c:ed:65:51:10:
                    85:b1:a6:21:b4:a4:28:64:8f:ec:2b:ce:04:27:e3:
                    df:53:e5:4a:62:8f:47:ec:8f:71:f6:46:1d:bb:50:
                    cc:2c:dc:ce:60:25:83:67:80:e4:87:fc:4d:3a:d5:
                    cb:29:de:5e:98:8c:3f:c4:84:78:2b:80:ea:39:0f:
                    60:6a:ac:16:b8:25:86:28:05:7b:3a:75:75:e0:24:
                    dc:89:99:23:29:96:eb:dc:3e:98:de:8d:00:2c:1b:
                    5b:c8:f4:d5:6d:0b:42:55:f7:e0:f6:18:5e:8c:e9:
                    b4:3b:78:7e:79:b4:cb:ca:cd:e2:b8:a8:43:65:c1:
                    d6:39:91:10:59:75:8c:f4:4d:26:d7:84:98:ff:45:
                    17:b6:e2:0f:86:c3:c9:fd:7d:4d:41:5f:c7:ea:15:
                    a9:ba:af:43:87:83:de:0f:a2:72:3f:2e:50:22:10:
                    9d:bc:6c:ef:77:8c:3d:ed:c3:46:15:65:0b:e5:ad:
                    8a:86:b8:cf:c5:0e:11:e0:2e:3f:5b:53:b3:9a:13:
                    db:f5:dd:73:2d:66:70:a3:27:a1:b0:dc:55:a5:ba:
                    af:b6:75:65:a9:69:e1:17:1e:50:e4:9a:7c:db:49:
                    36:53:70:45:37:e9:47:ba:e6:89:90:c0:f0:02:48:
                    26:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:21:E1:F2:A3:EE:FC:63:FA:1A:58:BE:91:9A:D7:C1:8F:93:96:25
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/AEA6DD8EB5A911F1866264E73711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:1b:4d:1d:1e:59:99:c2:d5:d9:05:33:9c:3a:2f:25:e0:c1:
         c3:73:53:15:5e:f3:7a:c1:b7:05:95:37:e2:9e:d4:52:d7:1a:
         a3:df:19:e1:d1:5e:e3:31:c8:80:e6:1b:f8:98:8c:ce:d7:45:
         ba:0f:ca:bd:41:6d:f7:ec:df:06:a3:8b:ee:3e:3b:09:e5:fa:
         48:06:75:b7:9e:c8:50:88:23:1c:a9:2a:ea:b9:6c:49:89:6c:
         74:36:47:e5:89:99:3a:d2:1e:51:30:df:1a:9c:e4:e0:7a:b0:
         e4:29:b2:dd:9f:3c:53:3f:23:c3:2a:55:42:f0:70:b2:db:97:
         1c:35:e8:b2:3f:53:00:d9:6b:cc:c4:61:3a:ef:9c:9e:ac:ae:
         27:1d:53:3d:d7:82:97:34:29:0d:9c:56:d9:3c:a5:88:81:14:
         a0:78:a9:08:39:a1:ae:fc:84:66:d3:74:ad:e7:86:fc:ac:bb:
         7e:37:13:37:69:81:a6:b6:f0:4d:e6:d8:7e:49:ec:68:9b:b3:
         59:f7:d9:8c:f9:34:be:e4:7d:9b:3b:6a:14:8b:2a:d6:67:d8:
         2f:c8:54:2c:0f:7d:b3:7d:33:45:cc:09:3e:da:39:20:1e:82:
         ea:41:ed:2a:c4:3a:6b:3c:47:0c:07:34:45:8f:07:af:b4:db:
         1b:ac:bf:3a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEVFRDgwQjE5NDI2QzBENEE4MkJDNkYwQjUwQjlCQjEy
NUUxRkQzOEEwHhcNMjYwOTIxMTA0NjIxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIxMGFmZC04MjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs/Xuf/71IfTBDO1lURCFsaYhtKQoZI/sK84EJ+PfU+VKYo9H7I9x9kYdu1DM
LNzOYCWDZ4Dkh/xNOtXLKd5emIw/xIR4K4DqOQ9gaqwWuCWGKAV7OnV14CTciZkj
KZbr3D6Y3o0ALBtbyPTVbQtCVffg9hhejOm0O3h+ebTLys3iuKhDZcHWOZEQWXWM
9E0m14SY/0UXtuIPhsPJ/X1NQV/H6hWpuq9Dh4PeD6JyPy5QIhCdvGzvd4w97cNG
FWUL5a2KhrjPxQ4R4C4/W1OzmhPb9d1zLWZwoyehsNxVpbqvtnVlqWnhFx5Q5Jp8
20k2U3BFN+lHuuaJkMDwAkgmoQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFI0h4fKj
7vxj+hpYvpGa18GPk5YlMB8GA1UdIwQYMBaAFO7YCxlCbA1KgrxvC1C5uxJeH9OK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi81NDdDODU4NjQx
REExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RVcUN2RzhMVUxtN0VsNGYw
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzd0Z0xHVUpzRFVxQ3ZHOExVTG03RWw0ZjA0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvNTQ3Qzg1ODY0MURBMTFFQzkwNUUzMjUyQzRGOUFFMDIvQUVBNkREOEVC
NUE5MTFGMTg2NjI2NEU3MzcxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBl55CMA0GCSqGSIb3DQEBCwUAA4IBAQBWG00dHlmZwtXZBTOcOi8l
4MHDc1MVXvN6wbcFlTfintRS1xqj3xnh0V7jMciA5hv4mIzO10W6D8q9QW337N8G
o4vuPjsJ5fpIBnW3nshQiCMcqSrquWxJiWx0NkfliZk60h5RMN8anOTgerDkKbLd
nzxTPyPDKlVC8HCy25ccNeiyP1MA2WvMxGE675yerK4nHVM914KXNCkNnFbZPKWI
gRSgeKkIOaGu/IRm03St54b8rLt+NxM3aYGmtvBN5th+Sexom7NZ99mM+TS+5H2b
O2oUiyrWZ9gvyFQsD32zfTNFzAk+2jkgHoLqQe0qxDprPEcMBzRFjwevtNsbrL86
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:07:48 2026 by rpki-client