Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/BC72F318276911F1A0A35906C1833773.roa
File:                     BC72F318276911F1A0A35906C1833773.roa (raw, json)
Hash identifier:          q0BZJiyCbcH9qV0Y8Bg6SXDynQYwM9APWJUQxMnXcpI=
Subject key identifier:   54:6A:24:8C:92:F7:AA:58:B5:E6:18:80:FE:79:CF:FF:1D:92:BC:18
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       0607
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/BC72F318276911F1A0A35906C1833773.roa
Signing time:             Tue 24 Mar 2026 10:10:51 +0000
ROA not before:           Tue 24 Mar 2026 10:10:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154508
IP address blocks:        151.158.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1543 (0x607)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
        Validity
            Not Before: Mar 24 10:10:51 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69c2632b-96f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e6:16:d8:41:f4:50:cf:f3:20:cc:90:66:2d:
                    cf:23:f4:64:ac:fa:4b:bd:1b:0f:2e:80:12:a7:b3:
                    68:09:ac:0b:e9:de:e1:81:63:c2:40:fc:e2:ef:fc:
                    b8:ee:10:e8:57:e4:20:9e:65:e6:29:0b:a9:9b:f2:
                    8f:a8:fe:66:9b:31:bb:cc:5e:a4:bf:66:08:6a:b3:
                    e3:dc:22:f9:19:43:8c:68:07:8d:b8:95:63:01:bd:
                    71:2b:a8:1c:50:70:a5:9a:aa:1b:d2:52:c7:91:6b:
                    7d:e5:15:02:f5:1c:81:f9:ea:45:61:1e:60:b0:5f:
                    6a:f3:e0:f2:c8:08:8f:36:b1:33:3c:96:bc:e7:39:
                    27:35:f3:75:16:08:03:54:6f:01:05:cb:ed:2e:97:
                    08:03:8a:6f:9f:b0:8e:bd:7c:3f:b1:66:76:e4:5f:
                    be:30:23:91:7a:7c:ad:0f:90:aa:65:54:7e:c0:63:
                    23:fe:b0:34:7a:ff:ef:37:09:b4:c8:cb:77:c0:02:
                    b3:71:62:d3:c4:25:ab:ef:7c:af:b8:63:4e:69:76:
                    7b:2a:c7:b0:62:0e:56:98:a0:71:af:9b:5f:4d:92:
                    c5:7a:57:08:b5:64:22:00:fe:4b:c9:11:01:1b:79:
                    c7:1b:3c:fd:48:cf:ac:ca:58:ea:36:ca:82:ca:98:
                    24:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6A:24:8C:92:F7:AA:58:B5:E6:18:80:FE:79:CF:FF:1D:92:BC:18
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/BC72F318276911F1A0A35906C1833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:ca:ff:18:ec:fa:bd:de:6b:d7:c0:1c:ef:60:59:50:e1:87:
         b3:d3:b9:ec:95:ab:3a:2a:91:2d:32:5d:d6:7a:ad:c5:bb:f6:
         2f:31:48:70:1b:9e:0b:1d:fa:3b:4e:cd:68:71:5b:8c:5e:8e:
         e4:23:6f:6b:52:fc:85:28:89:c0:dc:6a:ba:e5:a3:ea:ce:4a:
         cb:11:34:18:57:73:a8:82:35:78:f5:32:78:31:43:7b:62:aa:
         7d:63:6f:1a:89:02:49:e9:a2:bb:8f:e5:3c:97:7b:bb:a3:eb:
         20:20:42:8f:3f:42:89:3c:e8:78:76:32:7b:95:23:4d:4e:07:
         da:29:6d:c9:79:2f:1a:77:0e:bd:aa:37:af:2d:e7:d6:15:27:
         2f:11:c0:b1:34:f5:d8:39:cc:96:5d:2d:47:68:8d:4d:8c:0c:
         d1:ec:dc:89:21:18:58:fb:54:95:e4:9c:94:0b:e5:b7:46:47:
         e3:60:e3:f1:f2:79:32:f9:a8:51:2a:3d:0f:ff:64:7a:ab:e7:
         e5:b8:2c:8f:a0:70:2f:ea:e9:15:28:fe:bd:17:df:1a:39:63:
         ce:40:17:22:bc:a5:7a:d3:01:47:ea:df:64:78:7c:22:a0:98:
         9a:55:c3:2b:de:7a:6b:2a:82:40:88:b8:bc:21:8e:1a:02:9b:
         22:f0:a9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:37:03 2026 by rpki-client