Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/3E037E68FF7C11F086EA69A45B6F56BC.roa
File:                     3E037E68FF7C11F086EA69A45B6F56BC.roa (raw, json)
Hash identifier:          r3lNg8EWJOKoNWJ6zf/k8aclnVMD0So3S9nDRkl8wlo=
Subject key identifier:   DF:06:11:16:59:E9:68:5E:F4:7E:20:4A:FA:7D:73:27:2D:91:44:32
Certificate issuer:       /CN=A911725F/serialNumber=9AE3977A598CF981BDF08564DDCB6BF2B6A9641B
Certificate serial:       41
Authority key identifier: 9A:E3:97:7A:59:8C:F9:81:BD:F0:85:64:DD:CB:6B:F2:B6:A9:64:1B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/3E037E68FF7C11F086EA69A45B6F56BC.roa
Signing time:             Sat 09 May 2026 13:52:51 +0000
ROA not before:           Sat 09 May 2026 13:52:51 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     132387
IP address blocks:        151.158.86.0/23 maxlen: 23
                          151.158.86.0/24 maxlen: 24
                          151.158.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.crl
                          rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911725F, serialNumber=9AE3977A598CF981BDF08564DDCB6BF2B6A9641B
        Validity
            Not Before: May  9 13:52:51 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69ff3c32-296c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:38:82:18:b3:66:ed:a9:e5:a8:31:8e:a6:0c:
                    74:75:b4:47:9f:52:de:b4:0c:0f:1b:d3:2b:20:e1:
                    6c:60:d9:16:e6:9a:32:3c:4e:25:cc:2d:1d:16:64:
                    a6:42:46:b6:26:c4:38:2f:57:fd:53:4e:c2:39:c5:
                    37:5b:08:03:7e:cc:2f:e4:d8:b3:3d:cb:9c:f9:28:
                    2a:10:6c:34:4b:ba:f9:db:81:40:d6:93:8a:1c:b1:
                    5e:31:d7:96:43:c4:32:04:42:66:fa:af:73:c8:c9:
                    d2:4a:09:b9:72:1a:83:3c:4e:34:1c:9e:14:d2:d6:
                    8f:2f:a9:c6:ec:d8:08:5b:f6:7b:ce:b1:c9:ef:9b:
                    62:4d:f0:10:8e:db:05:c6:ef:1f:e6:24:b8:a0:91:
                    2e:44:a9:9d:34:b2:dc:bf:78:8b:6a:12:a9:44:51:
                    08:85:d3:c2:e4:a8:92:a5:2c:b3:b9:d1:dd:35:08:
                    f8:76:85:45:0a:ef:a6:85:58:f8:c0:aa:45:57:38:
                    3f:f8:37:03:31:d5:41:1a:59:b5:ee:01:9e:26:7e:
                    2d:98:ad:56:45:6f:4c:26:a7:85:1d:ba:14:e6:a3:
                    e4:a0:18:b0:09:9f:cb:cd:8c:22:8f:00:7b:74:cb:
                    77:b8:ec:5e:8d:c6:74:ee:b6:5f:fb:77:be:5a:c8:
                    73:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:06:11:16:59:E9:68:5E:F4:7E:20:4A:FA:7D:73:27:2D:91:44:32
            X509v3 Authority Key Identifier:
                keyid:9A:E3:97:7A:59:8C:F9:81:BD:F0:85:64:DD:CB:6B:F2:B6:A9:64:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/3E037E68FF7C11F086EA69A45B6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:6c:a4:7c:62:19:f7:7d:0e:08:a7:37:97:f8:a9:a9:b0:1a:
         9b:06:61:ae:f5:01:6c:e4:e1:f0:29:c3:39:76:a5:67:06:0e:
         10:62:c8:79:93:1c:3b:f6:1f:41:a2:23:72:a9:b0:71:e4:50:
         4f:41:ac:c7:6d:e4:0d:e7:04:8c:ea:86:d7:f5:d3:fa:18:fb:
         b7:57:66:cf:a2:55:c0:7a:30:11:cf:cd:b2:38:2c:e4:18:03:
         87:25:53:02:43:ce:1c:d0:5b:2f:22:05:73:c0:2f:aa:fd:a8:
         bc:3f:85:4d:f5:16:7b:1b:24:9c:6e:7e:e5:5b:fc:7f:9a:01:
         3c:7f:5a:84:d8:d6:a9:25:ca:b7:d2:ad:d2:09:88:34:06:8d:
         82:01:4b:78:0b:53:07:b6:36:c6:e8:ea:14:ca:d2:fc:25:1e:
         33:91:9a:79:99:71:7a:4e:cf:b5:8c:20:9e:5c:1e:57:6f:c9:
         e2:82:86:f6:1b:23:5d:8c:54:b8:e1:43:71:81:05:97:3d:89:
         1d:04:59:a4:ca:0f:4e:87:47:f1:6e:84:22:bd:61:e5:5c:9e:
         fb:27:9b:e6:c9:37:24:e1:96:03:07:df:2d:6b:53:f9:b4:38:
         5f:25:49:12:f2:d1:7b:6d:fb:4a:dc:e8:45:ac:60:3f:b3:68:
         4a:a5:4f:4d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 12:38:37 2026 by rpki-client