Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/712388E4280111F1A83DAB9AB3833773.roa
File:                     712388E4280111F1A83DAB9AB3833773.roa (raw, json)
Hash identifier:          K9JzF7ASQ/dIE8eYhUhxHKBukwqoRDy8rDl9EfISA8I=
Subject key identifier:   C9:CD:85:0D:83:D3:A1:A0:BB:33:39:39:63:87:5A:08:14:83:99:CA
Certificate issuer:       /CN=A9136BEA/serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341
Certificate serial:       02
Authority key identifier: 48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/712388E4280111F1A83DAB9AB3833773.roa
Signing time:             Wed 25 Mar 2026 04:16:49 +0000
ROA not before:           Wed 25 Mar 2026 04:16:49 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     142248
IP address blocks:        151.158.110.0/24 maxlen: 24
                          151.158.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl
                          rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136BEA, serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341
        Validity
            Not Before: Mar 25 04:16:49 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69c361b0-a298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:82:45:3a:95:fd:59:2c:9b:03:3a:46:93:a3:
                    b6:5b:03:14:6f:8d:e0:06:03:a5:50:fc:0f:5b:c8:
                    15:5b:52:bc:22:40:5f:ef:12:f5:03:3e:76:99:d1:
                    af:b5:0c:3d:6b:aa:9d:2f:6d:19:2d:07:1b:a8:2d:
                    26:01:e7:ae:49:55:05:ae:78:51:f5:24:3b:7c:c2:
                    41:fc:32:7b:16:24:18:e8:58:7d:9e:93:a2:02:80:
                    72:a9:ca:53:0e:77:35:9d:ea:4b:9e:40:73:13:eb:
                    67:1f:86:7b:2c:2f:08:47:03:a4:fc:f6:1f:ef:40:
                    a0:a3:d3:9a:85:fc:d5:d5:88:91:2e:66:49:0f:53:
                    86:94:43:f9:54:29:6e:56:93:c0:c0:c6:9e:63:27:
                    29:8c:05:54:11:f4:02:71:02:c0:96:0d:9b:57:e4:
                    25:62:a3:41:e5:98:43:1e:be:20:e9:50:40:03:f7:
                    77:61:2e:b4:d3:3b:a1:b6:d8:98:a7:68:ef:9e:f9:
                    c5:04:dc:3a:fc:41:6d:95:99:a8:f3:6b:8d:95:ee:
                    fa:a5:d2:68:37:61:14:db:ce:e8:b2:f3:78:de:2c:
                    07:de:60:12:79:bb:c2:34:aa:20:fd:28:59:89:b5:
                    57:b3:e3:52:a0:2c:dc:d8:95:0e:93:86:75:cb:2d:
                    00:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CD:85:0D:83:D3:A1:A0:BB:33:39:39:63:87:5A:08:14:83:99:CA
            X509v3 Authority Key Identifier:
                keyid:48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/712388E4280111F1A83DAB9AB3833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:8c:e7:11:26:4e:27:41:14:8c:9f:df:c2:06:c5:46:1c:87:
         61:1e:5b:6b:ed:81:12:f0:fd:de:22:b1:24:c6:10:48:a3:b6:
         50:ca:8c:02:ea:60:0c:bb:f2:76:0e:49:ba:15:60:00:8f:90:
         19:43:43:3c:76:29:c8:e3:cb:b3:9e:c1:48:a2:bc:80:0b:3b:
         75:a5:4d:24:fa:cb:16:e4:39:78:9d:3c:02:61:da:eb:76:85:
         c8:27:bb:71:6e:a0:15:d3:41:bb:09:86:c7:36:64:dd:ec:9f:
         6c:6e:0a:21:14:18:46:69:5d:7f:11:a3:7a:35:f5:5f:e4:01:
         0d:11:fb:89:05:85:b3:74:30:f5:a9:0f:0b:6a:98:88:ea:ca:
         2e:04:ac:9c:d6:34:e0:35:a0:9c:b0:f4:f5:a2:c5:7c:ac:1b:
         a1:4a:11:3d:a2:17:6b:e4:7f:82:95:7b:d4:12:e0:6a:3f:37:
         71:cf:77:ab:4a:bc:72:9c:ec:d4:5a:52:9d:31:b4:c8:0b:8f:
         41:88:04:3d:a7:0a:a6:d6:38:c4:cb:e7:16:95:a9:27:c4:26:
         b1:ba:53:8e:e5:7e:5e:fa:01:a5:75:fa:07:66:d5:80:c4:f5:
         69:1e:1f:d9:6a:f4:da:73:26:4e:21:82:b0:4a:e2:31:09:30:
         66:35:7f:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:51 2026 by rpki-client