Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/A1456A4CBE6811EEBFF35870C4F9AE02.roa
File:                     A1456A4CBE6811EEBFF35870C4F9AE02.roa (raw, json)
Hash identifier:          bmD/DsE+tY3JlHkV3Sz9uaxYc6XsX1W6cL8D8Zq/OGo=
Subject key identifier:   25:DB:D7:35:CC:10:AF:C7:92:EF:80:3B:0D:C7:0F:2E:32:6E:0B:4D
Certificate issuer:       /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Certificate serial:       0202
Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/A1456A4CBE6811EEBFF35870C4F9AE02.roa
Signing time:             Sat 03 Oct 2026 04:52:10 +0000
ROA not before:           Sat 03 Oct 2026 04:52:10 +0000
ROA not after:            Mon 01 Feb 2027 00:00:00 +0000
asID:                     152447
IP address blocks:        157.15.52.0/23 maxlen: 23
                          157.15.52.0/24 maxlen: 24
                          157.15.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
                          rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 03:48:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514 (0x202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C07A, serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
        Validity
            Not Before: Oct  3 04:52:10 2026 GMT
            Not After : Feb  1 00:00:00 2027 GMT
        Subject: CN=6ac089f9-73ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0f:be:a8:17:8a:4f:dc:53:26:d1:bd:22:81:
                    45:2b:fe:cf:df:37:2c:b2:69:90:eb:bd:a6:7e:f3:
                    95:e5:e8:73:3a:fc:b0:18:9a:92:c3:93:a5:41:8e:
                    af:84:ce:f0:55:35:df:32:42:5d:ec:cb:6a:12:2f:
                    63:1a:82:90:38:33:7b:03:69:6d:3b:6b:c0:84:a9:
                    09:87:3d:78:db:f5:f0:81:39:ea:b9:17:b3:4e:41:
                    ab:f4:57:83:6f:a3:d6:10:ee:ec:56:d0:c6:7b:d2:
                    fa:62:23:13:74:6b:41:c8:e3:a7:d3:99:2b:be:cc:
                    da:d4:bc:e8:98:ad:6a:1a:b7:d9:82:d3:17:a2:d7:
                    21:a9:c3:b2:57:90:c5:ad:d8:a2:19:8e:fb:48:11:
                    e0:c6:94:61:14:90:b9:97:c8:72:06:d2:7f:d2:a8:
                    a3:1e:5c:c1:9e:26:d0:af:90:c0:3e:ab:2d:95:54:
                    5e:ee:bf:4e:8a:34:da:d3:f8:77:ad:db:c7:d3:b8:
                    4d:d0:f3:7b:76:18:3d:06:94:74:93:d6:b2:3c:be:
                    b8:ad:94:fe:e9:f1:a8:0f:1b:d5:31:fc:f2:6b:28:
                    b0:a5:12:b6:a4:eb:92:ae:df:73:91:f0:cc:64:a0:
                    a7:2b:6f:3e:34:fd:53:63:34:f8:2a:e3:56:ca:6d:
                    ed:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DB:D7:35:CC:10:AF:C7:92:EF:80:3B:0D:C7:0F:2E:32:6E:0B:4D
            X509v3 Authority Key Identifier:
                keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/A1456A4CBE6811EEBFF35870C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:c9:4d:20:d3:ba:08:eb:18:a3:e1:63:f3:e9:28:bb:1e:b9:
         cb:78:8b:0e:ad:af:22:59:ed:a2:e3:d4:60:42:4b:f3:fb:6d:
         38:e9:ca:7b:a0:c5:53:75:68:65:a3:09:c7:d7:3d:be:48:a1:
         a8:48:63:0c:80:31:72:e9:45:39:11:86:d9:a4:13:5c:6a:40:
         8a:d2:e9:d4:3f:2c:6d:f0:ac:dc:33:05:00:f0:3d:33:b1:0a:
         c7:7b:93:9c:6d:41:3d:76:fa:ae:f5:88:94:e4:79:5e:fc:6a:
         17:74:9d:f3:b7:c7:ee:fc:8f:a1:f1:ea:17:97:5f:7f:02:76:
         1e:46:4a:65:07:0d:8a:dd:63:74:c9:b3:b3:c6:76:df:eb:61:
         3f:69:34:b7:31:99:b9:62:29:42:2d:4d:0c:28:dd:bc:3b:80:
         fa:47:9c:be:ea:a3:d1:b9:9b:4b:3a:6c:9c:fa:b3:5f:72:9c:
         33:43:1b:75:a0:ef:2e:47:56:13:1b:de:b7:a4:cc:30:e5:fd:
         b0:6d:02:49:95:e4:21:b3:72:5b:cb:74:7b:33:7c:03:a7:66:
         33:3c:ec:64:2a:99:e3:b2:50:df:76:30:d5:1b:37:d1:dd:01:
         50:6c:8a:25:ac:f9:67:32:2f:b9:81:0b:09:12:50:7f:e3:3b:
         df:99:f4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:33:48 2026 by rpki-client