Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/F149E6BE45B611EFA10B0632C4F9AE02.roa
File:                     F149E6BE45B611EFA10B0632C4F9AE02.roa (raw, json)
Hash identifier:          bqsTbppKfYtZ0JdNe12QWrEbSqhH/2XezTCIMzAba6g=
Subject key identifier:   FB:5B:89:81:C8:77:8C:F3:D0:C1:16:59:D6:53:DA:93:CE:BC:2D:AC
Certificate issuer:       /CN=A9145B5E/serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6
Certificate serial:       0138
Authority key identifier: 17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/F149E6BE45B611EFA10B0632C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:45:32 +0000
ROA not before:           Tue 13 Jan 2026 04:23:48 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152317
IP address blocks:        157.10.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl
                          rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145B5E, serialNumber=1727ED151F4089210EC3E368A5A69EE39484E3E6
        Validity
            Not Before: Jan 13 04:23:48 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a5a28c-e4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:89:43:c0:e7:e8:36:2f:51:9a:cc:81:fe:d7:
                    86:bd:a0:5b:78:0c:eb:df:b1:d3:ba:10:ca:ff:3e:
                    ba:5e:db:42:61:70:9d:1f:36:95:f7:d9:65:f7:e2:
                    bc:e1:70:41:ec:99:33:c2:25:bb:7a:ae:07:48:80:
                    06:6e:68:1b:8f:5e:59:83:7a:34:d7:a4:87:a2:33:
                    02:bb:61:e6:cd:15:bd:d4:b4:6c:7b:58:36:8c:da:
                    24:5e:a5:51:bb:e2:c5:9e:ff:37:bc:17:cd:8a:16:
                    a8:be:02:af:06:a2:ff:08:72:0e:6b:58:25:19:2b:
                    aa:f2:38:9e:5a:f8:22:38:88:fb:aa:d4:d6:17:a0:
                    72:15:e1:b3:e5:f6:88:9d:0c:ee:2f:c0:b8:3c:8b:
                    27:0b:72:22:d3:5a:c8:d4:70:e7:5c:0d:87:fc:40:
                    fa:48:04:b4:d5:37:b0:dd:56:6a:b2:4c:f6:3f:09:
                    02:a8:41:f0:dc:5a:9f:23:79:e4:86:2b:18:c1:28:
                    69:97:0d:f1:ea:12:38:41:6c:bd:d0:b2:83:f0:a9:
                    85:ef:c0:f7:41:43:40:1d:05:1a:d6:1d:ab:f8:52:
                    f3:2c:0e:68:81:a4:6e:6e:50:b9:70:23:6c:b3:11:
                    62:75:0e:0f:91:45:6b:40:38:f0:5e:17:3d:80:e5:
                    a1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5B:89:81:C8:77:8C:F3:D0:C1:16:59:D6:53:DA:93:CE:BC:2D:AC
            X509v3 Authority Key Identifier:
                keyid:17:27:ED:15:1F:40:89:21:0E:C3:E3:68:A5:A6:9E:E3:94:84:E3:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/FyftFR9AiSEOw-Nopaae45SE4-Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FyftFR9AiSEOw-Nopaae45SE4-Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/7DD7BBBC45B511EFBA4A621EC4F9AE02/F149E6BE45B611EFA10B0632C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:e8:9b:b8:17:dc:b2:92:41:49:e2:19:3d:ef:f5:4e:04:50:
         fc:80:fa:56:1c:9d:a7:77:21:52:8b:93:ec:8d:cc:8a:7e:19:
         d6:86:1a:7e:7c:a6:fc:cc:60:eb:b7:10:29:95:41:5e:1c:99:
         4e:11:63:a7:52:f5:a8:b3:e9:e3:8f:5c:21:20:48:e0:13:00:
         04:d0:0b:09:8c:2b:d5:bf:bc:ba:92:ea:61:35:08:8d:25:8d:
         6c:69:44:4c:00:bd:f9:a3:77:bf:04:19:b6:1b:62:20:3f:34:
         72:46:00:24:41:1c:c7:29:c4:b8:65:4b:21:f2:a3:bc:ef:df:
         55:eb:30:50:ef:ee:58:a5:46:94:1d:7a:eb:f0:39:57:ca:71:
         79:1c:01:e9:d2:e0:ea:cb:0d:09:0e:43:c5:d5:fe:b9:9d:bd:
         b1:1f:5e:b3:fc:e3:59:66:91:fd:09:15:85:10:3e:9e:e7:24:
         7b:eb:55:01:6e:66:ba:13:f8:f3:1f:d4:a5:49:8c:4b:c8:7e:
         96:3e:d3:67:cf:b2:da:8f:dc:cb:89:92:58:51:cc:ce:95:26:
         7a:4f:19:0b:ea:39:61:23:3a:9b:d9:f1:a8:67:6f:65:f5:76:
         0a:87:00:ed:b4:52:72:8a:a9:72:06:49:e9:7a:30:ad:cc:75:
         c6:42:63:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:23:57 2026 by rpki-client