Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/889930E805E011F18AD458A9133D8C67.roa
File:                     889930E805E011F18AD458A9133D8C67.roa (raw, json)
Hash identifier:          coEpUspblzPFvORawLzP4BPk3NGo6TsW79ltjfm6ee4=
Subject key identifier:   1D:EF:21:AD:58:93:F5:AD:A4:B4:0D:D7:24:CB:0C:5B:85:A8:98:36
Certificate issuer:       /CN=A9152E70/serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3
Certificate serial:       8C
Authority key identifier: 07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/889930E805E011F18AD458A9133D8C67.roa
Signing time:             Mon 04 May 2026 18:12:55 +0000
ROA not before:           Mon 04 May 2026 18:12:55 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     136258
IP address blocks:        167.150.100.0/24 maxlen: 24
                          167.150.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl
                          rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152E70, serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3
        Validity
            Not Before: May  4 18:12:55 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69f8e1a7-1baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:e9:8e:93:be:82:37:b4:a1:79:7b:ff:e8:
                    97:b2:55:36:e7:bd:a1:02:49:0c:a2:2b:77:eb:9d:
                    8f:31:c7:20:24:58:ef:73:fc:fe:b1:2b:c5:35:0b:
                    b0:5a:a7:40:c6:d6:0c:a9:df:27:4a:2e:3c:d5:8d:
                    fd:29:1f:c1:11:97:12:88:ea:09:be:dc:68:81:2c:
                    8b:41:36:c2:14:c7:72:52:1c:2b:4d:a0:88:47:04:
                    a5:d1:3e:f7:be:8a:37:ab:18:b5:90:25:64:e9:13:
                    75:12:34:1c:31:7c:57:05:b4:df:04:a2:8f:24:56:
                    2f:94:d6:83:0b:1e:51:08:32:6d:db:cc:e0:2a:17:
                    48:8e:39:9f:ae:1f:4e:f8:5d:bd:ad:61:5e:e1:ad:
                    15:68:6d:5c:3b:02:c2:f1:a8:2c:f1:87:0c:3b:23:
                    17:73:26:c7:4f:6f:44:db:f3:2f:fd:37:8b:64:e1:
                    4a:9c:2f:f2:76:15:8b:0d:6c:2e:75:de:a9:85:de:
                    52:12:35:2a:19:93:c9:bf:3c:81:dd:b6:ae:56:9a:
                    fe:bc:ed:00:65:82:01:76:93:e4:bd:35:0c:11:df:
                    3f:bc:c5:d2:f7:30:7e:49:24:7f:1d:25:72:47:df:
                    13:2b:f1:30:21:07:d6:f4:84:eb:da:c9:11:43:af:
                    37:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EF:21:AD:58:93:F5:AD:A4:B4:0D:D7:24:CB:0C:5B:85:A8:98:36
            X509v3 Authority Key Identifier:
                keyid:07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/889930E805E011F18AD458A9133D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.150.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:d7:32:78:ad:88:c2:90:0a:67:11:93:8c:e8:a5:0d:58:a5:
         13:9f:97:16:12:1c:dc:a1:32:8c:b1:68:2a:d6:73:34:64:1a:
         fd:43:e1:7b:9d:6a:1f:73:c3:75:d3:b0:a2:79:04:a4:13:92:
         e0:08:0a:f7:fa:8b:67:fe:f0:e5:c3:69:f5:59:44:e4:14:46:
         18:eb:02:46:5c:be:6e:6f:00:86:2d:e0:fb:45:99:32:00:4f:
         a8:62:c2:6b:c1:d1:59:cc:eb:70:74:d8:75:3a:05:29:ba:32:
         d4:f0:5c:67:79:ff:ac:52:1a:ed:f7:22:bc:9c:06:58:63:36:
         2a:c5:6b:9f:d8:54:d0:23:7e:b3:7d:f3:c1:87:ca:9b:6b:32:
         47:88:15:c9:02:c4:2c:66:f1:89:87:86:3d:c6:6f:98:89:00:
         c3:86:76:9a:a4:2d:d3:c4:aa:82:68:30:4d:d3:45:3d:cb:42:
         8c:7e:88:53:b6:e4:f2:42:96:3d:e7:c9:0e:47:08:04:15:45:
         23:58:46:4f:19:9a:ef:da:e1:6b:fd:a6:b8:9f:58:09:3c:07:
         7c:50:d9:05:f2:7e:ad:7d:01:ce:b9:8f:84:3c:02:0a:1e:f6:
         00:31:16:a0:6b:f6:4d:e9:bb:50:47:5c:5d:0d:ca:b1:ff:ae:
         30:9e:eb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:12:02 2026 by rpki-client