Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/0F778EDCEBB411EE9D86095BC4F9AE02.roa
File:                     0F778EDCEBB411EE9D86095BC4F9AE02.roa (raw, json)
Hash identifier:          h/OwSIHosa0hSGtUAMFoRQJH1IunWAz+X50+i3Y6izk=
Subject key identifier:   56:C1:7B:D5:CE:B4:00:7F:62:31:FF:E8:85:25:B4:7E:DB:F8:E2:AB
Certificate issuer:       /CN=A9153490/serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5
Certificate serial:       018D
Authority key identifier: 47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/0F778EDCEBB411EE9D86095BC4F9AE02.roa
Signing time:             Tue 03 Mar 2026 04:40:15 +0000
ROA not before:           Tue 03 Mar 2026 04:40:15 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     152470
IP address blocks:        157.15.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl
                          rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397 (0x18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153490, serialNumber=47F50C958BF9CF545C601ADEB04F8A05E101D9A5
        Validity
            Not Before: Mar  3 04:40:15 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a6662f-939f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bc:ae:6f:a1:84:87:4f:fd:1f:5c:98:58:f1:
                    b0:14:fb:e7:86:b6:ae:d1:0b:c3:ed:4d:2b:1e:47:
                    47:d3:96:30:39:96:c8:e9:ff:eb:ca:69:3c:60:e0:
                    ff:2d:90:c4:19:d8:2c:54:87:f9:09:50:e6:05:c5:
                    ce:b8:5a:d0:25:85:40:15:5b:7d:b5:cc:35:95:5a:
                    36:46:d7:3f:5e:c7:00:50:cb:f0:8a:2f:71:0e:b6:
                    ca:d4:53:87:f6:d4:11:32:c6:9a:b9:ea:ac:75:06:
                    d6:43:b6:65:35:74:57:d1:ba:8a:c5:69:a8:18:ef:
                    59:3f:39:a1:77:d5:32:0b:c1:65:c2:56:64:02:99:
                    40:cc:8d:cc:4b:dc:70:d0:82:c2:75:c9:72:77:4a:
                    b9:aa:b2:52:bd:5c:d1:d7:06:0a:8a:a3:c8:24:79:
                    0d:a0:0a:24:70:f2:53:3d:a0:4e:bf:c8:16:f5:da:
                    9b:7c:03:7a:89:67:85:1d:c0:e8:0b:7a:8d:c3:bb:
                    28:b5:44:7d:9d:01:b5:74:b4:ef:42:40:cd:f1:be:
                    45:a7:62:44:fe:aa:58:ea:cb:56:32:ff:90:2e:cf:
                    87:a8:61:88:02:4d:2b:86:10:b5:0a:38:31:e7:24:
                    72:b9:11:e0:57:11:ae:57:e8:ef:20:fb:33:4a:25:
                    af:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C1:7B:D5:CE:B4:00:7F:62:31:FF:E8:85:25:B4:7E:DB:F8:E2:AB
            X509v3 Authority Key Identifier:
                keyid:47:F5:0C:95:8B:F9:CF:54:5C:60:1A:DE:B0:4F:8A:05:E1:01:D9:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/R_UMlYv5z1RcYBresE-KBeEB2aU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R_UMlYv5z1RcYBresE-KBeEB2aU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/8F52488ED05411EEAF799F16C4F9AE02/0F778EDCEBB411EE9D86095BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:ae:5a:22:b4:61:49:69:ad:21:3e:ee:bc:74:0d:7c:0b:08:
         aa:40:1e:fc:b8:57:19:11:47:b2:12:54:4f:7d:a6:0a:91:a6:
         c7:9f:97:25:8a:81:2e:27:3c:f9:19:d5:a1:79:b6:4f:93:0c:
         3f:b7:22:3d:8c:a5:58:ca:7b:26:b8:5a:31:7d:12:25:f0:94:
         79:e3:2a:df:a7:07:3f:d5:76:79:c1:ed:02:86:a1:b9:6d:30:
         4e:df:b5:c0:95:02:b8:cf:4f:07:ee:fd:b6:b7:d2:84:fc:aa:
         37:53:f0:da:b5:e3:58:32:42:b9:53:cf:a2:49:4c:96:97:fd:
         e9:09:b8:85:43:ba:a9:e8:30:81:f0:4f:70:46:ff:57:32:90:
         57:6e:12:ae:79:3c:0e:44:4e:bd:b1:eb:71:c4:b9:e0:07:c2:
         aa:5b:01:54:bb:e1:e3:03:38:49:b3:8f:dd:a3:0c:fe:ac:fd:
         8e:7f:68:3f:be:9b:03:5a:2b:80:b4:0a:13:bc:89:75:e3:34:
         0d:c6:62:ec:8f:56:fb:40:6d:de:7e:15:04:34:6e:6d:11:47:
         b9:65:ae:9f:46:a2:16:6c:0a:fd:49:39:2a:a0:ea:1b:e7:9e:
         a6:2e:21:ca:cf:b5:f6:c0:73:f2:f5:d4:b6:18:84:1b:c4:c1:
         86:54:26:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:09:17 2026 by rpki-client