Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/D80B89B8474011F1AEFA8515C4833773.roa
File:                     D80B89B8474011F1AEFA8515C4833773.roa (raw, json)
Hash identifier:          CHdGOS+C2q+FN7TdzDpOKxOU5Grq3Z9f28F2xS7RBXk=
Subject key identifier:   DD:41:0A:66:08:F4:8D:E4:F4:B0:7D:E6:0D:5A:40:F7:EA:F2:51:D7
Certificate issuer:       /CN=A9153944/serialNumber=29AFD0AC1222E9EFEF8B028D318F8E64F5136026
Certificate serial:       0D
Authority key identifier: 29:AF:D0:AC:12:22:E9:EF:EF:8B:02:8D:31:8F:8E:64:F5:13:60:26
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/D80B89B8474011F1AEFA8515C4833773.roa
Signing time:             Sun 03 May 2026 22:38:45 +0000
ROA not before:           Sun 03 May 2026 22:38:45 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     138590
IP address blocks:        151.123.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl
                          rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153944, serialNumber=29AFD0AC1222E9EFEF8B028D318F8E64F5136026
        Validity
            Not Before: May  3 22:38:45 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69f7ce75-d998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:83:8e:e1:7c:b3:7d:02:25:ed:ee:57:5b:ac:
                    ff:b6:a7:64:3d:f4:19:4b:33:f1:7d:fc:88:6c:84:
                    e2:e4:86:bc:d8:02:7f:1d:3f:4a:3e:c0:a8:4b:93:
                    a6:98:28:2a:77:56:53:69:ed:31:98:5d:d7:93:cf:
                    14:12:53:c3:f5:6a:6c:c1:b8:c3:7d:f2:60:5b:cf:
                    5c:34:ce:bf:cd:cb:05:67:86:c9:bc:21:37:37:c5:
                    7d:b9:c4:57:5f:75:5a:15:bb:68:cc:8a:1a:15:a4:
                    9d:8a:2f:ef:48:10:8f:29:38:cf:b3:ae:47:42:5d:
                    03:00:c5:0d:44:ca:cc:8a:38:70:00:68:dc:08:54:
                    f6:fd:b1:5b:d9:dc:62:1f:94:6d:71:ae:61:37:d8:
                    22:26:28:82:99:b0:8b:33:a2:5d:21:4c:3c:20:49:
                    ca:9d:e4:1b:72:00:c6:c3:f8:60:e5:98:19:bc:ba:
                    c9:31:78:79:9b:23:e7:de:70:63:86:89:52:d5:23:
                    dd:f9:a7:b8:77:a0:63:05:43:3f:d7:6e:8b:32:20:
                    4b:8c:08:a0:51:36:b3:a9:4c:f3:00:7e:7c:dd:de:
                    39:26:e8:23:44:5e:57:e1:2d:46:73:7e:8e:de:af:
                    1b:78:cf:e0:73:4a:59:d9:5c:b2:a3:14:bd:0e:0e:
                    9f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:41:0A:66:08:F4:8D:E4:F4:B0:7D:E6:0D:5A:40:F7:EA:F2:51:D7
            X509v3 Authority Key Identifier:
                keyid:29:AF:D0:AC:12:22:E9:EF:EF:8B:02:8D:31:8F:8E:64:F5:13:60:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/D80B89B8474011F1AEFA8515C4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.123.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:bb:f6:e8:6e:69:57:80:78:47:36:c7:b2:a4:b9:31:78:d4:
         af:ac:7c:82:75:86:d8:7a:a6:d8:13:17:3e:44:db:2e:44:f8:
         ad:99:33:a7:5a:60:ca:be:49:70:c3:72:19:4e:92:7e:dc:a9:
         16:45:90:34:24:ae:4d:97:40:f6:6d:7f:ea:09:b1:f0:67:76:
         32:b4:83:9a:cd:19:6d:a1:d0:27:21:2d:f0:11:29:04:22:ee:
         7e:7d:07:93:03:b5:41:01:c5:8a:83:ca:91:a0:81:e7:0a:ae:
         18:15:18:12:4e:43:f9:57:a1:c6:cc:49:60:cd:06:7d:d8:65:
         be:32:a2:b1:4e:82:1a:9f:85:26:10:7c:f2:f6:0c:bd:a2:c0:
         2e:df:a3:f8:9d:7f:55:91:fc:c4:df:27:6e:53:30:9f:71:73:
         88:0e:a8:86:01:5b:17:b8:8b:2b:f4:c7:05:1d:a2:6b:d8:80:
         26:bf:0a:6c:03:a5:63:21:c6:8f:51:37:11:3c:5a:15:88:15:
         80:9d:7b:01:77:aa:a1:69:9f:10:da:4a:9b:0e:a0:e9:31:3c:
         36:94:a5:f8:21:1b:a6:11:3d:b5:51:23:13:ae:35:b5:cb:2e:
         98:e6:c4:df:2c:dd:80:d2:a7:08:b6:97:f0:5a:85:4e:fc:d8:
         2c:ae:65:3e
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
Mzk0NDExMC8GA1UEBRMoMjlBRkQwQUMxMjIyRTlFRkVGOEIwMjhEMzE4RjhFNjRG
NTEzNjAyNjAeFw0yNjA1MDMyMjM4NDVaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZjdjZTc1LWQ5OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDyg47hfLN9AiXt7ldbrP+2p2Q99BlLM/F9/IhshOLkhrzYAn8dP0o+wKhLk6aY
KCp3VlNp7TGYXdeTzxQSU8P1amzBuMN98mBbz1w0zr/NywVnhsm8ITc3xX25xFdf
dVoVu2jMihoVpJ2KL+9IEI8pOM+zrkdCXQMAxQ1EysyKOHAAaNwIVPb9sVvZ3GIf
lG1xrmE32CImKIKZsIszol0hTDwgScqd5BtyAMbD+GDlmBm8uskxeHmbI+fecGOG
iVLVI935p7h3oGMFQz/XbosyIEuMCKBRNrOpTPMAfnzd3jkm6CNEXlfhLUZzfo7e
rxt4z+BzSlnZXLKjFL0ODp/VAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU3UEKZgj0
jeT0sH3mDVpA9+ryUdcwHwYDVR0jBBgwFoAUKa/QrBIi6e/viwKNMY+OZPUTYCYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOTQ0L0RDNzcwMTBBMzU2
OTExRjFCRjdENkNBNzdDRUU1MjhFL0thX1FyQklpNmVfdml3S05NWS1PWlBVVFlD
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvS2FfUXJCSWk2ZV92aXdLTk1ZLU9aUFVUWUNZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Mzk0NC9EQzc3MDEwQTM1NjkxMUYxQkY3RDZDQTc3Q0VFNTI4RS9EODBCODlCODQ3
NDAxMUYxQUVGQTg1MTVDNDgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACXe5AwDQYJKoZIhvcNAQELBQADggEBAFi79uhuaVeAeEc2x7KkuTF4
1K+sfIJ1hth6ptgTFz5E2y5E+K2ZM6daYMq+SXDDchlOkn7cqRZFkDQkrk2XQPZt
f+oJsfBndjK0g5rNGW2h0CchLfARKQQi7n59B5MDtUEBxYqDypGggecKrhgVGBJO
Q/lXocbMSWDNBn3YZb4yorFOghqfhSYQfPL2DL2iwC7fo/idf1WR/MTfJ25TMJ9x
c4gOqIYBWxe4iyv0xwUdomvYgCa/CmwDpWMhxo9RNxE8WhWIFYCdewF3qqFpnxDa
SpsOoOkxPDaUpfghG6YRPbVRIxOuNbXLLpjmxN8s3YDSpwi2l/BahU782CyuZT4=
-----END CERTIFICATE-----
Generated at Wed May 13 12:05:25 2026 by rpki-client