Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/590DDF2EE64E11F085BE5D6A396F56BC.roa
File:                     590DDF2EE64E11F085BE5D6A396F56BC.roa (raw, json)
Hash identifier:          qSu9m0yL32Z5g5QuOGqXr9RA0It4qG1c8qPpPNVwDLM=
Subject key identifier:   59:15:69:28:57:A5:8B:A6:08:01:7C:E0:12:3B:3A:AA:1A:97:DA:06
Certificate issuer:       /CN=A916B30C/serialNumber=BF08E8E0B2A676DCAEC49D519BFEC76546C2167E
Certificate serial:       01AA
Authority key identifier: BF:08:E8:E0:B2:A6:76:DC:AE:C4:9D:51:9B:FE:C7:65:46:C2:16:7E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/590DDF2EE64E11F085BE5D6A396F56BC.roa
Signing time:             Mon 23 Mar 2026 03:39:01 +0000
ROA not before:           Mon 23 Mar 2026 03:39:01 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     154305
IP address blocks:        157.10.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.crl
                          rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B30C, serialNumber=BF08E8E0B2A676DCAEC49D519BFEC76546C2167E
        Validity
            Not Before: Mar 23 03:39:01 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69c0b5d5-4ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:21:42:dd:b1:62:ef:6e:e7:5d:dc:21:d8:ec:
                    e6:f0:65:3e:8d:35:ee:02:19:a9:51:ff:0c:ca:71:
                    70:ed:14:64:89:5b:ac:09:b0:d5:a5:fb:48:99:e5:
                    03:7b:2c:9f:8d:1e:fd:45:03:7a:f0:40:ef:3f:e7:
                    88:70:27:0f:df:d1:64:b1:1f:97:55:cd:e2:ac:6a:
                    b3:09:50:af:54:5b:d6:9b:f6:b9:93:dd:d4:da:8f:
                    21:53:6d:88:d2:7c:61:7c:95:d1:d9:8a:0b:0e:0a:
                    7c:f1:10:e8:19:0b:c6:ce:a1:1e:ad:f1:4e:90:66:
                    ad:92:63:b8:b4:49:da:e6:58:33:01:90:16:de:54:
                    9e:82:cb:00:96:fa:d3:94:98:61:f5:8a:9d:b2:e6:
                    cd:c4:bf:b6:e9:7d:2c:17:c4:84:b6:3c:c2:b7:ea:
                    d0:b1:87:65:0b:10:23:45:30:85:03:5e:5c:a1:c7:
                    80:33:59:c5:51:d6:20:f5:a9:b4:0c:5e:07:6a:35:
                    42:ef:40:8c:1b:7c:e6:52:e2:95:be:5e:70:c0:0f:
                    94:d1:53:e3:9c:f6:3f:ec:a4:52:e9:27:f0:9e:29:
                    3e:c3:46:97:6c:c5:68:af:41:8f:4f:8a:2f:3f:3d:
                    d4:f5:c8:0e:f4:58:27:c1:e2:e5:e3:bc:b5:37:67:
                    2b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:15:69:28:57:A5:8B:A6:08:01:7C:E0:12:3B:3A:AA:1A:97:DA:06
            X509v3 Authority Key Identifier:
                keyid:BF:08:E8:E0:B2:A6:76:DC:AE:C4:9D:51:9B:FE:C7:65:46:C2:16:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/590DDF2EE64E11F085BE5D6A396F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:c3:01:aa:77:c9:d4:c0:09:06:a1:65:51:6e:a8:54:60:a4:
         34:aa:72:17:f4:da:d8:d9:fa:5f:58:ba:b3:de:95:b6:ea:a3:
         86:42:22:6c:5c:28:f2:d8:c5:51:c6:2f:30:65:51:2b:83:e2:
         08:77:9d:1e:27:35:48:75:3c:bd:a8:66:aa:a3:3d:4c:8b:c3:
         2e:65:b7:23:b4:da:9d:f2:f1:52:34:4a:6d:88:c6:16:41:22:
         46:bc:5f:99:fe:02:29:52:a9:c9:68:96:05:0e:fa:df:b9:20:
         8e:40:19:fd:10:37:97:9d:13:48:fd:20:5e:e5:55:e2:dd:91:
         f6:f8:a4:c6:05:01:99:2b:18:d2:fe:5c:72:c6:45:25:96:1d:
         28:eb:dd:a3:63:aa:43:3f:2f:ff:ea:17:48:a1:cf:c3:fb:7b:
         a2:43:5e:bd:cc:78:c6:c6:f7:23:fe:17:99:34:a0:65:e9:79:
         df:d3:5e:29:64:dd:a8:34:22:47:8d:eb:29:66:7e:d6:71:26:
         c4:93:49:a4:e9:a5:f6:ae:f4:f4:6c:ba:6c:26:c4:7a:5e:d7:
         b9:3f:05:65:d6:f5:af:df:eb:8c:c6:90:92:37:dd:e6:fe:94:
         34:ee:e0:da:d4:f1:c9:5d:28:f1:8f:56:22:59:6d:0f:5d:0d:
         04:80:e0:a8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIzMEMxMTAvBgNVBAUTKEJGMDhFOEUwQjJBNjc2RENBRUM0OUQ1MTlCRkVDNzY1
NDZDMjE2N0UwHhcNMjYwMzIzMDMzOTAxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWMwYjVkNS00ZWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvyFC3bFi727nXdwh2Ozm8GU+jTXuAhmpUf8MynFw7RRkiVusCbDVpftImeUD
eyyfjR79RQN68EDvP+eIcCcP39FksR+XVc3irGqzCVCvVFvWm/a5k93U2o8hU22I
0nxhfJXR2YoLDgp88RDoGQvGzqEerfFOkGatkmO4tEna5lgzAZAW3lSegssAlvrT
lJhh9YqdsubNxL+26X0sF8SEtjzCt+rQsYdlCxAjRTCFA15coceAM1nFUdYg9am0
DF4HajVC70CMG3zmUuKVvl5wwA+U0VPjnPY/7KRS6Sfwnik+w0aXbMVor0GPT4ov
Pz3U9cgO9FgnweLl47y1N2crPwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFkVaShX
pYumCAF84BI7Oqoal9oGMB8GA1UdIwQYMBaAFL8I6OCypnbcrsSdUZv+x2VGwhZ+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjMwQy85MTVDQkEyNkIw
NUUxMUVFOTdDNzhCNzVDNEY5QUUwMi92d2pvNExLbWR0eXV4SjFSbV83SFpVYkNG
bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3Z3am80TEttZHR5dXhKMVJtXzdIWlViQ0ZuNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkIzMEMvOTE1Q0JBMjZCMDVFMTFFRTk3Qzc4Qjc1QzRGOUFFMDIvNTkwRERGMkVF
NjRFMTFGMDg1QkU1RDZBMzk2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAnQqnMA0GCSqGSIb3DQEBCwUAA4IBAQC4wwGqd8nUwAkGoWVRbqhU
YKQ0qnIX9NrY2fpfWLqz3pW26qOGQiJsXCjy2MVRxi8wZVErg+IId50eJzVIdTy9
qGaqoz1Mi8MuZbcjtNqd8vFSNEptiMYWQSJGvF+Z/gIpUqnJaJYFDvrfuSCOQBn9
EDeXnRNI/SBe5VXi3ZH2+KTGBQGZKxjS/lxyxkUllh0o692jY6pDPy//6hdIoc/D
+3uiQ169zHjGxvcj/heZNKBl6Xnf014pZN2oNCJHjespZn7WcSbEk0mk6aX2rvT0
bLpsJsR6Xte5PwVl1vWv3+uMxpCSN93m/pQ07uDa1PHJXSjxj1YiWW0PXQ0EgOCo
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:04:01 2026 by rpki-client