Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/CB53532C4A9711F184FA30B7B0833773.roa
File:                     CB53532C4A9711F184FA30B7B0833773.roa (raw, json)
Hash identifier:          uy6KJdAywX4n9D6cDCPQCt+q5gOWffOcvS4zvWYkygY=
Subject key identifier:   14:1E:AA:9C:61:60:BE:D3:8D:AA:B7:13:4F:08:00:02:13:22:F9:1A
Certificate issuer:       /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Certificate serial:       13
Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/CB53532C4A9711F184FA30B7B0833773.roa
Signing time:             Fri 08 May 2026 04:38:44 +0000
ROA not before:           Fri 08 May 2026 04:38:44 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     153844
IP address blocks:        151.123.251.0/24 maxlen: 24
                          151.123.252.0/24 maxlen: 24
                          151.123.253.0/24 maxlen: 24
                          151.123.254.0/24 maxlen: 24
                          151.123.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
                          rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:08:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
        Validity
            Not Before: May  8 04:38:44 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69fd68d4-3802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1d:88:8d:39:30:be:1a:11:19:38:9c:a3:53:
                    37:47:3f:b4:04:29:4e:95:ab:d3:63:cd:b7:8f:eb:
                    01:36:c5:92:72:98:ad:9a:f2:1b:28:46:a1:a8:10:
                    61:0a:8b:9b:5f:0d:bd:ce:b8:49:42:ca:a3:9f:d8:
                    fb:30:44:0f:99:7b:7c:cd:08:27:5f:b2:e6:d9:5b:
                    e7:2b:1a:43:19:76:e8:19:90:2f:cf:00:0c:d9:cd:
                    09:d3:03:b4:9a:70:d6:5d:6a:7a:85:e6:a4:a5:9a:
                    f5:b9:29:89:6c:b2:50:15:ce:fe:ec:98:6c:34:01:
                    e0:9c:8d:46:9c:35:07:54:52:7d:80:d6:37:30:8d:
                    41:bb:45:91:c8:c1:ba:f6:fb:f5:b6:cc:b3:31:94:
                    89:3b:1c:58:34:49:03:73:36:65:5f:5e:07:ba:73:
                    e4:b3:b5:cb:34:32:63:29:7a:20:5f:32:6a:90:47:
                    19:c5:fe:d1:d1:78:70:85:d2:62:79:bf:92:e2:98:
                    9f:bf:4a:09:70:ca:e7:28:a0:ea:d1:d3:29:95:c5:
                    8e:ec:89:30:5d:b7:d8:e7:bf:33:8b:04:0b:4b:5d:
                    36:ca:a8:c3:45:73:f6:91:5a:43:91:fc:43:62:b5:
                    c0:39:30:2b:6a:13:fc:18:5a:a2:5f:8e:b7:ba:f0:
                    bb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1E:AA:9C:61:60:BE:D3:8D:AA:B7:13:4F:08:00:02:13:22:F9:1A
            X509v3 Authority Key Identifier:
                keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/CB53532C4A9711F184FA30B7B0833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.123.251.0-151.123.255.255

    Signature Algorithm: sha256WithRSAEncryption
         61:77:c7:ed:45:06:63:00:d6:f2:93:ee:33:6a:8b:44:42:61:
         2b:4a:0b:b1:85:6b:2f:bb:37:41:60:45:c9:20:a9:da:1b:91:
         14:85:0a:72:7c:fa:10:9a:98:26:c0:04:a5:f2:25:ec:ba:58:
         5b:2a:31:9d:8e:45:e8:00:2d:fa:14:e0:c6:94:08:33:da:d6:
         57:13:a4:79:ba:48:4a:0a:96:d8:a0:0c:80:e5:bc:db:1f:16:
         c6:39:4a:98:a0:a9:d7:ea:ed:ae:1a:56:7f:ab:7d:1e:5f:d7:
         c4:be:f9:a6:30:f6:ab:49:c4:33:c4:de:7e:26:3a:fd:62:49:
         54:6f:52:3a:3e:42:fa:09:37:b3:98:7d:75:14:1b:40:8c:f1:
         73:5d:14:20:75:d2:5e:87:f7:92:e5:86:23:9c:6b:49:b4:8c:
         71:01:63:ce:26:79:bc:b7:69:5b:29:9c:5e:d9:12:76:ff:18:
         eb:03:af:6f:29:29:ab:7e:53:59:7e:34:84:45:f6:24:32:a1:
         cc:a0:e9:df:74:6e:46:96:6b:59:38:7b:54:39:c1:7e:54:1b:
         7a:53:f6:0e:98:bf:22:ed:88:68:55:f5:56:b3:44:c4:83:e7:
         ef:45:8d:19:5b:fa:44:78:20:fe:cc:15:0d:89:28:75:69:26:
         70:bc:52:d5
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QTg0QTExMC8GA1UEBRMoNjM3RDU2QTc1QkI5NUJDNUM5RTZCMDg5RDkzNENCNUUy
RkJEOTYyRDAeFw0yNjA1MDgwNDM4NDRaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZmQ2OGQ0LTM4MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCIHYiNOTC+GhEZOJyjUzdHP7QEKU6Vq9NjzbeP6wE2xZJymK2a8hsoRqGoEGEK
i5tfDb3OuElCyqOf2PswRA+Ze3zNCCdfsubZW+crGkMZdugZkC/PAAzZzQnTA7Sa
cNZdanqF5qSlmvW5KYlsslAVzv7smGw0AeCcjUacNQdUUn2A1jcwjUG7RZHIwbr2
+/W2zLMxlIk7HFg0SQNzNmVfXge6c+Sztcs0MmMpeiBfMmqQRxnF/tHReHCF0mJ5
v5LimJ+/SglwyucooOrR0ymVxY7siTBdt9jnvzOLBAtLXTbKqMNFc/aRWkOR/ENi
tcA5MCtqE/wYWqJfjre68LsNAgMBAAGjggJnMIICYzAdBgNVHQ4EFgQUFB6qnGFg
vtONqrcTTwgAAhMi+RowHwYDVR0jBBgwFoAUY31Wp1u5W8XJ5rCJ2TTLXi+9li0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBODRBLzc3QUM3QkQyMzRG
NzExRjFCQjczNkNBNzdDRUU1MjhFL1kzMVdwMXU1VzhYSjVyQ0oyVFRMWGktOWxp
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvWTMxV3AxdTVXOFhKNXJDSjJUVExYaS05bGkwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTg0QS83N0FDN0JEMjM0RjcxMUYxQkI3MzZDQTc3Q0VFNTI4RS9DQjUzNTMyQzRB
OTcxMUYxODRGQTMwQjdCMDgzMzc3My5yb2EwJgYIKwYBBQUHAQcBAf8EFzAVMBME
AgABMA0wCwMEAJd7+wMDApd4MA0GCSqGSIb3DQEBCwUAA4IBAQBhd8ftRQZjANby
k+4zaotEQmErSguxhWsvuzdBYEXJIKnaG5EUhQpyfPoQmpgmwASl8iXsulhbKjGd
jkXoAC36FODGlAgz2tZXE6R5ukhKCpbYoAyA5bzbHxbGOUqYoKnX6u2uGlZ/q30e
X9fEvvmmMParScQzxN5+Jjr9YklUb1I6PkL6CTezmH11FBtAjPFzXRQgddJeh/eS
5YYjnGtJtIxxAWPOJnm8t2lbKZxe2RJ2/xjrA69vKSmrflNZfjSERfYkMqHMoOnf
dG5GlmtZOHtUOcF+VBt6U/YOmL8i7YhoVfVWs0TEg+fvRY0ZW/pEeCD+zBUNiSh1
aSZwvFLV
-----END CERTIFICATE-----
Generated at Wed May 13 12:42:30 2026 by rpki-client