Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/F0674762B6B611EE8EF4443AC4F9AE02.roa
File:                     F0674762B6B611EE8EF4443AC4F9AE02.roa (raw, json)
Hash identifier:          JywGGgtSRiccbe4SHID4l5TKHjN2URlgdMd3UPD4Hlo=
Subject key identifier:   83:0A:6A:35:AD:D6:74:2A:48:9F:AD:35:AB:E7:50:9C:2D:B6:ED:28
Certificate issuer:       /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
Certificate serial:       01BD
Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/F0674762B6B611EE8EF4443AC4F9AE02.roa
Signing time:             Tue 05 May 2026 04:35:40 +0000
ROA not before:           Tue 05 May 2026 04:35:40 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     147006
IP address blocks:        157.10.242.0/23 maxlen: 23
                          157.10.242.0/24 maxlen: 24
                          157.10.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl
                          rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918497E, serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
        Validity
            Not Before: May  5 04:35:40 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69f9739c-e622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1a:32:51:41:31:33:82:72:b7:71:03:b2:7a:
                    35:09:19:ac:18:cf:04:3a:2d:bd:a8:9c:9d:af:b9:
                    9f:7e:5b:4f:e0:4c:54:ab:e2:16:d0:45:28:ee:62:
                    39:e2:81:36:ae:84:e5:56:7c:a1:ce:f6:fe:bf:7f:
                    29:5b:12:c9:2a:cc:54:13:24:bf:9b:d7:ad:de:f2:
                    a6:94:f6:22:0d:2c:90:8f:70:77:da:25:8a:a3:73:
                    62:81:bb:f5:94:17:ba:33:0a:bd:4c:95:14:db:42:
                    39:a8:dd:56:80:16:c1:bf:6e:12:4c:19:31:b8:14:
                    af:c2:67:c9:41:4b:02:e3:3e:64:9c:f6:d0:2a:9f:
                    e4:55:b4:3e:27:12:6f:09:17:50:89:b9:90:86:ed:
                    09:2c:4e:bf:91:e8:35:d0:38:40:5b:fb:5f:ef:59:
                    2d:ae:ff:52:28:a7:ea:46:74:3f:8f:d8:9e:e1:e6:
                    09:3a:14:66:6d:ba:ea:c0:5c:6d:af:1d:2e:7a:12:
                    43:9a:e2:ef:06:6e:8c:59:80:a9:9f:0f:dc:6e:19:
                    c8:6c:35:e9:cb:ad:c1:9c:92:98:a4:9e:0d:d7:15:
                    d8:ea:c6:de:b3:5b:09:d6:a8:04:a1:31:55:06:4f:
                    e2:7e:2f:6f:75:b1:a1:1b:64:23:7e:6e:4d:c5:54:
                    01:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0A:6A:35:AD:D6:74:2A:48:9F:AD:35:AB:E7:50:9C:2D:B6:ED:28
            X509v3 Authority Key Identifier:
                keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/F0674762B6B611EE8EF4443AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:a1:c2:bc:94:a4:18:db:ea:d5:86:56:dc:4a:20:3e:d5:42:
         e4:f8:3f:47:d6:97:91:8b:89:85:82:bb:60:a0:1b:80:48:62:
         1c:d3:46:f7:36:e9:f3:6e:9e:b9:97:c7:fd:ec:9d:4b:d2:c8:
         2a:be:b8:98:38:d7:4f:76:3d:ef:10:61:c5:f3:a2:1d:78:d2:
         61:57:c6:68:b8:ca:7f:12:af:20:7b:95:37:84:94:05:8f:f7:
         6d:83:e9:19:c2:e9:b6:a8:b8:56:60:5f:41:57:9a:4f:3d:43:
         71:92:c7:9e:d9:c1:d8:85:b4:82:e0:be:59:06:5c:83:8e:2b:
         8e:56:94:5c:01:e7:32:12:aa:d2:7a:32:1d:88:b8:a4:eb:84:
         97:90:36:f2:36:6b:f8:81:c1:cc:11:38:01:62:6d:de:72:89:
         85:62:55:ee:2a:6e:89:67:84:74:37:97:57:3b:48:0c:e0:cb:
         c7:fe:d4:1d:e1:40:58:13:13:2c:f2:a3:3c:73:f9:14:4e:2d:
         55:58:79:19:0b:bc:ab:72:4c:5d:fd:23:c6:49:ca:4e:94:63:
         f0:ac:c9:17:80:6f:21:70:63:fa:7e:0f:74:1c:fc:3e:69:b9:
         5e:31:76:17:c8:f5:74:29:da:8b:79:8b:cd:5f:83:61:38:ab:
         de:27:ca:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:50:44 2026 by rpki-client