Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/BA6555344DEE11F0B209371DC4F9AE02.roa
File:                     BA6555344DEE11F0B209371DC4F9AE02.roa (raw, json)
Hash identifier:          3ACPZlFXJEBS0DfhOh+fI+mz2WtH3cLyLDO6b8JhniE=
Subject key identifier:   19:8C:F2:0B:FA:99:14:62:15:70:A8:7D:40:DB:A8:4F:2E:0B:39:87
Certificate issuer:       /CN=A9185B6D/serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86
Certificate serial:       01B7
Authority key identifier: 2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/BA6555344DEE11F0B209371DC4F9AE02.roa
Signing time:             Thu 23 Apr 2026 04:38:22 +0000
ROA not before:           Thu 23 Apr 2026 04:38:22 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     152459
IP address blocks:        157.15.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl
                          rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:26:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185B6D, serialNumber=2DF9A1E375A17B8EA56027B45A8BD66F96747D86
        Validity
            Not Before: Apr 23 04:38:22 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e9a23e-a47f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:7a:99:67:5f:98:c8:89:9b:25:87:cc:ec:
                    29:52:9b:46:e1:04:2f:77:98:38:10:c8:02:96:1b:
                    de:1c:6b:10:47:3d:18:a0:db:35:49:b9:4d:e2:49:
                    cb:9c:81:d7:2d:8d:9f:b7:5d:2b:71:e5:4b:61:86:
                    f8:68:e5:cc:34:ba:9c:3c:ed:36:af:42:52:ad:43:
                    01:da:15:ab:1d:af:c2:15:6b:7b:3a:5a:f6:d9:f9:
                    9a:5e:c0:f9:cb:4f:19:3c:a8:13:59:e1:8f:0c:4e:
                    75:9a:23:1f:fa:2d:7b:3f:d3:a2:21:a7:fc:dc:7e:
                    b8:06:f1:c8:e7:1e:9e:33:5e:bd:2d:2e:98:d6:3b:
                    8f:67:ea:15:68:c8:ad:99:79:3a:39:3c:e5:ba:b0:
                    ca:87:f0:33:45:40:8e:a2:53:65:71:68:d4:28:a1:
                    e6:43:67:2b:80:bc:ae:1d:b0:a7:ab:6d:ef:6e:34:
                    c5:11:7a:28:80:bd:ac:8f:b4:64:91:97:99:21:bb:
                    f5:78:19:1a:4b:57:92:8a:95:be:66:bd:56:ce:8c:
                    9a:4f:c6:c0:c8:f1:5d:81:2c:3e:5f:29:77:a9:91:
                    84:4e:69:af:0f:15:87:4a:30:c7:70:61:cc:66:d5:
                    41:88:d0:86:e0:ba:b2:96:51:ef:b1:76:09:2a:19:
                    e3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8C:F2:0B:FA:99:14:62:15:70:A8:7D:40:DB:A8:4F:2E:0B:39:87
            X509v3 Authority Key Identifier:
                keyid:2D:F9:A1:E3:75:A1:7B:8E:A5:60:27:B4:5A:8B:D6:6F:96:74:7D:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/Lfmh43Whe46lYCe0WovWb5Z0fYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Lfmh43Whe46lYCe0WovWb5Z0fYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B6D/181B8220E78E11EE9831EB7EC4F9AE02/BA6555344DEE11F0B209371DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:cb:f6:5b:8f:42:f0:a3:30:d0:4e:59:57:78:ab:71:c4:9d:
         b8:d8:99:ff:05:a5:52:bd:26:c3:aa:54:ca:96:8d:64:ea:0f:
         72:42:c0:4e:c0:7b:78:7b:e6:c6:46:03:7f:51:36:9b:1c:5f:
         ec:33:c1:e5:c9:94:75:41:73:90:ec:1a:fe:bb:7e:42:05:02:
         b3:a6:2e:6e:c9:b4:98:22:c3:44:6b:fe:3e:83:f9:48:0a:2f:
         5c:d3:77:93:5b:3a:5a:d8:4d:fc:98:50:1b:c5:32:d9:e1:7e:
         3f:57:94:3e:88:2a:3d:bc:83:b6:56:8a:29:f1:6a:96:2f:c9:
         e9:c1:52:f1:52:86:7e:35:96:ed:87:ad:ff:25:89:2f:5e:fa:
         f6:c0:d2:44:24:4f:21:51:bc:9d:6a:3b:4b:e8:5a:44:29:03:
         64:04:96:a0:22:d9:b8:c8:e5:bc:67:43:09:cb:6d:bb:5b:bb:
         b8:49:7e:a9:d6:77:66:e0:57:4d:07:9f:1a:af:91:da:3f:3d:
         a0:b7:82:de:64:04:f3:2b:22:b9:83:9b:21:91:ed:51:8b:58:
         55:62:60:33:f1:4c:f6:65:b4:c2:af:ce:47:a1:af:c3:5b:1e:
         39:16:1a:83:5c:24:b9:cc:a0:d1:8e:45:3b:0b:21:90:08:05:
         db:88:75:54
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVCNkQxMTAvBgNVBAUTKDJERjlBMUUzNzVBMTdCOEVBNTYwMjdCNDVBOEJENjZG
OTY3NDdEODYwHhcNMjYwNDIzMDQzODIyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWU5YTIzZS1hNDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvDp6mWdfmMiJmyWHzOwpUptG4QQvd5g4EMgClhveHGsQRz0YoNs1SblN4knL
nIHXLY2ft10rceVLYYb4aOXMNLqcPO02r0JSrUMB2hWrHa/CFWt7Olr22fmaXsD5
y08ZPKgTWeGPDE51miMf+i17P9OiIaf83H64BvHI5x6eM169LS6Y1juPZ+oVaMit
mXk6OTzlurDKh/AzRUCOolNlcWjUKKHmQ2crgLyuHbCnq23vbjTFEXoogL2sj7Rk
kZeZIbv1eBkaS1eSipW+Zr1WzoyaT8bAyPFdgSw+Xyl3qZGETmmvDxWHSjDHcGHM
ZtVBiNCG4LqyllHvsXYJKhnj2QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBmM8gv6
mRRiFXCofUDbqE8uCzmHMB8GA1UdIwQYMBaAFC35oeN1oXuOpWAntFqL1m+WdH2G
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI2RC8xODFCODIyMEU3
OEUxMUVFOTgzMUVCN0VDNEY5QUUwMi9MZm1oNDNXaGU0NmxZQ2UwV292V2I1WjBm
WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xmbWg0M1doZTQ2bFlDZTBXb3ZXYjVaMGZZWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODVCNkQvMTgxQjgyMjBFNzhFMTFFRTk4MzFFQjdFQzRGOUFFMDIvQkE2NTU1MzQ0
REVFMTFGMEIyMDkzNzFEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnQ+OMA0GCSqGSIb3DQEBCwUAA4IBAQBuy/Zbj0LwozDQTllXeKtx
xJ242Jn/BaVSvSbDqlTKlo1k6g9yQsBOwHt4e+bGRgN/UTabHF/sM8HlyZR1QXOQ
7Br+u35CBQKzpi5uybSYIsNEa/4+g/lICi9c03eTWzpa2E38mFAbxTLZ4X4/V5Q+
iCo9vIO2Voop8WqWL8npwVLxUoZ+NZbth63/JYkvXvr2wNJEJE8hUbydajtL6FpE
KQNkBJagItm4yOW8Z0MJy227W7u4SX6p1ndm4FdNB58ar5HaPz2gt4LeZATzKyK5
g5shke1Ri1hVYmAz8Uz2ZbTCr85Hoa/DWx45FhqDXCS5zKDRjkU7CyGQCAXbiHVU
-----END CERTIFICATE-----
Generated at Wed May 13 05:05:14 2026 by rpki-client