Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/C659227E3D9611F1B3BD8648C4833773.roa
File:                     C659227E3D9611F1B3BD8648C4833773.roa (raw, json)
Hash identifier:          URpwa68ICBHx7NH87HQVK1oNTdznNSwb1RkzR4QbR8U=
Subject key identifier:   60:99:E4:34:2C:BA:62:39:D4:5D:23:01:C5:B3:28:BA:51:01:5F:A3
Certificate issuer:       /CN=A91A29DA/serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5
Certificate serial:       01A4
Authority key identifier: 2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/C659227E3D9611F1B3BD8648C4833773.roa
Signing time:             Tue 05 May 2026 04:36:32 +0000
ROA not before:           Tue 05 May 2026 04:36:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152605
IP address blocks:        157.20.146.0/24 maxlen: 24
                          157.20.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl
                          rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A29DA, serialNumber=2FD24B6FD79804457354386662CE30DDA3B200B5
        Validity
            Not Before: May  5 04:36:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f973d0-f632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:16:4d:8e:53:c1:21:a2:05:74:7a:68:80:8e:
                    19:a8:81:79:65:24:c3:8a:66:32:97:a9:10:1f:a1:
                    d6:7f:7f:2a:74:28:98:46:01:74:57:1c:1f:cd:c5:
                    67:80:6a:be:2b:db:2d:ee:60:34:89:fc:d9:c3:64:
                    1b:ef:3d:e7:36:20:8c:3b:3f:5e:5d:3f:64:88:cc:
                    f4:17:4a:2a:9e:86:44:79:c5:6d:06:6d:90:f6:5a:
                    09:d3:98:a1:1b:bb:e0:42:f3:e9:e3:ce:d2:77:8f:
                    5b:b4:61:28:4e:55:e4:8c:f4:69:22:be:58:50:9f:
                    d7:ea:a4:c4:b0:a4:26:d9:52:6f:6a:ca:95:e7:9d:
                    bf:7e:dc:31:3c:b6:5c:9e:c5:6c:ce:cc:63:b8:09:
                    c2:9b:03:fa:98:fb:fd:f4:83:fd:dc:30:68:f3:33:
                    0e:27:ff:0b:77:40:16:b1:13:dc:54:0c:42:07:e3:
                    c0:e5:da:98:96:8f:b1:9e:b9:86:b7:c2:72:8e:1d:
                    12:04:87:80:9b:d7:ee:71:7e:80:55:33:44:6e:f7:
                    b7:bd:47:b5:19:f2:1e:2b:fd:fe:a1:74:57:10:63:
                    f7:78:ea:04:5e:2b:ed:01:30:9f:3b:6e:b5:d5:14:
                    a2:d3:83:69:f2:2e:09:67:95:bd:e4:92:eb:4f:f8:
                    a4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:99:E4:34:2C:BA:62:39:D4:5D:23:01:C5:B3:28:BA:51:01:5F:A3
            X509v3 Authority Key Identifier:
                keyid:2F:D2:4B:6F:D7:98:04:45:73:54:38:66:62:CE:30:DD:A3:B2:00:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/L9JLb9eYBEVzVDhmYs4w3aOyALU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L9JLb9eYBEVzVDhmYs4w3aOyALU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/34B5B514DA5411EE827CA57DC4F9AE02/C659227E3D9611F1B3BD8648C4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:9a:37:8c:93:5f:b5:5d:0f:9f:f3:0a:0a:65:16:82:30:d8:
         e0:76:75:9f:25:6c:d0:aa:7c:12:fc:42:4a:59:1b:21:45:67:
         b0:92:17:a6:b7:ea:c7:7d:1f:4c:36:07:cd:e8:ca:3b:ab:b3:
         1f:2f:b8:3e:8e:e5:9d:df:66:45:66:33:7a:f0:4c:ef:9c:08:
         d9:7e:be:f1:07:65:6d:54:c6:63:e4:87:b7:a6:5c:81:9c:c3:
         d2:c1:1f:00:0b:11:f1:6b:20:38:c7:89:81:9c:f3:55:c4:5c:
         21:8e:0c:b1:a1:97:34:01:c5:e8:db:19:38:94:d2:90:c6:62:
         15:cb:c2:cb:d9:d3:27:fb:cb:be:4c:71:49:84:ab:e8:00:e3:
         75:ba:09:01:3f:f5:92:95:f4:ae:f6:14:41:0e:19:b9:b1:7d:
         15:ca:f1:d6:ab:b1:20:3d:df:26:1c:33:fe:c1:99:2e:24:e0:
         70:7e:16:56:44:cc:f2:8a:03:89:1a:59:35:d7:74:30:29:70:
         10:ed:c4:61:33:83:77:12:c1:5d:c1:dd:4f:4d:9c:55:26:1d:
         e5:2d:83:06:03:34:7a:10:83:9b:c4:55:5c:0a:74:15:8d:03:
         df:5a:26:4b:4d:29:a5:89:e0:1e:2b:e4:a2:0c:b3:d3:5a:3e:
         9e:01:c2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:57 2026 by rpki-client