Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/8556D60A479011F187A637ED9C833773.roa
File:                     8556D60A479011F187A637ED9C833773.roa (raw, json)
Hash identifier:          01eu5VaZWMdQ7aw7Y4d0DV21vl4g9m72tYmYYG5IqbU=
Subject key identifier:   85:5A:FF:84:0F:6E:F1:6B:09:32:A7:46:87:E3:43:98:95:C0:32:1A
Certificate issuer:       /CN=A91A622F/serialNumber=2B19F455F4D3069477E01941F742149FB9000D81
Certificate serial:       15
Authority key identifier: 2B:19:F4:55:F4:D3:06:94:77:E0:19:41:F7:42:14:9F:B9:00:0D:81
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/8556D60A479011F187A637ED9C833773.roa
Signing time:             Mon 04 May 2026 08:09:07 +0000
ROA not before:           Mon 04 May 2026 08:09:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136818
IP address blocks:        151.123.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.crl
                          rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A622F, serialNumber=2B19F455F4D3069477E01941F742149FB9000D81
        Validity
            Not Before: May  4 08:09:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f85422-e9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:24:6d:4a:a7:b6:5b:52:58:3d:03:eb:8c:3d:
                    d6:b5:b4:e2:7f:36:b6:2c:81:3a:22:f6:1a:5c:6c:
                    64:ab:b5:58:f7:57:13:d5:de:63:cd:79:0f:bc:d0:
                    50:40:00:4c:19:2b:f8:fb:33:0f:ad:be:ab:14:c4:
                    28:91:7c:cd:65:90:bf:b8:55:36:dc:9e:78:29:b4:
                    e5:c3:98:e1:c3:dd:89:a5:db:ba:00:f8:28:3f:76:
                    00:50:b2:49:bb:f5:94:6a:8d:fd:63:7c:a4:70:68:
                    52:6e:40:f6:ec:7d:b7:5c:fc:82:bb:95:e6:62:40:
                    95:22:59:eb:40:21:c4:cc:b4:dd:4d:fd:41:d7:c9:
                    8a:f3:3a:d5:bb:e3:c9:0c:a0:a0:70:0c:5b:da:d5:
                    f7:86:b7:64:51:a7:bc:0f:0c:56:e5:d8:c3:b8:ed:
                    a3:5f:eb:e9:ad:7a:04:83:b8:43:9a:f5:12:c9:85:
                    2f:1c:c1:72:1f:a0:74:54:6d:29:ad:5d:5f:db:e3:
                    7d:eb:ec:f0:6d:7a:03:57:91:1c:34:b4:c7:87:b6:
                    2e:6a:06:a4:f2:35:68:77:dc:32:3d:21:e9:6d:9b:
                    47:1d:41:7d:da:93:b6:8e:55:2b:1a:10:ce:f9:b5:
                    cf:a9:cf:ee:28:54:44:e9:5c:b3:a6:cf:a3:8b:2e:
                    88:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5A:FF:84:0F:6E:F1:6B:09:32:A7:46:87:E3:43:98:95:C0:32:1A
            X509v3 Authority Key Identifier:
                keyid:2B:19:F4:55:F4:D3:06:94:77:E0:19:41:F7:42:14:9F:B9:00:0D:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/8556D60A479011F187A637ED9C833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.123.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:53:4e:0b:17:fa:03:af:fb:13:09:4e:20:66:2e:ab:b3:80:
         ba:52:0e:03:60:2d:aa:d9:7b:f5:9d:a2:dd:d3:aa:ee:e3:fc:
         a6:15:88:7a:68:f8:1b:aa:c7:23:e7:40:30:66:ba:4d:02:62:
         55:f9:97:f2:60:a1:17:a2:05:7e:c8:1f:31:c4:95:a8:76:a4:
         05:1c:cb:53:7b:27:47:01:2a:f4:d7:93:64:24:aa:87:96:4a:
         54:df:60:0e:b0:98:8b:82:e0:15:1e:f1:ba:b1:f4:d8:02:a9:
         30:ab:de:5b:e1:a2:0c:12:f9:6e:9a:b0:cd:ec:ca:c2:e8:b1:
         0f:4d:0b:c4:d5:c1:d9:15:53:cf:cd:af:5d:8b:f9:22:53:fd:
         e7:97:bd:d8:28:44:1e:a7:37:5c:38:a5:8b:b0:b6:a4:a0:c1:
         6b:6c:4a:20:ab:f2:0b:79:99:b9:47:e8:6d:e5:7d:33:5d:8a:
         58:05:13:08:7a:bd:ba:75:a2:c4:fe:25:f5:9f:ae:b2:df:ff:
         15:42:01:a2:c2:03:56:ac:8b:37:01:a6:42:b6:7d:b1:92:d9:
         76:12:56:d5:32:8d:ad:9f:6e:68:fb:3c:59:81:fb:4e:b3:1d:
         20:73:9d:f7:98:d7:93:18:64:c6:da:2a:de:49:fc:27:8b:6f:
         ab:a0:66:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 16:25:31 2026 by rpki-client