Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/2804E38A1C9C11F1AD8EA332233D8C67.roa
File:                     2804E38A1C9C11F1AD8EA332233D8C67.roa (raw, json)
Hash identifier:          u2OsXEMfPPTe3z4VuZjxhuv1MslPKuUs4ik5meu7/sw=
Subject key identifier:   F6:93:4D:07:A8:FE:5F:C5:57:71:4C:2A:65:59:04:3D:12:31:4F:3D
Certificate issuer:       /CN=A91B72D6/serialNumber=8E9C1C64D02BF403F41AD49C534003E7687734FC
Certificate serial:       09
Authority key identifier: 8E:9C:1C:64:D0:2B:F4:03:F4:1A:D4:9C:53:40:03:E7:68:77:34:FC
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/2804E38A1C9C11F1AD8EA332233D8C67.roa
Signing time:             Tue 10 Mar 2026 16:14:04 +0000
ROA not before:           Tue 10 Mar 2026 16:14:04 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     154524
IP address blocks:        151.158.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.crl
                          rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B72D6, serialNumber=8E9C1C64D02BF403F41AD49C534003E7687734FC
        Validity
            Not Before: Mar 10 16:14:04 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69b0434c-5ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:df:73:fd:b5:15:e7:f8:60:9b:64:7a:65:91:
                    6d:83:62:c0:3e:f5:71:f8:43:f3:88:3b:83:d8:f1:
                    3e:70:7d:ae:ed:96:a6:94:13:43:5a:bd:27:8a:be:
                    16:1a:de:1e:ca:33:48:80:51:e0:4e:e4:b8:c7:54:
                    fe:b4:3b:ca:b9:82:88:ae:4e:e3:da:19:a7:84:89:
                    6c:e0:6e:81:91:52:b4:a2:e8:48:c6:c9:f3:36:6e:
                    55:be:49:31:70:c0:f5:0e:5f:5f:5f:ef:40:09:c4:
                    d0:bc:34:df:9d:75:86:a1:49:36:4b:de:71:d2:e6:
                    e1:df:b8:5b:b4:3b:db:96:1a:e8:2c:45:33:41:45:
                    35:ec:bb:2d:ea:ce:40:c6:b6:7f:ab:18:b5:87:bd:
                    d1:4f:cb:3f:83:4a:15:eb:ab:30:d7:56:14:61:0b:
                    45:af:68:33:29:3f:37:a3:ad:1f:ed:e3:2a:f0:2f:
                    06:76:95:0d:66:58:d6:29:94:ef:eb:8a:d2:5c:bf:
                    89:e5:51:2e:1e:d0:20:1f:39:71:de:00:b4:13:61:
                    aa:72:cd:83:9e:c7:1c:58:3f:48:dc:f4:92:11:3d:
                    b2:cc:56:da:34:21:e1:33:4f:f8:b8:50:3e:bf:5a:
                    9c:12:35:a2:33:94:15:0c:e9:20:66:63:86:4d:df:
                    ea:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:93:4D:07:A8:FE:5F:C5:57:71:4C:2A:65:59:04:3D:12:31:4F:3D
            X509v3 Authority Key Identifier:
                keyid:8E:9C:1C:64:D0:2B:F4:03:F4:1A:D4:9C:53:40:03:E7:68:77:34:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/jpwcZNAr9AP0GtScU0AD52h3NPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jpwcZNAr9AP0GtScU0AD52h3NPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D6/B24BF16E171F11F1A3A8F2FB093D8C67/2804E38A1C9C11F1AD8EA332233D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:67:57:2f:17:ef:89:4f:09:a1:22:42:46:8b:3d:dc:2f:cf:
         67:3e:50:03:10:4e:37:cb:52:a5:31:39:ea:6c:6f:52:0e:54:
         11:87:58:d7:c2:32:d1:c6:eb:c6:2f:bb:dd:fc:1e:ef:5f:55:
         7a:f3:f2:f1:e3:8e:89:3d:b3:0d:17:3e:f4:9e:94:c8:6a:eb:
         49:f4:e3:97:46:2b:d5:a9:a9:c6:a5:82:c8:6f:d7:9b:a3:f7:
         48:44:02:39:e4:97:21:02:7f:64:76:10:0c:2e:ff:ce:ca:15:
         a9:05:f4:b6:af:2d:09:3f:d3:89:c7:72:40:d4:80:68:ed:19:
         38:45:24:c2:64:50:d1:06:bb:61:6a:63:eb:be:12:3e:86:98:
         c6:0c:85:a6:b1:21:2e:72:39:c4:88:5d:97:da:81:46:92:aa:
         3e:4c:a3:8d:8f:17:a0:a8:18:4a:dd:89:33:e5:f5:db:2e:d2:
         d8:15:50:80:af:bb:30:50:98:68:a9:1a:08:8a:57:2d:f7:7f:
         aa:3a:41:9d:00:f8:45:5d:3f:8b:22:9d:52:c6:33:a1:ec:9e:
         1c:e5:f0:94:e8:b8:a4:70:39:bb:c0:e2:51:3d:d4:bf:3c:26:
         4a:64:d4:1d:19:70:4b:13:01:bf:22:a2:30:dd:83:3f:db:d9:
         96:d1:09:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:33:04 2026 by rpki-client