Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/431B027EB7F311F1AEB843C36D11F970.roa
File:                     431B027EB7F311F1AEB843C36D11F970.roa (raw, json)
Hash identifier:          0hTMdW5wS3Vz6x9QNUuQtirwjm/NcLyUU1762lAE4ac=
Subject key identifier:   D0:1E:C2:58:0B:63:3C:55:D4:57:9B:51:D6:16:CB:09:06:E3:B9:CD
Certificate issuer:       /CN=A91CD314/serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2
Certificate serial:       7E
Authority key identifier: DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/431B027EB7F311F1AEB843C36D11F970.roa
Signing time:             Thu 24 Sep 2026 08:38:06 +0000
ROA not before:           Thu 24 Sep 2026 08:38:06 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     154947
IP address blocks:        151.158.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl
                          rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD314, serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2
        Validity
            Not Before: Sep 24 08:38:06 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6ab4e16d-123d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:db:38:67:20:e3:92:01:04:7c:b2:2b:a0:33:
                    1d:8d:c6:2c:f0:57:a8:bc:42:3c:1e:37:77:4a:16:
                    fe:e3:5a:fb:da:3a:9f:c6:06:97:7a:61:78:8c:fe:
                    d1:f1:9c:31:30:0e:3b:05:e7:42:62:10:04:46:94:
                    3b:0d:4a:bf:e5:52:8b:81:be:75:af:72:5a:f9:ac:
                    8b:a8:df:c3:46:c1:f9:28:ef:0e:b8:a6:fd:64:95:
                    42:2d:3d:fc:ef:5a:8a:3e:9a:21:5b:3a:c4:08:bf:
                    2c:94:94:18:39:1f:47:dd:3c:1d:ea:0b:e1:8b:b9:
                    f2:09:25:0f:91:d9:08:f1:33:32:65:89:14:93:5b:
                    a1:83:37:f0:62:92:61:82:e2:54:33:f5:72:a5:ef:
                    19:fd:1c:e6:ac:f2:8f:07:eb:4a:68:dc:af:2e:cf:
                    c2:78:a9:eb:b5:f0:7a:60:ab:85:a1:e4:28:40:f8:
                    45:5d:85:bf:6c:92:7f:f3:23:75:74:9a:34:21:56:
                    41:95:07:a2:4f:7f:08:40:54:59:47:d2:08:86:f6:
                    83:9d:d9:f6:b3:a7:15:46:cf:96:19:d5:6a:f7:29:
                    3a:93:08:0c:d0:11:64:51:b4:21:e7:35:f8:ba:28:
                    3b:e8:01:fc:f3:01:5c:7b:c2:40:6e:f2:d5:51:9b:
                    42:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1E:C2:58:0B:63:3C:55:D4:57:9B:51:D6:16:CB:09:06:E3:B9:CD
            X509v3 Authority Key Identifier:
                keyid:DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/431B027EB7F311F1AEB843C36D11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:48:f4:8d:b4:3d:57:83:37:31:a7:de:76:d0:fa:ba:e6:94:
         46:77:99:c5:83:f6:3f:3e:68:b8:0a:c6:69:5d:50:3a:c6:93:
         fb:8c:60:fb:ef:44:d4:8e:07:1d:f4:48:21:4e:fb:5d:4f:9b:
         81:6c:66:c9:7c:83:17:83:a5:09:20:dc:31:e2:09:5f:b9:a0:
         52:57:6b:e9:30:72:4e:6e:1c:92:79:e9:65:ba:04:04:32:b4:
         7d:2b:f9:f6:94:b9:28:2c:7e:a4:83:f8:97:10:5e:f9:74:c0:
         83:4b:5e:56:0e:2c:fc:00:f0:b0:69:61:88:f0:d3:5c:df:f6:
         06:6c:61:b6:e8:71:4b:26:a0:3d:92:a0:3a:ae:89:b2:5a:57:
         9c:28:b0:3b:26:e5:bf:9c:da:43:c9:2c:52:38:e3:07:81:9f:
         00:d8:8b:61:40:75:08:dc:62:68:3e:46:c9:1f:c0:cc:b1:26:
         1e:52:3e:5e:15:67:dd:92:14:a4:d6:a6:e7:a3:39:98:9f:56:
         52:3d:1a:d5:95:a2:fa:93:6e:e3:1a:6a:79:f5:d3:6c:87:40:
         9a:3f:5d:c6:d9:5d:ec:3a:d5:6a:cd:91:75:9f:f5:f7:fd:85:
         76:64:b1:17:eb:43:81:d3:50:c5:ea:82:2b:18:79:97:7f:5b:
         3c:ee:da:5f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:18:34 2026 by rpki-client