Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/D677E18AB9AF11EE97EEDB49C4F9AE02.roa
File:                     D677E18AB9AF11EE97EEDB49C4F9AE02.roa (raw, json)
Hash identifier:          4BM5LIM23GXw5AfkXFzMdqX+Y7TcpkGGG81Gw9eoyBY=
Subject key identifier:   16:BF:FC:78:5A:5E:C7:34:CD:52:47:3C:C6:FE:99:78:D7:32:77:64
Certificate issuer:       /CN=A91CFD5A/serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50
Certificate serial:       01A4
Authority key identifier: 33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/D677E18AB9AF11EE97EEDB49C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:45:05 +0000
ROA not before:           Thu 19 Feb 2026 03:24:05 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152342
IP address blocks:        157.15.22.0/23 maxlen: 23
                          157.15.22.0/24 maxlen: 24
                          157.15.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl
                          rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFD5A, serialNumber=33E5425D0368F82FF85B9B847F41238AD58D4E50
        Validity
            Not Before: Feb 19 03:24:05 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a58651-e416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:35:31:dd:9e:41:e0:2e:ad:93:68:46:b1:03:
                    96:6a:92:d9:d8:bf:f3:c5:30:3e:ff:7f:bc:c0:18:
                    85:dd:35:dc:ee:4e:51:50:1e:15:0a:f9:97:29:36:
                    5a:07:4c:c8:9d:0d:dc:a9:d9:13:4f:05:6f:3c:8d:
                    29:25:75:33:a6:6b:be:9d:6c:05:70:6a:df:ac:f7:
                    8d:51:5d:8f:5f:e6:dd:d0:e4:ea:d8:29:16:85:b1:
                    93:4b:41:b3:a0:46:c1:a0:3c:16:b6:75:96:5a:0e:
                    60:0c:98:92:e9:5c:a4:5d:75:ee:89:2a:51:28:28:
                    bd:c8:31:97:ea:de:40:47:c2:11:78:1c:27:21:06:
                    bc:87:5b:4a:f0:0a:83:53:8f:6b:e0:20:00:fd:1f:
                    db:df:e1:71:79:01:3f:0d:8c:f6:79:de:c6:e2:73:
                    7c:60:95:ae:76:2e:cd:a0:6b:16:1c:f7:51:12:93:
                    07:16:66:77:e2:22:cd:74:3e:e5:9b:27:69:b3:29:
                    d6:45:55:94:02:82:cd:2f:dc:81:6d:0f:39:4e:6d:
                    c1:9c:d4:17:3b:9f:1d:31:e2:92:d7:80:fe:75:67:
                    41:3f:85:9b:60:29:fe:c7:67:09:99:b5:9e:d8:ae:
                    4b:5b:82:99:76:02:4e:0c:3f:ac:af:eb:2e:74:ac:
                    b7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BF:FC:78:5A:5E:C7:34:CD:52:47:3C:C6:FE:99:78:D7:32:77:64
            X509v3 Authority Key Identifier:
                keyid:33:E5:42:5D:03:68:F8:2F:F8:5B:9B:84:7F:41:23:8A:D5:8D:4E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/M-VCXQNo-C_4W5uEf0EjitWNTlA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M-VCXQNo-C_4W5uEf0EjitWNTlA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFD5A/5FB7DC08B9AA11EEB0DCD834C4F9AE02/D677E18AB9AF11EE97EEDB49C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:cd:83:00:e4:cc:93:9e:ca:6c:f4:8e:96:35:9f:e2:42:5f:
         87:2a:f4:7b:55:6c:94:ae:79:16:8b:a2:31:0c:72:aa:3a:c5:
         a8:3f:df:73:e5:cd:8c:38:9c:ef:da:6d:d4:5f:bf:a2:54:1f:
         b8:9a:29:9b:2f:60:11:6b:fb:f3:db:0f:59:a8:c1:b6:1d:d5:
         05:67:86:b1:e4:f2:35:a3:75:d8:8a:ab:bf:6a:ea:8f:48:d3:
         30:ce:4a:f2:f5:38:ca:e5:df:ea:af:b5:4c:92:a1:e6:d6:7e:
         85:16:d8:93:15:61:df:29:e1:f3:6f:da:9f:94:ae:9c:be:c8:
         ab:ac:38:25:9b:83:9f:b0:b5:71:97:71:8e:16:6f:00:dd:3b:
         3e:99:8b:6a:0b:d7:14:91:6a:88:a9:7e:fb:d5:04:33:4e:da:
         12:b3:90:5e:36:50:d4:92:d0:48:95:5b:da:0f:60:19:36:fc:
         ea:a3:b8:52:e0:e7:28:25:df:7d:a7:d5:81:33:ba:ea:5b:22:
         34:4d:67:41:d3:85:30:e1:b2:a0:65:6c:da:4d:10:1a:c3:c3:
         fe:c9:65:74:93:87:cc:3f:ff:df:b3:4d:05:b8:07:f7:28:af:
         03:e3:4a:bd:c4:83:22:57:ac:16:2f:69:a9:d4:69:ae:fe:61:
         27:50:6c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:24:45 2026 by rpki-client