Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/3446813047DC11EFA05E932EC4F9AE02.roa
File:                     3446813047DC11EFA05E932EC4F9AE02.roa (raw, json)
Hash identifier:          K4s4bQ+AZEMbINRSOhh8kAqaJQUKtCHKATxaJcI+fSc=
Subject key identifier:   59:7E:77:10:4A:5C:BE:55:C5:02:B1:28:29:55:38:D1:C8:26:3C:C0
Certificate issuer:       /CN=A91D313B/serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
Certificate serial:       0135
Authority key identifier: 80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/3446813047DC11EFA05E932EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:08:18 +0000
ROA not before:           Tue 13 Jan 2026 04:24:21 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152317
IP address blocks:        157.10.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl
                          rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D313B, serialNumber=80E9275B6E6EBC6AD7585D76AFB6A400B5142C3F
        Validity
            Not Before: Jan 13 04:24:21 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a41e22-a534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:db:4e:d8:d9:27:7c:29:4e:7c:ac:4f:bd:fe:
                    67:a1:3c:e5:2c:bf:ce:40:3e:bb:48:c8:97:73:b3:
                    e1:00:dc:13:3e:64:d7:5d:36:f9:a8:2e:9c:05:eb:
                    d5:2e:09:69:b5:e9:5a:25:d0:63:29:2c:2f:4b:ad:
                    ed:3f:67:18:b7:bd:a6:32:82:da:fb:56:01:49:20:
                    28:58:ea:86:7a:a2:9b:65:8a:7f:1b:1f:af:bf:38:
                    38:61:6f:cb:74:df:56:b5:2a:77:05:1c:ec:9b:1f:
                    10:8b:66:4b:1c:7e:ea:88:74:d8:68:36:6c:32:11:
                    77:37:b6:2a:1c:ae:db:e7:4e:c9:e3:69:9b:da:63:
                    eb:cc:ac:30:68:fe:c2:86:a2:7d:71:54:1e:ad:59:
                    41:c9:42:a7:a8:cf:17:a2:5b:8f:73:ad:78:cc:b8:
                    6e:88:9a:a5:5c:92:1e:62:a1:59:80:ad:84:d3:b7:
                    bc:8e:e9:88:8e:93:ea:5c:2a:a5:01:72:8d:01:ab:
                    71:17:ef:8a:72:55:9b:e4:df:7f:db:38:69:9f:01:
                    e3:da:75:e4:cf:86:3a:da:f0:35:32:ca:fb:60:7b:
                    cd:49:5e:1a:84:32:47:12:43:18:6d:33:35:9c:e2:
                    98:16:24:e5:df:f9:32:2f:0a:2b:d6:b9:0a:28:39:
                    42:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:7E:77:10:4A:5C:BE:55:C5:02:B1:28:29:55:38:D1:C8:26:3C:C0
            X509v3 Authority Key Identifier:
                keyid:80:E9:27:5B:6E:6E:BC:6A:D7:58:5D:76:AF:B6:A4:00:B5:14:2C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/gOknW25uvGrXWF12r7akALUULD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gOknW25uvGrXWF12r7akALUULD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D313B/CCE99D7E47DB11EFAEA4B02DC4F9AE02/3446813047DC11EFA05E932EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:1f:7b:f3:67:cd:bc:65:de:61:b4:a1:1e:20:b5:80:dd:87:
         cb:20:c3:4d:b0:98:11:c8:94:58:c4:a7:86:50:6e:73:93:e8:
         4e:c2:0a:fd:61:3f:7f:ff:4c:12:35:57:05:60:e5:8e:33:65:
         5f:4a:c4:4e:32:b3:ef:41:4c:95:cc:cd:4e:ba:d4:ed:cc:6a:
         77:38:15:29:83:4e:e0:f1:8d:51:96:f2:9b:d5:36:27:a5:b3:
         6f:53:e1:37:13:6f:1c:a3:14:a6:b7:0f:03:dc:02:12:8c:f3:
         61:cd:52:84:c7:64:55:d2:42:c0:ea:6a:92:91:09:39:27:f4:
         de:e2:c0:1a:7e:8b:3f:26:0a:34:bc:87:da:dd:ca:ea:78:1b:
         f3:0c:d1:b0:84:01:63:b8:de:6b:07:59:45:63:cd:52:68:e6:
         96:a9:3a:e0:b0:37:a5:a4:0b:42:33:89:a4:eb:e7:d5:eb:53:
         64:b2:e4:5b:1c:ad:8f:db:10:92:7a:5c:23:14:45:9d:d6:12:
         8c:d6:f6:ea:53:94:30:df:1c:cf:a6:b2:10:ac:fe:82:60:d5:
         37:27:4e:3e:30:22:74:98:7e:05:61:6a:36:ce:8c:4e:4d:31:
         d3:83:8d:33:2e:35:7f:c6:7e:9d:25:6f:00:a3:16:62:1e:58:
         04:d9:e2:93
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDMxM0IxMTAvBgNVBAUTKDgwRTkyNzVCNkU2RUJDNkFENzU4NUQ3NkFGQjZBNDAw
QjUxNDJDM0YwHhcNMjYwMTEzMDQyNDIxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MWUyMi1hNTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5dtO2NknfClOfKxPvf5noTzlLL/OQD67SMiXc7PhANwTPmTXXTb5qC6cBevV
LglptelaJdBjKSwvS63tP2cYt72mMoLa+1YBSSAoWOqGeqKbZYp/Gx+vvzg4YW/L
dN9WtSp3BRzsmx8Qi2ZLHH7qiHTYaDZsMhF3N7YqHK7b507J42mb2mPrzKwwaP7C
hqJ9cVQerVlByUKnqM8XoluPc614zLhuiJqlXJIeYqFZgK2E07e8jumIjpPqXCql
AXKNAatxF++KclWb5N9/2zhpnwHj2nXkz4Y62vA1Msr7YHvNSV4ahDJHEkMYbTM1
nOKYFiTl3/kyLwor1rkKKDlCvQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFl+dxBK
XL5VxQKxKClVONHIJjzAMB8GA1UdIwQYMBaAFIDpJ1tubrxq11hddq+2pAC1FCw/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzEzQi9DQ0U5OUQ3RTQ3
REIxMUVGQUVBNEIwMkRDNEY5QUUwMi9nT2tuVzI1dXZHclhXRjEycjdha0FMVVVM
RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2dPa25XMjV1dkdyWFdGMTJyN2FrQUxVVUxEOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDMxM0IvQ0NFOTlEN0U0N0RCMTFFRkFFQTRCMDJEQzRGOUFFMDIvMzQ0NjgxMzA0
N0RDMTFFRkEwNUU5MzJFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnQqIMA0GCSqGSIb3DQEBCwUAA4IBAQClH3vzZ828Zd5htKEeILWA
3YfLIMNNsJgRyJRYxKeGUG5zk+hOwgr9YT9//0wSNVcFYOWOM2VfSsROMrPvQUyV
zM1OutTtzGp3OBUpg07g8Y1RlvKb1TYnpbNvU+E3E28coxSmtw8D3AISjPNhzVKE
x2RV0kLA6mqSkQk5J/Te4sAafos/Jgo0vIfa3crqeBvzDNGwhAFjuN5rB1lFY81S
aOaWqTrgsDelpAtCM4mk6+fV61NksuRbHK2P2xCSelwjFEWd1hKM1vbqU5Qw3xzP
prIQrP6CYNU3J04+MCJ0mH4FYWo2zoxOTTHTg40zLjV/xn6dJW8AoxZiHlgE2eKT
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:13 2026 by rpki-client