Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/B1B9A1641D6011F1B057D12F263D8C67.roa
File:                     B1B9A1641D6011F1B057D12F263D8C67.roa (raw, json)
Hash identifier:          t6D9tXAplx7/JIUvggusg1vjbe0cuS2nLDglz+Se1SQ=
Subject key identifier:   A0:CF:5A:EE:17:30:98:DA:1E:11:73:D1:7D:AA:F0:AF:D1:78:A8:82
Certificate issuer:       /CN=A91D8157/serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91
Certificate serial:       19
Authority key identifier: 91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/B1B9A1641D6011F1B057D12F263D8C67.roa
Signing time:             Wed 11 Mar 2026 15:40:56 +0000
ROA not before:           Wed 11 Mar 2026 15:40:56 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     138197
IP address blocks:        151.158.216.0/24 maxlen: 24
                          151.158.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl
                          rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8157, serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91
        Validity
            Not Before: Mar 11 15:40:56 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69b18d08-093b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b5:20:cb:56:61:5d:1f:e4:3b:3f:47:1a:34:
                    b0:e3:0c:71:39:dc:08:16:89:3d:34:d3:46:31:75:
                    6f:3e:7f:27:37:e3:89:df:44:1b:08:26:db:90:3c:
                    2c:c8:09:de:a8:0f:fd:6e:c6:26:7c:6a:0e:f3:e8:
                    bc:19:b3:39:fb:ab:d0:2a:df:1c:76:97:fa:31:48:
                    2d:08:17:75:35:f2:0d:c9:94:1c:41:50:ee:fd:8d:
                    5b:a5:c7:21:18:3e:7e:ab:7c:1a:cb:54:04:dd:76:
                    f6:b8:9a:4a:8f:fa:f6:c4:e1:b1:2d:b6:a9:09:16:
                    49:11:f7:08:c2:a1:03:e4:48:a3:26:13:c8:d0:b8:
                    1c:c2:94:ed:94:5c:91:62:5f:a0:d7:e9:f1:b1:a4:
                    40:66:ac:77:29:f8:6d:ef:ab:17:e5:f0:b6:99:df:
                    5f:bb:79:7f:3f:27:87:bd:c0:de:7e:1f:78:c6:16:
                    d6:2c:64:1d:e5:d2:8e:e4:15:5b:9e:b4:aa:a7:0d:
                    28:bd:42:08:75:83:21:89:8d:a8:6a:54:b1:2c:98:
                    a9:b9:71:73:1a:42:27:aa:39:dc:2b:c6:a3:73:26:
                    6d:28:36:4b:c8:f5:b5:13:77:89:9d:95:48:94:5a:
                    da:01:0a:0b:9c:cb:4d:d4:f9:6c:ec:de:fe:64:9a:
                    9b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:CF:5A:EE:17:30:98:DA:1E:11:73:D1:7D:AA:F0:AF:D1:78:A8:82
            X509v3 Authority Key Identifier:
                keyid:91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/B1B9A1641D6011F1B057D12F263D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:7a:4e:75:7e:41:72:90:20:ce:7a:5c:ae:a9:c8:f5:c4:4d:
         f9:6c:4c:4d:02:f9:45:07:be:e1:16:31:15:0d:f1:ea:eb:74:
         b5:b0:f2:68:42:57:60:83:1c:98:03:d7:16:a7:22:b5:7f:44:
         e8:31:b7:1c:07:54:14:2a:73:69:94:e7:8a:bd:0c:25:36:87:
         82:25:96:2b:36:2e:1d:90:5d:4e:33:72:63:27:9b:35:b1:b3:
         8b:75:0c:7c:e5:20:76:a7:e2:0a:4c:94:a2:b4:78:2d:71:68:
         02:92:32:ac:dc:45:f8:38:65:28:ff:63:fa:b3:41:ba:64:50:
         be:01:51:b2:af:23:81:39:9c:dc:10:9a:28:f8:b1:e2:51:54:
         86:eb:49:07:dd:ed:48:ce:0b:e7:8a:2e:9a:10:31:7d:26:39:
         5a:78:24:db:b7:0e:da:f9:59:fc:dc:08:0b:0e:4b:71:6b:51:
         e0:6d:0c:d2:fd:50:24:c2:a1:00:8b:42:1a:bc:cd:39:1f:15:
         7a:0f:72:d2:6d:11:aa:57:10:ee:d0:4b:93:48:99:6c:1e:a3:
         4f:75:b8:2a:31:58:1a:a9:6e:d3:04:c6:7e:65:5c:98:b8:ba:
         54:f3:99:c5:fd:0c:b5:e7:83:6a:20:cb:22:04:47:bb:ec:dc:
         93:9f:09:43
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:03:03 2026 by rpki-client