Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/680DBCE8CACA11EEAD1A2260C4F9AE02.roa
File:                     680DBCE8CACA11EEAD1A2260C4F9AE02.roa (raw, json)
Hash identifier:          CALB5+ZNaZKqj1fRady94jf/uK+L9bkLRLqb7EfU5a0=
Subject key identifier:   FB:91:DB:E2:59:76:EA:52:5D:07:1D:AC:91:7C:19:22:0C:F1:C7:25
Certificate issuer:       /CN=A91DE500/serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32
Certificate serial:       0184
Authority key identifier: B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/680DBCE8CACA11EEAD1A2260C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:55:45 +0000
ROA not before:           Fri 27 Feb 2026 04:23:36 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152469
IP address blocks:        157.15.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl
                          rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:41:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE500, serialNumber=B9CA79FB685C2EFF3FB9CCB9CD2D848116908A32
        Validity
            Not Before: Feb 27 04:23:36 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a48bb1-7f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:31:eb:c2:47:c3:ee:c8:f1:61:c6:3e:8e:f2:
                    b2:ec:f9:47:43:c8:94:41:9e:3a:64:e6:35:6c:b9:
                    8d:db:af:a4:6b:7a:cf:4e:da:c0:8c:f1:6e:ee:42:
                    b0:a9:ad:09:d1:8e:21:6d:f8:f2:ca:9b:46:b1:77:
                    ce:be:13:f9:14:73:37:71:6d:c9:a0:2f:2f:4d:3a:
                    4e:ef:b2:8a:88:73:cd:3e:18:13:bb:ed:c7:9d:b4:
                    f2:53:7d:8f:9c:28:d0:29:8c:93:7c:65:78:a8:53:
                    46:e7:75:2c:f0:dd:b5:72:63:f9:49:79:91:5c:66:
                    ef:55:c6:79:79:38:71:9c:5f:17:b7:07:d4:a2:5f:
                    bc:a6:67:ba:d7:49:99:1d:92:a3:a9:7b:93:e7:eb:
                    04:3b:42:67:b3:16:55:e3:91:bd:87:c1:49:7f:33:
                    76:e9:0f:b0:70:df:b5:99:3e:d1:fe:3c:7d:4e:96:
                    3a:11:27:1f:50:69:23:14:db:9f:76:b9:d5:71:84:
                    35:3e:f4:a0:d4:7f:1f:63:b3:ce:79:66:1a:14:9d:
                    0f:da:44:fb:b1:8a:df:da:4b:d8:76:ad:09:db:9a:
                    5d:54:e3:54:43:96:15:9b:3d:5f:7a:00:56:10:af:
                    89:d1:76:e5:9a:7e:5b:84:c0:6a:c2:67:45:bf:6f:
                    40:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:91:DB:E2:59:76:EA:52:5D:07:1D:AC:91:7C:19:22:0C:F1:C7:25
            X509v3 Authority Key Identifier:
                keyid:B9:CA:79:FB:68:5C:2E:FF:3F:B9:CC:B9:CD:2D:84:81:16:90:8A:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/ucp5-2hcLv8_ucy5zS2EgRaQijI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ucp5-2hcLv8_ucy5zS2EgRaQijI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/3FFF5C3EC72D11EE9C7C351DC4F9AE02/680DBCE8CACA11EEAD1A2260C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:da:2e:c5:db:1d:7c:5e:9d:4f:65:6e:ee:df:bb:9d:e3:cb:
         61:b1:af:52:8b:7c:2a:0c:a9:1a:cf:a9:70:de:dd:b4:c8:66:
         1c:e0:b8:f5:01:04:5b:10:a6:7e:a9:ea:5d:af:a4:30:6f:e8:
         bc:5e:cc:3b:41:e5:bf:d8:0b:62:34:d7:46:00:72:6f:f0:14:
         1c:7f:18:00:3c:0f:46:f5:35:45:47:34:58:69:31:b4:45:0f:
         cc:17:e1:44:06:43:8a:e6:4d:56:26:b9:cc:f4:ff:e8:58:dc:
         4a:06:04:05:32:db:2b:19:31:67:78:50:52:06:31:5c:08:c8:
         f7:08:b0:07:4c:a9:88:07:bf:d8:c0:99:fa:cd:76:80:6a:f8:
         04:65:06:8f:33:0e:01:6b:2e:17:be:f5:1a:69:71:9a:74:44:
         aa:74:6c:bf:d2:08:ce:43:e9:46:ef:22:0b:eb:da:f6:b6:7e:
         a8:fb:78:81:a5:eb:09:4b:91:bc:72:dd:71:a6:c5:9f:de:e0:
         92:a0:dd:5f:78:60:15:ea:15:a9:03:fc:f8:97:88:2d:65:85:
         d3:23:69:3a:d2:01:2a:1b:7b:15:20:f3:71:07:b9:d6:82:35:
         17:11:ec:6d:b0:3e:aa:ca:e9:22:52:0e:75:e6:8e:d4:d6:76:
         ec:e8:b1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:19:47 2026 by rpki-client