Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/A19F973C60C011F0A28C7F2CC4F9AE02.roa
File:                     A19F973C60C011F0A28C7F2CC4F9AE02.roa (raw, json)
Hash identifier:          1+gWdAZ37YIBU2iFVY3fHe/eCmXpEhHdoc6OKpG9wTE=
Subject key identifier:   3D:12:65:13:EE:E4:7B:E5:F1:D4:66:9A:B1:73:28:B5:1B:90:99:43
Certificate issuer:       /CN=A91F43F2/serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09
Certificate serial:       83
Authority key identifier: 55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/A19F973C60C011F0A28C7F2CC4F9AE02.roa
Signing time:             Sun 15 Mar 2026 06:44:24 +0000
ROA not before:           Sun 15 Mar 2026 06:44:24 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     151335
IP address blocks:        157.15.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl
                          rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:52:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F43F2, serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09
        Validity
            Not Before: Mar 15 06:44:24 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69b65548-a731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f0:4a:10:03:c1:31:5e:0e:1f:02:a3:61:2f:
                    c5:cc:10:0b:0c:65:7f:db:42:b2:71:d7:eb:05:b5:
                    a1:b1:0f:2e:5d:9d:d3:30:ce:74:bc:e5:72:0c:60:
                    33:8e:51:3f:39:ae:b0:c9:ff:92:83:85:e7:41:0e:
                    5d:ac:80:47:4c:78:09:5d:71:c9:5f:38:56:59:00:
                    36:e4:56:43:f1:d9:78:73:5f:7c:db:fd:1c:da:00:
                    6c:54:26:d8:06:8c:26:89:bd:d9:19:0b:8e:d6:16:
                    b3:24:6a:61:73:1e:a5:c4:fb:11:8d:c8:cd:fe:08:
                    c8:4d:76:ad:bb:47:96:8a:cd:43:cc:c8:18:ec:32:
                    cd:3c:50:cf:4d:c8:f6:4a:bf:6f:31:1d:67:24:25:
                    56:51:3f:5b:76:58:c4:d1:36:67:84:1c:92:da:59:
                    2a:78:7d:38:e6:22:06:44:8b:7b:f9:63:df:62:b2:
                    0f:65:d0:cf:1b:60:5c:d0:3a:dc:bc:1b:53:e9:cc:
                    6a:fb:8c:c9:93:3d:f9:32:ae:10:86:cb:b3:fc:00:
                    5e:b5:b4:a0:23:a8:bc:6c:83:12:1c:9f:fb:ac:eb:
                    6f:35:70:8d:6a:4e:2a:bf:63:9c:80:41:88:aa:15:
                    18:6f:c0:84:c6:16:ec:bb:ff:e5:0a:fc:2f:10:df:
                    46:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:12:65:13:EE:E4:7B:E5:F1:D4:66:9A:B1:73:28:B5:1B:90:99:43
            X509v3 Authority Key Identifier:
                keyid:55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/A19F973C60C011F0A28C7F2CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:86:83:d3:3f:c0:10:59:a1:4e:30:6c:de:21:96:e4:97:f8:
         ac:04:57:b4:ce:0f:ea:03:11:3a:1e:53:e7:74:ed:d9:cd:fa:
         b7:19:8c:fa:84:16:03:ba:fc:b5:1a:a2:51:76:c6:e4:82:f4:
         ad:1a:6b:7e:ad:d0:92:37:64:9c:85:3b:98:2f:28:78:70:49:
         11:15:d9:a9:1b:d8:47:15:36:c6:24:1d:38:38:f7:7a:ef:83:
         6b:e8:7f:9a:db:a3:2c:14:d5:a3:b4:fa:d9:f0:77:53:96:18:
         17:9a:35:a6:d5:ee:29:4f:ba:5f:5e:67:3b:64:39:0e:0c:eb:
         5f:ea:d3:48:99:01:ff:8c:73:0a:08:de:a0:d7:f2:bb:f4:4c:
         8d:bf:87:56:80:85:6f:43:36:a8:9f:be:32:6d:50:84:45:18:
         e9:91:ee:97:fc:1f:5a:ae:e8:36:ed:0a:7e:68:53:b0:c0:82:
         ae:92:fa:cc:30:84:bb:84:ec:d5:db:d1:c0:8c:b3:6b:75:5d:
         6e:94:c2:0a:30:c1:41:78:23:35:a8:42:2b:90:2c:74:f0:2b:
         60:36:0e:e4:1c:85:9a:c4:7d:d6:fd:ed:82:8a:5a:6d:c8:3e:
         15:2b:2d:40:80:79:5d:07:21:28:08:2f:70:e9:f7:29:53:a6:
         20:75:6c:81
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQzRjIxMTAvBgNVBAUTKDU1Nzg5QTM0MTZFN0VGNTE1Q0UwOEYwNUEzNkYxREVE
ODM0NDRDMDkwHhcNMjYwMzE1MDY0NDI0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWI2NTU0OC1hNzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3PBKEAPBMV4OHwKjYS/FzBALDGV/20KycdfrBbWhsQ8uXZ3TMM50vOVyDGAz
jlE/Oa6wyf+Sg4XnQQ5drIBHTHgJXXHJXzhWWQA25FZD8dl4c1982/0c2gBsVCbY
Bowmib3ZGQuO1hazJGphcx6lxPsRjcjN/gjITXatu0eWis1DzMgY7DLNPFDPTcj2
Sr9vMR1nJCVWUT9bdljE0TZnhByS2lkqeH045iIGRIt7+WPfYrIPZdDPG2Bc0Drc
vBtT6cxq+4zJkz35Mq4Qhsuz/ABetbSgI6i8bIMSHJ/7rOtvNXCNak4qv2OcgEGI
qhUYb8CExhbsu//lCvwvEN9GIwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD0SZRPu
5Hvl8dRmmrFzKLUbkJlDMB8GA1UdIwQYMBaAFFV4mjQW5+9RXOCPBaNvHe2DREwJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDNGMi80MTgwNTA5NDYw
QzAxMUYwQUZCNDU3MkJDNEY5QUUwMi9WWGlhTkJibjcxRmM0SThGbzI4ZDdZTkVU
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZYaWFOQmJuNzFGYzRJOEZvMjhkN1lORVRBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjQzRjIvNDE4MDUwOTQ2MEMwMTFGMEFGQjQ1NzJCQzRGOUFFMDIvQTE5Rjk3M0M2
MEMwMTFGMEEyOEM3RjJDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAnQ+AMA0GCSqGSIb3DQEBCwUAA4IBAQBmhoPTP8AQWaFOMGzeIZbk
l/isBFe0zg/qAxE6HlPndO3Zzfq3GYz6hBYDuvy1GqJRdsbkgvStGmt+rdCSN2Sc
hTuYLyh4cEkRFdmpG9hHFTbGJB04OPd674Nr6H+a26MsFNWjtPrZ8HdTlhgXmjWm
1e4pT7pfXmc7ZDkODOtf6tNImQH/jHMKCN6g1/K79EyNv4dWgIVvQzaon74ybVCE
RRjpke6X/B9arug27Qp+aFOwwIKukvrMMIS7hOzV29HAjLNrdV1ulMIKMMFBeCM1
qEIrkCx08CtgNg7kHIWaxH3W/e2CilptyD4VKy1AgHldByEoCC9w6fcpU6YgdWyB
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:53:08 2026 by rpki-client