Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/3E037E68FF7C11F086EA69A45B6F56BC.roa
File:                     3E037E68FF7C11F086EA69A45B6F56BC.roa (raw, json)
Hash identifier:          wAlB3BUqtxq1aoBvh9Rg/8aDOeVwWoD0EDLcf3feyk0=
Subject key identifier:   A8:19:F5:5E:21:CA:78:3E:27:60:4F:9A:3A:7D:EB:FD:B7:FD:9F:16
Certificate issuer:       /CN=A911725F/serialNumber=9AE3977A598CF981BDF08564DDCB6BF2B6A9641B
Certificate serial:       18
Authority key identifier: 9A:E3:97:7A:59:8C:F9:81:BD:F0:85:64:DD:CB:6B:F2:B6:A9:64:1B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/3E037E68FF7C11F086EA69A45B6F56BC.roa
Signing time:             Sun 01 Mar 2026 05:41:32 +0000
ROA not before:           Sun 01 Feb 2026 14:42:33 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     132387
IP address blocks:        151.158.86.0/24 maxlen: 24
                          151.158.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.crl
                          rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911725F, serialNumber=9AE3977A598CF981BDF08564DDCB6BF2B6A9641B
        Validity
            Not Before: Feb  1 14:42:33 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a3d18b-75d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:31:2c:3f:6b:8c:b6:eb:89:b6:74:9d:d8:25:
                    24:a9:b9:03:22:93:7f:ec:7e:c7:0e:87:ee:e2:39:
                    6c:0a:43:c3:02:ba:0d:49:d6:b2:55:d2:26:c2:a1:
                    07:95:07:17:f6:ab:e2:29:7e:cd:3c:16:23:75:09:
                    36:a3:9c:10:2c:4e:6c:00:ff:43:78:e5:19:8c:29:
                    d7:2f:e4:27:35:a4:d0:01:2e:d4:d7:b0:10:52:47:
                    a6:ee:48:7e:92:ff:59:f7:ba:a9:bd:9e:00:f5:b9:
                    ee:fc:28:42:24:e5:ba:a2:d5:a0:6f:5d:1d:eb:77:
                    df:80:c3:ac:41:61:1e:da:95:73:f9:1e:d1:f7:64:
                    99:9d:93:92:57:e4:b1:06:40:bf:9d:92:d9:af:38:
                    bf:8f:b1:22:21:72:d7:0b:3d:e6:68:e1:b2:fe:c4:
                    4f:89:32:3a:0d:f9:88:4c:9a:04:07:3e:e6:34:46:
                    1c:67:56:97:3d:a1:54:09:ea:bc:64:a4:dc:54:40:
                    25:50:c9:73:b9:3e:1d:d4:55:74:a2:dc:c6:fe:16:
                    47:cf:b1:6a:10:1d:86:97:b1:fb:db:37:8c:c2:4f:
                    ce:e4:cb:4d:41:95:65:bc:bd:4a:90:1d:9d:16:fe:
                    64:32:ea:5c:73:42:c7:3f:c8:a9:ef:9c:a9:8e:3d:
                    ef:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:19:F5:5E:21:CA:78:3E:27:60:4F:9A:3A:7D:EB:FD:B7:FD:9F:16
            X509v3 Authority Key Identifier:
                keyid:9A:E3:97:7A:59:8C:F9:81:BD:F0:85:64:DD:CB:6B:F2:B6:A9:64:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/muOXelmM-YG98IVk3ctr8rapZBs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/muOXelmM-YG98IVk3ctr8rapZBs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911725F/97244ACEFB2E11F0AFDE71893B6F56BC/3E037E68FF7C11F086EA69A45B6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:84:1c:9e:ab:53:28:d1:6d:03:2f:28:a1:90:7d:fe:af:4c:
         e2:40:6d:2e:7c:ed:4d:1c:89:26:36:42:4b:92:51:b7:3c:54:
         d5:d7:a6:b1:51:3e:fb:dd:94:be:b7:c0:5a:fb:0f:55:0c:79:
         cc:0d:57:b5:a8:b3:a7:ca:a1:62:29:dc:6d:89:05:32:31:8e:
         4e:8f:24:09:6f:f0:f0:cd:4e:08:37:01:e0:82:c2:a3:a2:99:
         cf:18:e6:35:d7:a3:bb:74:ee:79:cd:50:9f:f6:cb:31:9c:f5:
         90:1b:59:12:35:ff:c3:a3:1e:c8:b1:95:71:1a:e8:d0:22:e9:
         25:fb:6b:72:20:52:1e:e5:2c:79:9e:94:bb:d7:34:d8:fa:d4:
         6a:ea:64:a1:de:aa:c1:9f:da:6b:3d:f8:a6:de:0a:9f:52:3c:
         d1:e3:8a:89:59:c1:fb:b0:93:0d:14:aa:83:f9:66:0a:97:ff:
         7b:82:52:7a:a0:9e:dd:93:2c:d9:06:5d:d6:80:d3:86:75:9b:
         96:bd:d9:9a:6d:75:6b:43:71:38:8e:cf:f7:92:c0:29:c2:7f:
         eb:13:64:c2:b7:4b:4e:27:af:92:73:04:28:ee:0d:1d:fe:33:
         0f:62:92:0d:9a:0b:67:9f:f2:ab:34:23:c2:03:99:64:f3:2e:
         bf:b8:3d:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:41:04 2026 by rpki-client