Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/1D74CCE2BB6D11EEB670B00CC4F9AE02.roa
File:                     1D74CCE2BB6D11EEB670B00CC4F9AE02.roa (raw, json)
Hash identifier:          KGc0TSSoFoKqnsUVoh0np4Cm7NUT/EBHE/n1p8DVqTw=
Subject key identifier:   25:94:CE:EC:D7:14:8B:A6:B3:3C:7E:4B:86:7F:4D:FB:A1:42:3D:C3
Certificate issuer:       /CN=A9132F27/serialNumber=2AD3D88B5E8E0B05141A3BC92F85E4273A0562A1
Certificate serial:       018D
Authority key identifier: 2A:D3:D8:8B:5E:8E:0B:05:14:1A:3B:C9:2F:85:E4:27:3A:05:62:A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/1D74CCE2BB6D11EEB670B00CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:32:04 +0000
ROA not before:           Fri 27 Feb 2026 04:22:58 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152341
IP address blocks:        157.15.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.crl
                          rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397 (0x18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132F27, serialNumber=2AD3D88B5E8E0B05141A3BC92F85E4273A0562A1
        Validity
            Not Before: Feb 27 04:22:58 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a415a3-7450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7d:5a:f6:46:6b:a1:04:3c:cd:ae:45:20:53:
                    6a:01:7a:c2:7c:d3:29:cd:7e:5c:2b:aa:ea:91:3b:
                    36:6d:74:04:17:d4:b9:f7:e4:36:7b:61:9f:52:6f:
                    b2:e2:d9:78:19:cc:a6:29:e8:f0:d9:e7:e7:91:fa:
                    af:2c:72:49:91:26:78:81:15:b2:32:4d:7c:9e:b5:
                    70:9c:40:fd:b6:bf:13:fc:8a:72:fd:89:4b:13:27:
                    da:76:65:c7:b1:86:62:f3:76:27:d8:35:95:04:a3:
                    f1:f2:f0:36:46:1e:7b:9d:66:77:3a:6a:74:17:29:
                    d7:14:f3:f8:54:ac:33:49:d3:2b:b6:19:84:a0:25:
                    03:0a:cd:85:0a:6f:a5:dc:75:f0:e2:b9:47:af:4e:
                    63:d5:2a:35:38:0a:ff:f7:bb:fc:06:9a:4f:8e:7b:
                    05:d0:af:95:b2:36:96:5e:a9:c7:e7:8a:e2:52:64:
                    7a:68:25:f3:83:3d:a9:49:ed:f4:92:79:46:23:69:
                    74:7f:d3:a0:d0:5d:95:51:4f:69:30:9d:99:1f:b7:
                    77:e7:4b:f9:dc:57:4e:28:97:26:2c:74:80:39:2c:
                    9d:b9:e6:89:b9:d0:64:2e:1f:bc:2d:0b:1d:ee:cc:
                    fb:59:05:38:56:7a:e8:c1:6e:fb:0f:c9:b5:ab:7a:
                    35:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:94:CE:EC:D7:14:8B:A6:B3:3C:7E:4B:86:7F:4D:FB:A1:42:3D:C3
            X509v3 Authority Key Identifier:
                keyid:2A:D3:D8:8B:5E:8E:0B:05:14:1A:3B:C9:2F:85:E4:27:3A:05:62:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/KtPYi16OCwUUGjvJL4XkJzoFYqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KtPYi16OCwUUGjvJL4XkJzoFYqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F27/7ACDF9AABB6C11EEA680AE6DC4F9AE02/1D74CCE2BB6D11EEB670B00CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:22:e2:d1:b9:5f:f6:80:32:a1:39:50:72:e4:dc:cc:33:06:
         58:20:f9:f6:14:97:97:02:fd:53:4f:e0:b2:13:86:45:50:22:
         e4:63:33:93:7a:79:c5:c2:ca:25:e1:12:18:a0:61:b2:52:c2:
         7c:19:ff:71:85:2f:3d:7c:9f:a9:6f:85:0c:50:1f:67:3c:e7:
         c7:1a:6a:b9:d6:af:b7:6f:ae:80:72:62:52:74:27:f4:dd:53:
         c4:9c:19:77:3f:50:7f:5a:20:39:da:d1:96:28:46:73:34:d4:
         56:da:02:84:e5:e7:64:52:91:41:6a:9e:9a:ce:e9:ec:51:63:
         00:87:72:24:66:90:06:22:f1:41:f7:84:a4:f1:e2:0c:7f:22:
         04:d5:03:7b:77:b8:d9:69:f8:10:ce:b3:4e:00:d7:40:ac:7d:
         07:0a:a7:cd:3e:4d:f4:cb:b8:db:b2:b2:f2:48:89:b3:f9:4d:
         7d:2d:1c:a4:0d:a6:cc:f6:0e:d0:1d:7d:d3:ee:18:a6:20:7c:
         17:0b:8f:eb:26:17:52:e0:9d:11:ad:ec:51:bb:d9:3b:06:37:
         0f:1b:d1:70:b9:95:8c:96:ac:30:9c:97:b4:e4:b0:c0:e7:15:
         d1:83:ce:01:11:1f:cf:66:ec:b2:f3:07:df:22:76:70:39:d9:
         a4:86:e6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:12:59 2026 by rpki-client