Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/297CBF60B1EA11F18F5B7C6E4811F970.roa
File:                     297CBF60B1EA11F18F5B7C6E4811F970.roa (raw, json)
Hash identifier:          psykWVtJiLn1Rn2o9xaTL8eXARdffRzlklonTvhkrRQ=
Subject key identifier:   BB:2C:AE:E6:C3:D2:4B:FE:44:B6:5E:C2:A4:23:63:BC:38:98:B5:87
Certificate issuer:       /CN=A913E5F9/serialNumber=8DE765CA91D2B935362BA44C75B5C122B4A6CEF4
Certificate serial:       8D
Authority key identifier: 8D:E7:65:CA:91:D2:B9:35:36:2B:A4:4C:75:B5:C1:22:B4:A6:CE:F4
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jedlypHSuTU2K6RMdbXBIrSmzvQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/297CBF60B1EA11F18F5B7C6E4811F970.roa
Signing time:             Wed 16 Sep 2026 16:17:50 +0000
ROA not before:           Wed 16 Sep 2026 16:17:50 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     134562
IP address blocks:        151.158.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.crl
                          rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jedlypHSuTU2K6RMdbXBIrSmzvQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E5F9, serialNumber=8DE765CA91D2B935362BA44C75B5C122B4A6CEF4
        Validity
            Not Before: Sep 16 16:17:50 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6aaac12e-1cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6f:85:b5:05:ec:a9:7d:e7:b8:59:8f:07:72:
                    5c:08:36:7c:de:04:f5:69:89:1e:47:6c:d6:10:6a:
                    2d:b1:57:49:2f:13:39:72:8b:ca:8b:eb:2a:9d:5e:
                    27:90:8b:7d:6f:23:b4:52:04:b9:f0:13:2e:c8:11:
                    22:5f:ec:19:fa:2f:da:ea:b3:ad:dc:37:17:a6:04:
                    ae:c9:01:37:2b:50:ec:d6:45:cc:e8:3e:c6:2d:cd:
                    52:94:90:a9:07:ad:4e:43:8e:78:be:bf:c9:9c:06:
                    8d:7f:0a:2d:67:dd:e1:79:f1:f5:c1:b8:3c:19:26:
                    31:fe:5b:33:e1:2f:a2:3b:18:ca:8c:7c:9d:47:94:
                    a6:52:c8:d5:71:15:ec:f5:6d:cd:c5:84:96:92:94:
                    9b:b3:e2:ab:f9:cf:1b:67:55:0a:e3:54:b3:50:18:
                    e1:d2:9c:0c:55:01:2c:74:37:63:56:bc:98:04:45:
                    24:05:c3:59:9b:27:f5:05:15:66:f6:44:be:32:c7:
                    5e:23:e3:e3:8f:c1:2e:4d:3a:60:b9:46:d3:75:09:
                    55:e5:22:42:1b:51:4d:5b:59:07:ca:39:a2:46:84:
                    a7:d2:3f:b6:28:c4:7d:a0:d9:54:5e:60:a9:f2:4b:
                    23:1f:46:ca:a2:9a:81:30:bf:50:03:5a:de:35:ca:
                    71:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2C:AE:E6:C3:D2:4B:FE:44:B6:5E:C2:A4:23:63:BC:38:98:B5:87
            X509v3 Authority Key Identifier:
                keyid:8D:E7:65:CA:91:D2:B9:35:36:2B:A4:4C:75:B5:C1:22:B4:A6:CE:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jedlypHSuTU2K6RMdbXBIrSmzvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/297CBF60B1EA11F18F5B7C6E4811F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:c0:30:a4:6d:3a:83:34:0f:c9:27:3d:b1:b1:24:bd:47:18:
         13:54:65:34:5b:96:ce:2d:c9:78:2a:9c:ed:b9:4c:0d:e2:50:
         bc:a0:36:bc:1e:51:ff:5e:17:f5:8a:6f:e0:35:a7:6f:ce:4c:
         6e:1e:da:a8:bb:15:06:65:eb:26:b0:7c:c5:41:4a:b1:f5:f9:
         e9:7a:b9:d6:42:b2:30:38:04:74:ea:aa:a0:8b:8c:5f:9a:ba:
         32:a5:00:27:0d:9d:f0:bc:11:ea:07:10:eb:b7:96:80:6b:54:
         95:49:1a:ca:bb:2e:86:9b:2a:32:ca:bd:f6:99:1d:1d:94:df:
         a0:7f:99:d7:af:b2:d2:6e:f2:b0:8b:09:31:6d:8f:7a:32:67:
         46:c7:e0:63:c6:c9:8d:09:04:2b:f2:25:65:b3:16:43:bc:a3:
         7e:0d:78:63:59:95:d3:99:39:11:d4:2e:6c:b4:85:f6:fc:4b:
         8a:b9:8e:bb:e8:8e:12:69:59:99:27:3c:77:1b:51:47:0f:f7:
         c4:bb:18:cb:6c:88:9f:5d:a5:33:f6:25:57:81:b2:10:8a:e1:
         e7:41:cd:49:6c:9a:0b:93:44:a6:19:7d:65:2e:c0:91:57:b4:
         80:3d:24:dd:79:2d:25:0e:72:1b:fc:8c:04:81:b8:a0:f2:57:
         04:01:db:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:13:45 2026 by rpki-client