Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/ECF1FD7E129011F18378F4EA3A3D8C67.roa
File:                     ECF1FD7E129011F18378F4EA3A3D8C67.roa (raw, json)
Hash identifier:          DkkIwCU4RqWZKjsDF1eFw5VTmjTzQ2/3+rxMkY3F0Fk=
Subject key identifier:   FE:56:5B:11:0B:C9:E6:FE:1C:5E:72:2E:A5:E9:64:78:67:C8:6D:30
Certificate issuer:       /CN=A91406FF/serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
Certificate serial:       0B
Authority key identifier: 97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/ECF1FD7E129011F18378F4EA3A3D8C67.roa
Signing time:             Sun 01 Mar 2026 05:34:44 +0000
ROA not before:           Wed 25 Feb 2026 21:28:28 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     149292
IP address blocks:        151.158.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl
                          rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:43:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91406FF, serialNumber=97B446216379857700AD65B9FAFEEC7C922C22D8
        Validity
            Not Before: Feb 25 21:28:28 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a3cff4-c794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:69:5d:56:05:5f:95:fb:48:b7:66:20:8a:42:
                    c9:56:fd:94:8a:c0:7d:05:09:7b:12:a4:50:2d:6c:
                    15:67:f7:44:17:4f:b5:0f:83:f0:14:fd:99:bf:34:
                    57:56:5e:61:98:f3:ab:ef:3a:b6:b7:ef:dc:d7:f5:
                    4f:6a:81:1e:d9:8d:c1:d2:2f:b5:28:3c:72:74:1a:
                    bd:b6:9a:2f:d1:21:a3:27:98:4e:1f:4f:a9:3b:4c:
                    f9:a9:97:fa:d1:0b:a1:5a:55:d7:01:18:d6:bc:50:
                    e3:72:53:53:8c:35:bb:e9:97:97:e0:82:bc:12:a1:
                    7a:ea:e7:21:a9:a0:b5:50:84:0c:a7:49:77:a4:86:
                    48:af:98:60:f8:07:1b:b6:dc:b9:64:e2:0c:db:6b:
                    37:3b:12:59:07:30:c3:12:ee:07:3c:7e:7d:44:87:
                    7d:e7:5c:49:df:49:24:1e:49:a3:cc:46:f4:c1:f9:
                    c3:77:7b:1e:45:b8:b3:04:11:62:67:44:0c:56:21:
                    83:35:60:b4:81:d4:2e:e9:15:12:13:5c:27:01:44:
                    f6:2c:38:df:6e:d0:22:19:e1:54:51:3a:19:db:bb:
                    78:3b:7b:10:00:d0:66:ee:13:4a:8d:1e:4e:f7:77:
                    50:5f:f9:10:7b:23:3d:32:36:59:b3:e2:49:0f:24:
                    66:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:56:5B:11:0B:C9:E6:FE:1C:5E:72:2E:A5:E9:64:78:67:C8:6D:30
            X509v3 Authority Key Identifier:
                keyid:97:B4:46:21:63:79:85:77:00:AD:65:B9:FA:FE:EC:7C:92:2C:22:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/l7RGIWN5hXcArWW5-v7sfJIsItg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l7RGIWN5hXcArWW5-v7sfJIsItg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406FF/3969B3CA11FD11F1A466363C133D8C67/ECF1FD7E129011F18378F4EA3A3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:b4:b4:9c:8f:82:c7:f1:2c:43:71:d7:5c:21:d0:cc:50:28:
         4e:39:10:67:8b:6d:8d:03:2f:bb:1c:48:5c:3e:05:c6:f6:3b:
         07:54:f8:16:9b:47:2b:f3:6f:ba:82:3e:c5:80:3c:75:40:73:
         2e:a4:06:1d:cf:b6:95:04:1a:be:76:03:74:29:d7:8a:fa:a9:
         be:e8:7e:27:33:ba:77:3e:94:62:45:31:5b:01:0b:9c:b4:86:
         c4:d5:31:21:19:13:51:45:60:52:70:a5:2f:f9:bc:86:4c:12:
         ee:b3:4b:54:cf:59:b7:9d:83:f8:3f:65:c6:1e:a1:8d:31:2e:
         10:5f:d3:32:a6:6e:cc:da:eb:0b:16:15:77:8a:62:21:6b:c4:
         49:05:c2:60:d5:b8:d6:a8:47:80:9a:0f:19:f2:b3:7b:25:d7:
         ff:33:fd:75:61:20:3e:09:67:8f:e2:a0:aa:da:97:1c:81:ad:
         b9:b7:11:14:ce:97:f9:2a:d3:67:3f:13:91:fa:cd:45:5a:7b:
         d0:ef:2a:0a:9e:07:19:5f:b4:ec:54:7e:a2:70:5d:89:9a:9b:
         06:cc:b6:8b:a7:05:68:1f:a5:5d:cd:fe:c3:6e:1f:73:b2:1c:
         fe:e3:a9:3d:74:78:48:e7:4c:ae:cc:f7:a5:f0:2d:11:75:2a:
         a2:cd:1a:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:37:45 2026 by rpki-client