Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/5787CC96FB3411F0A8F597323D6F56BC.roa
File:                     5787CC96FB3411F0A8F597323D6F56BC.roa (raw, json)
Hash identifier:          lG5XzlCW36eN47UotWj73TCol7/E9mkhN9sNAOU+bso=
Subject key identifier:   E9:AF:C9:25:57:A4:C8:F2:BF:A7:91:CF:DE:1A:28:66:B8:B8:80:A5
Certificate issuer:       /CN=A914E1BD/serialNumber=0BA902C77D40A1720B42736C4E8B5C3678E2B914
Certificate serial:       1A
Authority key identifier: 0B:A9:02:C7:7D:40:A1:72:0B:42:73:6C:4E:8B:5C:36:78:E2:B9:14
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/5787CC96FB3411F0A8F597323D6F56BC.roa
Signing time:             Sun 01 Mar 2026 05:42:23 +0000
ROA not before:           Tue 27 Jan 2026 03:58:50 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     142232
IP address blocks:        151.158.70.0/23 maxlen: 23
                          151.158.70.0/24 maxlen: 24
                          151.158.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.crl
                          rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E1BD, serialNumber=0BA902C77D40A1720B42736C4E8B5C3678E2B914
        Validity
            Not Before: Jan 27 03:58:50 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a3d1bf-b947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7c:d3:34:12:74:fd:5d:b9:1f:2e:e4:26:3e:
                    26:54:5b:43:92:22:9d:12:e2:02:ef:b5:37:87:95:
                    bf:3b:e6:26:b8:a1:88:2e:34:7d:37:9f:83:1b:88:
                    3b:ce:6b:8c:0c:5f:d9:f3:ae:e0:d2:c8:ac:f4:17:
                    60:a3:63:83:87:50:fb:50:32:a0:c0:54:5d:64:cc:
                    6f:c5:48:77:05:9c:01:62:da:d2:8d:da:fe:31:34:
                    d8:cd:63:b1:a0:7c:93:0e:9b:28:bb:11:be:2d:e7:
                    52:9f:f0:18:6f:85:15:22:62:ed:33:3d:e5:dc:c9:
                    8b:a3:b8:1b:d5:ae:ad:59:00:ac:e5:98:69:eb:d2:
                    4f:fb:3f:85:3e:42:a4:75:b7:b9:2f:bf:5f:45:08:
                    ee:b7:d2:0d:84:e1:d9:fa:86:6c:fc:19:66:4c:48:
                    0a:38:7b:4f:2e:bf:84:fb:03:3b:99:17:c9:02:f0:
                    44:21:93:ad:82:0d:b4:5c:2a:2b:77:ff:8d:f4:9e:
                    53:d7:c0:84:b1:01:47:9d:8c:6e:a4:85:2f:c7:c5:
                    ff:7a:6e:33:8b:df:55:64:69:e5:21:98:9b:7c:51:
                    86:c9:cd:31:b8:18:33:88:64:98:e9:b9:5e:9f:ff:
                    f5:24:3c:e8:5b:4b:ba:80:c1:ca:c4:20:3d:cf:02:
                    73:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AF:C9:25:57:A4:C8:F2:BF:A7:91:CF:DE:1A:28:66:B8:B8:80:A5
            X509v3 Authority Key Identifier:
                keyid:0B:A9:02:C7:7D:40:A1:72:0B:42:73:6C:4E:8B:5C:36:78:E2:B9:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/C6kCx31AoXILQnNsTotcNnjiuRQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/C6kCx31AoXILQnNsTotcNnjiuRQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1BD/7EC6E5AEFB1011F0947DB856746F56BC/5787CC96FB3411F0A8F597323D6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:e5:c0:83:f1:9f:ec:58:23:6c:ff:49:40:10:2f:93:6c:b0:
         97:5e:0f:d6:c6:cb:34:5f:7d:83:be:d7:52:bf:c2:01:02:97:
         6d:9f:59:66:ee:fd:4a:d1:10:c0:ea:c2:f3:22:f1:20:64:44:
         3b:9f:93:42:bf:69:f3:c1:65:17:e8:fb:aa:db:05:2c:5c:70:
         42:46:0d:30:a7:d9:f0:4e:cd:b5:51:d2:48:a8:8e:3b:c3:08:
         4a:27:e0:23:e8:a8:4c:bf:23:30:c3:a9:28:0e:69:b6:31:37:
         3f:99:44:5b:e1:82:36:34:d1:32:cd:48:da:8a:41:29:53:b8:
         d1:be:96:b1:4b:5f:bb:40:ad:a8:79:eb:7e:4c:45:4a:d7:5e:
         59:2a:2f:05:c5:b7:94:4b:48:51:7e:35:7f:d6:fd:17:c4:a6:
         cc:48:18:69:d5:73:c7:06:cc:52:80:e2:17:9f:b9:b5:70:2e:
         04:f8:3c:00:81:5f:1e:13:4d:00:12:a2:65:3f:df:e9:76:6d:
         e9:77:f2:9e:17:9d:ae:14:74:12:34:21:2d:84:98:f3:09:57:
         9b:a4:61:1a:54:ce:03:fb:a6:80:91:9b:47:40:2c:ae:c7:a8:
         1c:ed:78:94:9f:08:5a:1a:c8:03:19:c2:0d:6c:85:18:13:56:
         33:f2:82:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:19:42 2026 by rpki-client