Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/315775B015F811ECB52DA912C4F9AE02.roa
File:                     315775B015F811ECB52DA912C4F9AE02.roa (raw, json)
Hash identifier:          ExpAwYBBz9sDgD46YsVONTI8dGzzabMohz6Gc17A9bo=
Subject key identifier:   7E:C9:B4:B2:D0:AB:82:C9:B1:41:62:2D:96:36:0B:4F:AC:66:EA:48
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       375E
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/315775B015F811ECB52DA912C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:08:15 +0000
ROA not before:           Wed 08 Oct 2025 14:40:41 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     146993
IP address blocks:        175.29.148.0/22 maxlen: 24
                          175.29.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14174 (0x375e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct  8 14:40:41 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a48e9f-fb5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:55:f1:76:af:f0:da:e6:2f:27:8a:48:77:
                    a9:c2:3e:a6:1b:58:a0:40:b6:c2:7c:e5:53:23:ef:
                    5c:38:29:85:e7:11:05:6e:7d:00:13:a3:f6:42:ea:
                    bf:13:84:7b:aa:fa:6e:18:c9:84:05:4c:ef:ab:9e:
                    0b:35:18:7a:7f:f9:50:e3:1a:76:0e:42:ae:7f:17:
                    54:8d:0f:54:90:28:47:5d:4d:e3:06:5b:a3:f4:96:
                    ba:03:f0:7f:f1:0b:69:8c:d9:a8:33:fe:aa:a8:19:
                    a5:2f:02:1c:58:d9:9c:87:d9:ad:75:d3:47:53:7e:
                    26:e1:f7:ad:3a:9b:48:ab:29:87:ed:81:92:66:d8:
                    97:41:86:c5:3a:47:c4:07:8c:8a:c6:b1:01:0f:f9:
                    f6:53:7e:2d:d1:c9:85:f8:df:2b:8c:aa:ff:5f:67:
                    19:6e:f2:57:c5:91:7c:8e:10:7e:07:d7:b4:84:3f:
                    8a:7c:9a:62:b0:1c:eb:ae:22:e7:51:ae:25:a2:27:
                    80:6c:71:e5:9d:98:9b:9d:39:db:73:44:76:f7:d4:
                    36:c4:c7:91:1f:8c:a2:3d:5d:9d:55:36:ff:20:df:
                    ec:85:f3:6c:ef:54:a5:0d:36:60:0c:3a:2b:5b:4a:
                    ab:79:29:d9:6d:37:0e:c1:6d:96:f2:64:ec:94:8d:
                    0f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C9:B4:B2:D0:AB:82:C9:B1:41:62:2D:96:36:0B:4F:AC:66:EA:48
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/315775B015F811ECB52DA912C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.148.0-175.29.159.255

    Signature Algorithm: sha256WithRSAEncryption
         41:fb:da:c7:71:2d:df:5d:d1:5a:15:46:f3:1c:f7:16:f1:51:
         8f:f2:ec:0c:8d:38:f0:7a:08:5f:53:da:18:ec:2e:16:23:91:
         f7:0a:b3:80:d0:b9:c8:7c:6b:44:70:3e:c2:b5:94:0b:b7:fe:
         ff:82:b7:c8:2d:44:8c:3a:f3:af:0c:95:0a:09:2f:eb:8f:3f:
         f8:33:9f:2c:71:4a:a2:0e:6f:a1:5d:b0:23:bc:07:62:bc:da:
         c8:14:f4:f6:78:da:8b:00:92:0d:eb:30:ce:92:9d:0c:18:70:
         34:ed:78:28:76:fa:ac:c6:9c:a8:61:b0:b4:dc:fd:66:80:d9:
         45:33:9e:46:0d:52:bf:56:06:c2:7b:6d:7f:76:ff:1e:87:f3:
         b3:79:f6:f4:6a:5f:12:d2:96:29:e9:da:72:df:9d:90:6b:7f:
         b4:64:33:50:ea:12:a9:d9:ec:2e:5c:ed:a8:e1:d4:14:86:7e:
         b2:2f:95:32:e7:fe:c5:5d:bc:81:7d:32:93:8e:16:46:2a:c4:
         56:30:74:a0:75:bd:9e:28:38:a5:b9:54:e4:ef:5a:6f:39:30:
         fe:78:1a:8f:5c:a0:3c:62:f7:d8:e2:0f:89:d4:bf:bd:72:78:
         f1:16:fc:79:d8:5c:d6:31:b1:10:18:0a:49:3e:f4:c1:15:52:
         36:7a:51:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:58 2026 by rpki-client