Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/E7A0471CF5FE11F091C416DF536F56BC.roa
File:                     E7A0471CF5FE11F091C416DF536F56BC.roa (raw, json)
Hash identifier:          JcRJZ+Oya2bTI0k8acc/8Kk17UqhwEF0b9mX9ys3AnY=
Subject key identifier:   C2:F4:D0:A1:BC:AF:0E:E1:AB:90:93:C3:AE:12:49:A6:6F:6F:0F:49
Certificate issuer:       /CN=A9154515/serialNumber=DE6D48F0783EC753A2A57A51982232D0B737BDC6
Certificate serial:       10
Authority key identifier: DE:6D:48:F0:78:3E:C7:53:A2:A5:7A:51:98:22:32:D0:B7:37:BD:C6
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/E7A0471CF5FE11F091C416DF536F56BC.roa
Signing time:             Tue 03 Feb 2026 08:26:32 +0000
ROA not before:           Tue 03 Feb 2026 08:26:32 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     142647
IP address blocks:        151.158.46.0/24 maxlen: 24
                          151.158.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.crl
                          rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:27:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154515, serialNumber=DE6D48F0783EC753A2A57A51982232D0B737BDC6
        Validity
            Not Before: Feb  3 08:26:32 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6981b138-46db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:12:d5:6c:1f:b7:f3:a0:9b:d9:48:e0:f0:
                    7a:21:bf:72:a4:40:ef:45:90:95:72:d3:08:a0:c1:
                    c4:34:12:23:42:b2:33:49:57:fb:cf:30:66:93:13:
                    ce:15:a2:bf:b5:4b:fb:15:a3:1f:36:5a:d0:70:ac:
                    ca:06:dd:c1:af:20:a5:4d:d7:f5:9a:d2:9d:65:9d:
                    78:89:c2:ec:fe:d3:cd:dc:12:7e:89:50:7d:a1:f2:
                    61:8d:13:ed:94:f9:69:3e:2a:c4:9d:b6:39:9e:73:
                    09:5a:0d:c8:9e:57:d8:97:64:a7:a0:a7:71:ed:ec:
                    26:9c:86:de:53:9c:47:fc:5f:48:86:4e:e5:e6:c0:
                    31:ee:b6:76:3e:7c:d3:f6:9b:d4:82:7e:e7:f2:a0:
                    6d:58:62:64:53:36:63:1d:38:80:18:8b:9a:89:41:
                    c3:df:e4:11:dd:b5:c0:cd:7e:ef:82:5d:8d:78:05:
                    00:fd:e6:27:e8:c7:c7:3f:39:78:04:3b:77:6d:71:
                    a5:ab:df:1d:c3:f9:af:e4:3d:c2:86:22:a9:25:02:
                    ad:51:7f:d2:de:3e:13:e4:cd:ba:96:ab:fa:30:91:
                    fe:24:e7:19:59:79:4e:76:3a:a9:09:cc:e7:e0:ea:
                    77:23:2b:82:00:c8:2a:c0:12:c7:69:7d:59:2e:72:
                    e3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F4:D0:A1:BC:AF:0E:E1:AB:90:93:C3:AE:12:49:A6:6F:6F:0F:49
            X509v3 Authority Key Identifier:
                keyid:DE:6D:48:F0:78:3E:C7:53:A2:A5:7A:51:98:22:32:D0:B7:37:BD:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3m1I8Hg-x1OipXpRmCIy0Lc3vcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154515/92DA0812F5FE11F091DB0CDE536F56BC/E7A0471CF5FE11F091C416DF536F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:c8:ed:0a:7f:b9:2c:8a:2b:b2:ad:22:55:56:5b:18:29:6f:
         84:2f:26:6d:4b:e7:54:da:35:c2:83:01:8c:a8:18:54:c5:f4:
         76:d3:0d:81:59:b3:d8:e3:93:22:f0:7c:07:a9:50:50:85:29:
         ef:96:47:95:30:61:4f:1f:df:ff:37:53:20:7b:ff:3f:3e:de:
         b4:6a:6f:45:c7:dc:44:82:d0:84:7a:4b:a5:0e:9f:df:2d:24:
         91:78:fd:20:70:bb:7f:c8:81:ea:1c:90:8c:0b:58:5a:8f:68:
         96:14:05:90:6b:3d:84:dc:c5:78:0b:78:b7:de:c7:99:ec:e5:
         06:4a:b4:38:b2:de:b7:04:3f:6d:cc:e5:20:8a:b8:39:fb:f7:
         94:f0:5f:8b:a2:99:75:7a:75:2f:fc:4e:e8:25:52:df:24:4b:
         de:1b:16:37:0c:ea:b8:8b:e5:56:f1:e2:73:41:e1:50:30:a4:
         43:2e:6c:c9:cc:6a:96:ab:9e:75:7d:bf:fe:93:bc:ee:3c:93:
         1f:69:3b:1d:6b:25:91:86:7c:b2:23:b3:8f:ab:cb:c5:bb:c9:
         a6:36:53:f1:49:8f:c3:d5:24:ed:0e:05:28:9c:c4:b5:b5:96:
         40:a4:eb:96:87:d0:3a:37:f4:fc:f8:aa:90:43:40:f2:7d:02:
         9c:34:7e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:46:33 2026 by rpki-client