Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/846CC09CFDD011F0A25053256C6F56BC.roa
File:                     846CC09CFDD011F0A25053256C6F56BC.roa (raw, json)
Hash identifier:          7ja/uUA5rNPy4R9clAJYgMLZ/ert4qYvj2qbqmL8TeI=
Subject key identifier:   2C:E5:F4:EA:0F:8E:97:38:9C:73:EF:43:15:09:6E:94:C0:1E:09:5D
Certificate issuer:       /CN=A915A8C3/serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Certificate serial:       1D
Authority key identifier: AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/846CC09CFDD011F0A25053256C6F56BC.roa
Signing time:             Sun 01 Mar 2026 05:44:16 +0000
ROA not before:           Fri 30 Jan 2026 11:40:46 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     140077
IP address blocks:        151.158.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
                          rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:31:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A8C3, serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
        Validity
            Not Before: Jan 30 11:40:46 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a3d230-92d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9b:49:45:d6:2c:ca:34:3e:92:c4:b2:4c:e1:
                    be:43:94:5b:47:d9:9b:6e:ce:61:fa:75:23:31:85:
                    2e:53:d0:9e:3e:31:bd:8e:dd:48:ef:3d:55:59:02:
                    cf:66:61:6d:5c:aa:9b:4d:fc:ae:b0:42:02:ea:54:
                    c5:78:78:11:05:70:a1:80:7b:8e:2e:6d:71:03:3d:
                    3e:04:18:8e:cf:87:be:6b:52:3f:d2:15:87:e9:33:
                    d3:4c:6b:f6:04:5b:85:30:44:07:6a:a7:6f:8f:00:
                    af:d1:ba:75:6f:78:f1:a8:3b:a8:b7:4d:6c:1a:38:
                    3e:40:cd:0c:e6:85:39:f4:d5:ba:74:fd:08:2c:b7:
                    fa:36:05:37:0c:c9:93:e5:92:ef:7c:f0:93:7e:18:
                    7b:48:08:cf:c3:20:f0:ed:03:c7:c5:7c:3b:71:11:
                    27:01:32:d9:a3:e1:48:e3:4a:70:a3:11:22:e7:1e:
                    bb:31:67:76:46:1c:52:df:00:10:91:75:ed:1b:da:
                    7f:80:a6:4e:b4:6f:ec:02:fb:1e:da:85:55:7e:0a:
                    46:0c:8c:cf:70:64:d5:2e:62:47:47:22:e9:42:ad:
                    1b:e5:dd:3c:81:b7:1e:0b:ea:06:97:06:67:af:75:
                    10:a4:d6:94:7b:5c:59:18:c9:20:8d:58:62:ee:9b:
                    45:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E5:F4:EA:0F:8E:97:38:9C:73:EF:43:15:09:6E:94:C0:1E:09:5D
            X509v3 Authority Key Identifier:
                keyid:AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/846CC09CFDD011F0A25053256C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:d7:26:48:85:ec:57:3c:1c:73:b1:cc:bc:10:7e:43:38:c8:
         2f:9f:e8:ab:b4:1c:0e:27:2c:a2:fc:f6:53:43:28:5e:cf:fd:
         4e:32:bf:75:eb:0e:9d:d6:fb:2a:50:1b:f5:fc:5d:6a:1c:da:
         26:ea:95:d7:0f:81:b0:16:c5:30:e1:56:10:a0:41:c6:49:cd:
         86:65:90:86:63:41:fb:dd:77:73:02:bb:22:e3:93:d1:89:be:
         d0:87:01:48:54:7a:8f:c7:33:c8:76:c9:90:8a:65:de:0a:f2:
         9b:1a:3d:ab:4e:90:dd:10:79:76:6c:fb:d9:66:6c:69:4e:9f:
         be:1b:bc:a9:83:40:35:3a:16:06:5d:55:df:4b:7c:11:fd:28:
         26:25:ba:77:a8:2d:d1:d4:88:18:a4:58:e3:69:6e:97:3f:54:
         ee:13:59:8b:9b:41:7c:fb:07:2e:70:c7:19:44:20:55:e7:30:
         59:b8:f4:db:a7:8d:d9:0c:fe:11:43:21:56:cd:74:f3:d3:86:
         e7:af:9f:4d:50:bf:78:7a:03:cd:cf:27:21:5b:14:cc:65:ef:
         7a:cc:34:7d:02:c4:e2:3b:7e:34:17:14:f1:6b:92:69:0a:ca:
         09:a7:17:6d:36:ee:aa:7d:99:c5:67:d2:94:5f:72:ca:01:23:
         b4:a5:6c:a6
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QThDMzExMC8GA1UEBRMoQUUzOUM5QUMyMTI3RkVBNzBFQTMyNjBFQzE2RDIwODgz
QzU1NzVGNTAeFw0yNjAxMzAxMTQwNDZaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkMjMwLTkyZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4m0lF1izKND6SxLJM4b5DlFtH2ZtuzmH6dSMxhS5T0J4+Mb2O3UjvPVVZAs9m
YW1cqptN/K6wQgLqVMV4eBEFcKGAe44ubXEDPT4EGI7Ph75rUj/SFYfpM9NMa/YE
W4UwRAdqp2+PAK/RunVvePGoO6i3TWwaOD5AzQzmhTn01bp0/Qgst/o2BTcMyZPl
ku988JN+GHtICM/DIPDtA8fFfDtxEScBMtmj4UjjSnCjESLnHrsxZ3ZGHFLfABCR
de0b2n+Apk60b+wC+x7ahVV+CkYMjM9wZNUuYkdHIulCrRvl3TyBtx4L6gaXBmev
dRCk1pR7XFkYySCNWGLum0VXAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQULOX06g+O
lzicc+9DFQlulMAeCV0wHwYDVR0jBBgwFoAUrjnJrCEn/qcOoyYOwW0giDxVdfUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBOEMzL0ZGOTQ3Qzg0RkRD
RjExRjA4QUZDNTAwMTZDNkY1NkJDL3JqbkpyQ0VuX3FjT295WU93VzBnaUR4VmRm
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvcmpuSnJDRW5fcWNPb3lZT3dXMGdpRHhWZGZVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QThDMy9GRjk0N0M4NEZEQ0YxMUYwOEFGQzUwMDE2QzZGNTZCQy84NDZDQzA5Q0ZE
RDAxMUYwQTI1MDUzMjU2QzZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACXnnEwDQYJKoZIhvcNAQELBQADggEBAG3XJkiF7Fc8HHOxzLwQfkM4
yC+f6Ku0HA4nLKL89lNDKF7P/U4yv3XrDp3W+ypQG/X8XWoc2ibqldcPgbAWxTDh
VhCgQcZJzYZlkIZjQfvdd3MCuyLjk9GJvtCHAUhUeo/HM8h2yZCKZd4K8psaPatO
kN0QeXZs+9lmbGlOn74bvKmDQDU6FgZdVd9LfBH9KCYluneoLdHUiBikWONpbpc/
VO4TWYubQXz7By5wxxlEIFXnMFm49NunjdkM/hFDIVbNdPPThuevn01Qv3h6A83P
JyFbFMxl73rMNH0CxOI7fjQXFPFrkmkKygmnF2027qp9mcVn0pRfcsoBI7SlbKY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:53:02 2026 by rpki-client