Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/AF8E04FCFDD011F0A09CBC256C6F56BC.roa
File:                     AF8E04FCFDD011F0A09CBC256C6F56BC.roa (raw, json)
Hash identifier:          73wflQOmp36ch6aTOQGjf1gpEemRE1RYS0amCkdLkng=
Subject key identifier:   6C:EF:9C:55:66:B4:7E:FB:CC:5D:10:22:BC:FC:39:1B:72:17:E6:41
Certificate issuer:       /CN=A915A8C3/serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Certificate serial:       1E
Authority key identifier: AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/AF8E04FCFDD011F0A09CBC256C6F56BC.roa
Signing time:             Sun 01 Mar 2026 05:44:17 +0000
ROA not before:           Fri 30 Jan 2026 11:41:59 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     138043
IP address blocks:        151.158.112.0/24 maxlen: 24
                          151.158.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
                          rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:31:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A8C3, serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
        Validity
            Not Before: Jan 30 11:41:59 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a3d231-aa58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:55:fc:ff:70:ad:6f:4f:06:e8:2c:a2:26:b0:
                    fd:1c:cb:8f:63:8c:36:c4:60:15:9f:19:ba:f3:cd:
                    95:e1:70:ca:fb:a0:1e:4b:f1:df:da:16:98:55:60:
                    cd:07:ad:e1:69:a8:3d:46:77:9d:3f:20:99:2c:5e:
                    76:aa:b4:2f:85:2e:94:f6:3d:ef:f6:ca:64:18:4a:
                    b5:e8:b0:2b:ea:80:ba:1b:49:b0:68:25:7a:e1:10:
                    dd:92:92:3c:47:9a:e7:25:9c:e8:d5:e2:89:03:f2:
                    e6:78:4f:87:be:0c:27:1b:fe:86:38:69:76:29:d4:
                    d6:df:8c:ec:73:89:8e:af:b7:d1:8f:89:47:ec:f4:
                    29:4a:12:92:35:66:46:12:1f:e1:1c:47:21:9e:03:
                    a1:e0:49:f4:ce:1c:e6:22:84:05:2d:79:57:0b:b4:
                    39:4f:c5:31:c3:bc:f8:8c:43:cb:65:4a:43:55:a6:
                    3a:68:28:38:4e:85:9b:97:c7:f0:21:80:e7:2d:c9:
                    7f:7d:1b:28:f9:03:ab:92:e2:8d:06:d7:a1:07:9b:
                    55:d1:54:b0:f0:c6:b4:ed:5a:1c:45:f8:c2:50:d5:
                    9a:27:66:06:86:f6:f7:90:6a:c8:b9:a3:21:bf:d1:
                    f1:eb:76:7d:d5:c9:15:b5:29:02:d9:9a:56:88:b4:
                    ab:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:EF:9C:55:66:B4:7E:FB:CC:5D:10:22:BC:FC:39:1B:72:17:E6:41
            X509v3 Authority Key Identifier:
                keyid:AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/AF8E04FCFDD011F0A09CBC256C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:04:85:7a:28:9d:2e:38:f0:81:e1:6f:10:0a:64:78:58:68:
         e8:8f:be:7e:22:6a:37:e8:97:2e:75:5e:d3:4b:24:93:62:6b:
         43:bf:f3:d7:e9:fa:e0:fa:7b:8d:a0:a6:bb:3b:22:9e:41:49:
         fd:e9:e0:2e:0a:d9:85:2f:4d:97:9d:6f:33:4b:7f:66:db:a0:
         d8:6a:df:13:4d:5a:56:5f:67:3a:52:c1:cd:fe:37:11:ce:5a:
         28:df:c1:f7:dd:47:d1:71:b3:cb:c9:a0:23:e2:16:20:71:c6:
         27:2d:74:d0:aa:4a:9b:91:a4:6d:2b:25:32:3e:9d:86:d1:b8:
         97:f4:36:18:55:55:96:08:cc:ee:0b:9a:fb:bd:9e:73:bf:67:
         c9:0e:4f:bb:80:3c:2b:0a:50:21:ca:cb:3e:56:aa:14:3b:a6:
         0f:b3:27:39:a1:75:b9:7f:d6:50:6c:29:cf:21:ca:0b:41:e2:
         19:03:45:d1:e2:da:d1:26:d1:ef:eb:11:87:e0:bd:fe:c2:41:
         36:c6:36:66:97:a4:49:d7:d9:d5:e8:2b:72:1a:2a:cd:3a:d1:
         98:ef:a7:bf:dc:2a:5d:37:7e:6b:e3:4b:f8:aa:d2:7b:1a:7d:
         cd:70:f8:b5:36:42:88:7c:dd:67:b1:e0:33:83:0f:26:f8:67:
         70:a4:a3:a8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:24:10 2026 by rpki-client