Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/1AD9E28ECA9411EE9062590AC4F9AE02.roa
File:                     1AD9E28ECA9411EE9062590AC4F9AE02.roa (raw, json)
Hash identifier:          +GxtEiK/2JHoQ+RSfx+gTqv33OwnaZoeI204eB5WOuM=
Subject key identifier:   C4:F4:65:0D:81:BB:78:23:DD:3B:3D:FA:61:19:B9:66:9D:1E:36:59
Certificate issuer:       /CN=A915B3AE/serialNumber=83AA58897A151F4ACB7384F0B55F11ED9D7AE17F
Certificate serial:       018A
Authority key identifier: 83:AA:58:89:7A:15:1F:4A:CB:73:84:F0:B5:5F:11:ED:9D:7A:E1:7F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/1AD9E28ECA9411EE9062590AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:07:51 +0000
ROA not before:           Sat 21 Feb 2026 03:24:17 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     152466
IP address blocks:        157.15.190.0/24 maxlen: 24
                          160.30.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.crl
                          rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B3AE, serialNumber=83AA58897A151F4ACB7384F0B55F11ED9D7AE17F
        Validity
            Not Before: Feb 21 03:24:17 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a43a27-70c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:43:11:49:53:ea:b8:46:4b:bf:37:92:9d:
                    85:b7:94:8c:3c:37:9b:9b:da:49:b2:cc:2d:14:f8:
                    7c:70:5f:ee:a9:fc:24:27:73:c0:ef:27:2c:fb:14:
                    fb:15:af:fc:a4:a5:db:79:39:b6:6a:43:ae:98:ba:
                    b5:93:53:0b:84:9b:e7:1c:ef:4b:be:8d:10:b6:cd:
                    6c:52:e0:86:11:01:97:c8:70:68:8c:32:11:8f:53:
                    18:07:45:32:e5:bf:f9:b6:61:6d:5e:85:f1:3d:58:
                    1c:2f:fa:25:ec:ea:a1:f2:40:d2:81:21:9f:d9:6e:
                    f4:1f:e7:8b:3d:6e:57:17:09:e4:65:d9:3c:d9:7d:
                    4f:9d:5d:ce:44:d8:5f:44:d6:6c:b6:b6:57:80:6f:
                    23:11:4f:eb:e7:7b:c6:77:65:f4:1d:39:91:49:4d:
                    ba:b9:c8:20:04:ad:84:25:4a:0a:8c:24:68:6e:05:
                    7c:c5:15:e6:46:99:50:13:16:63:fd:62:a1:84:f6:
                    74:40:7f:fc:a5:e1:6b:1d:cc:ff:d0:2f:d2:77:29:
                    e3:ab:9e:ef:e7:88:c7:f9:90:36:c6:d0:93:a0:56:
                    c3:92:15:7e:18:e4:3b:a1:52:64:ea:04:29:56:6b:
                    8c:b9:9b:17:1b:d5:2b:87:a2:dd:19:46:21:6f:7c:
                    01:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F4:65:0D:81:BB:78:23:DD:3B:3D:FA:61:19:B9:66:9D:1E:36:59
            X509v3 Authority Key Identifier:
                keyid:83:AA:58:89:7A:15:1F:4A:CB:73:84:F0:B5:5F:11:ED:9D:7A:E1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/1AD9E28ECA9411EE9062590AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.190.0/24
                  160.30.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:cf:97:41:e4:9d:12:93:a8:cc:f5:96:bc:03:88:11:a6:ed:
         7b:12:1f:61:c2:5e:e9:86:8c:5c:e3:b8:a2:b2:82:b7:c4:3a:
         5d:9c:26:3c:8a:b3:59:ef:02:4b:19:82:09:a6:3e:0b:9e:2b:
         3a:ce:ae:16:1c:b0:4c:9f:e8:ae:af:77:e5:73:b3:13:f8:0c:
         ee:38:c8:cf:94:ef:8a:3c:02:f2:95:f3:68:66:eb:5c:08:2e:
         1a:ae:8c:29:d5:c1:00:43:71:3b:90:73:e4:c6:e8:a6:32:64:
         46:6e:d4:5c:31:c2:ec:ab:cc:80:39:ba:24:ba:09:cc:0a:03:
         bf:3f:be:ba:9e:81:9f:b6:e0:eb:a6:b6:51:db:c9:a7:2b:1e:
         d8:f1:d9:85:38:c5:ad:9e:5b:cd:4c:99:0c:dd:40:80:a7:a5:
         aa:96:98:29:56:8c:77:73:ba:fd:fa:0b:ad:bd:14:37:8f:2d:
         81:19:82:2e:5d:73:46:84:45:4c:f3:1c:5b:73:98:ad:6c:c6:
         9b:1f:11:f2:32:85:0b:15:ee:9d:54:a4:ea:96:37:27:33:5c:
         75:7a:9f:6b:58:15:79:6a:f3:2d:40:f5:bb:97:dc:d3:17:70:
         45:55:3e:21:08:d6:d8:8c:7c:94:2f:3b:66:2c:ef:55:26:56:
         9f:8f:71:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:36 2026 by rpki-client