Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/91CA6CBC740111EFB5E97021C4F9AE02.roa
File:                     91CA6CBC740111EFB5E97021C4F9AE02.roa (raw, json)
Hash identifier:          VUZOzVeu3Rmihqe+9bsoHbZ1D9W7VkSJow2zZcM/4pU=
Subject key identifier:   61:1E:B8:A3:FF:0E:7F:09:6D:DE:9C:3F:13:C2:00:A9:22:52:E1:AA
Certificate issuer:       /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
Certificate serial:       0E34
Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/91CA6CBC740111EFB5E97021C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:57:46 +0000
ROA not before:           Mon 18 Aug 2025 14:50:35 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     9255
IP address blocks:        151.192.0.0/21 maxlen: 21
                          151.192.8.0/21 maxlen: 21
                          151.192.16.0/21 maxlen: 21
                          151.192.24.0/21 maxlen: 21
                          151.192.32.0/21 maxlen: 21
                          151.192.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:24:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3636 (0xe34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=466F112442C5D02E60F24699193AE215195B3BA9
        Validity
            Not Before: Aug 18 14:50:35 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4700a-8d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:21:d1:25:33:94:f5:6c:fa:04:a7:f5:b8:8a:
                    35:7c:81:d6:88:10:17:7f:de:6f:83:83:54:f0:83:
                    46:fc:26:b1:0b:92:5b:77:df:65:04:4f:7b:a3:56:
                    c0:14:01:c4:1a:17:3d:81:c4:68:03:59:6b:06:74:
                    20:c0:87:d6:e6:76:2a:9a:e7:12:85:98:44:d4:38:
                    a8:e8:69:9f:b1:ea:d5:82:86:16:12:e6:95:bd:5c:
                    a7:a5:c9:ef:85:57:88:3e:ff:04:d1:c4:5a:56:c6:
                    29:db:7b:be:cb:a8:e5:7c:35:12:0a:ef:f4:d1:67:
                    60:f8:22:57:6b:1c:62:0c:d9:5d:b7:ff:c2:7e:a3:
                    92:b0:13:a1:c9:35:ad:d8:aa:42:66:98:44:b7:85:
                    55:4a:9d:30:8f:6f:3f:ca:23:eb:b0:07:15:00:8a:
                    c0:b9:35:6e:83:c6:31:f4:68:df:1a:e1:ef:a1:5f:
                    38:b3:c3:1d:54:b4:07:3c:ee:7e:33:4c:30:1e:49:
                    4b:b6:0c:28:a0:4f:c1:07:0c:a5:12:73:8c:fe:08:
                    1b:d5:87:96:29:4a:f7:df:83:56:d9:f0:6c:b7:98:
                    9b:04:02:81:38:42:6d:3f:90:25:2d:f5:29:d7:93:
                    01:31:85:8b:68:33:7e:da:72:02:9e:e4:d6:a1:72:
                    37:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1E:B8:A3:FF:0E:7F:09:6D:DE:9C:3F:13:C2:00:A9:22:52:E1:AA
            X509v3 Authority Key Identifier:
                keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/91CA6CBC740111EFB5E97021C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.192.0.0-151.192.39.255
                  151.192.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:24:12:e4:81:f6:fb:1d:37:83:d3:e4:e6:10:f6:bf:de:d8:
         b2:03:c8:0f:79:8b:a4:0e:38:04:2c:de:25:e4:02:c0:5e:e9:
         e4:ae:66:cb:95:38:95:8c:96:f4:54:e1:f6:5e:50:f2:68:39:
         ea:4e:31:5b:dc:14:ae:98:31:72:01:ba:9e:27:91:cf:8b:ed:
         6b:8b:3c:71:b2:d8:58:b7:89:78:23:34:d3:ad:7f:da:d1:9c:
         38:77:62:e8:86:5d:1b:3b:55:9c:de:ee:3c:4c:ca:9a:1d:4f:
         7b:45:c1:0b:b9:43:74:8b:14:02:7d:60:77:17:17:b5:2d:26:
         00:14:d2:94:56:fb:61:51:87:e1:9d:ce:44:8f:e0:30:5c:08:
         0b:83:21:51:b6:93:f5:19:5b:51:94:b4:2b:b3:44:46:a8:93:
         58:8d:38:7f:0a:44:4f:b1:89:5c:7f:c7:9a:29:a2:ea:35:a8:
         96:41:73:50:23:c6:97:e5:98:1e:59:4b:ea:9c:c8:31:f6:12:
         59:83:be:21:0b:4f:d8:7f:7b:40:27:29:ba:48:a8:fc:0f:58:
         74:6f:37:de:3f:ae:e5:7c:36:94:48:f3:02:8f:7b:dc:88:a5:
         b4:14:8e:07:89:13:3e:23:4d:70:92:89:2a:4b:7d:d4:29:ab:
         bf:13:38:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:30 2026 by rpki-client