Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/122C6942D9CE11EEB6EA7F6CC4F9AE02.roa
File:                     122C6942D9CE11EEB6EA7F6CC4F9AE02.roa (raw, json)
Hash identifier:          PpBOU4X+uS2a94ESgw3q/TNVKHg9vw4HoislmYncmAU=
Subject key identifier:   39:0B:C3:B5:66:CA:59:89:71:7A:92:0A:53:CE:95:19:19:36:42:83
Certificate issuer:       /CN=A9169BAF/serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93
Certificate serial:       0195
Authority key identifier: AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/122C6942D9CE11EEB6EA7F6CC4F9AE02.roa
Signing time:             Sat 11 Apr 2026 04:37:07 +0000
ROA not before:           Sat 11 Apr 2026 04:37:07 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     152107
IP address blocks:        157.20.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl
                          rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:05:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169BAF, serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93
        Validity
            Not Before: Apr 11 04:37:07 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d9cff2-0d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ef:13:1f:e5:6a:8c:0c:cf:c5:48:8b:ed:89:
                    a8:7c:5c:7f:76:04:ca:37:be:4e:5d:39:4a:4f:1f:
                    3e:e9:0f:02:af:bd:0e:11:a4:8a:0d:b7:ae:7a:17:
                    cc:12:36:0e:c8:0a:a5:5d:bd:ef:93:8c:f7:4a:b3:
                    23:7d:f0:e6:c6:2b:ae:88:06:e9:69:7f:dd:6f:77:
                    ea:84:fa:51:5c:b8:48:1e:0a:ee:f2:b8:72:c3:ea:
                    e5:81:41:7b:76:89:9e:6f:d5:61:48:e5:65:37:ef:
                    2c:ab:4b:3b:b4:f7:63:df:fa:17:83:ab:5f:e0:76:
                    09:4d:20:8e:39:66:75:92:7f:d4:2b:fe:cc:c0:9f:
                    c5:db:cf:26:9c:9d:67:35:a8:75:e8:5f:21:87:44:
                    52:60:a0:a3:fa:44:3d:a9:5f:b5:62:63:f9:f7:f4:
                    df:92:56:cb:7c:c6:56:2d:86:58:78:72:81:30:ad:
                    de:1c:b6:25:47:19:c7:ea:11:8c:e5:cb:37:58:50:
                    dc:8a:e2:06:e9:35:b1:28:40:6a:a2:5b:d1:41:d6:
                    72:97:04:4c:f7:a4:dc:94:72:19:2d:11:63:34:f3:
                    2c:25:d5:2d:3e:ac:8d:e9:fb:07:be:ec:cc:24:1f:
                    87:3a:d8:df:81:03:3b:f8:36:0a:0c:02:f7:96:61:
                    5b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0B:C3:B5:66:CA:59:89:71:7A:92:0A:53:CE:95:19:19:36:42:83
            X509v3 Authority Key Identifier:
                keyid:AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/122C6942D9CE11EEB6EA7F6CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:e4:ce:e4:91:e8:40:31:83:4e:16:92:59:b4:c8:b2:7d:49:
         f7:50:7c:65:e9:94:0d:5e:f5:2a:aa:bc:95:e8:01:85:55:25:
         e9:c0:2b:3d:f8:4e:be:8b:da:b8:01:f5:ef:a9:e3:24:ad:19:
         12:a6:8b:26:43:2b:d6:3f:82:4f:31:68:13:cf:52:ff:14:b7:
         2f:1a:87:57:d5:61:d8:35:ad:30:41:f3:c7:98:b8:f9:c8:d3:
         d2:66:63:95:80:de:be:20:2d:f4:d6:bb:aa:37:c1:b5:4f:57:
         d8:23:8a:62:00:a1:8c:b6:a2:e5:15:ad:41:05:b9:04:6c:f8:
         f2:00:99:45:80:1c:33:de:ea:37:c8:1d:fd:75:34:1d:2e:93:
         38:6b:7f:fa:14:35:fb:9b:ca:02:71:c5:3b:78:9d:43:05:2a:
         8a:33:07:59:de:02:65:4b:69:db:7b:44:06:e4:ab:81:96:d0:
         a0:93:3e:49:b9:b8:16:4a:8a:23:1a:e2:49:a4:fe:20:2d:52:
         46:d3:6c:4e:6a:02:c3:49:9e:62:2b:ea:2a:ef:47:c6:e3:8d:
         af:d2:1d:46:b3:d8:02:5f:bd:44:f5:b8:04:05:a6:45:e8:3b:
         58:4a:7f:19:df:7c:d0:ea:5a:b9:c2:cf:ca:c4:31:94:87:4e:
         9e:f1:5e:48
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlCQUYxMTAvBgNVBAUTKEFEMTYxMjQwRTk3QTMyRDEwMzA5OUJBNzhBMDI4Q0Qw
OUY1RjVCOTMwHhcNMjYwNDExMDQzNzA3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQ5Y2ZmMi0wZDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv+8TH+VqjAzPxUiL7YmofFx/dgTKN75OXTlKTx8+6Q8Cr70OEaSKDbeuehfM
EjYOyAqlXb3vk4z3SrMjffDmxiuuiAbpaX/db3fqhPpRXLhIHgru8rhyw+rlgUF7
domeb9VhSOVlN+8sq0s7tPdj3/oXg6tf4HYJTSCOOWZ1kn/UK/7MwJ/F288mnJ1n
Nah16F8hh0RSYKCj+kQ9qV+1YmP59/TfklbLfMZWLYZYeHKBMK3eHLYlRxnH6hGM
5cs3WFDciuIG6TWxKEBqolvRQdZylwRM96TclHIZLRFjNPMsJdUtPqyN6fsHvuzM
JB+HOtjfgQM7+DYKDAL3lmFbkwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDkLw7Vm
ylmJcXqSClPOlRkZNkKDMB8GA1UdIwQYMBaAFK0WEkDpejLRAwmbp4oCjNCfX1uT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJBRi9BRUY3MDQ5MEQ5
QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10RURDWnVuaWdLTTBKOWZX
NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3JSWVNRT2w2TXRFRENadW5pZ0tNMEo5Zlc1TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjlCQUYvQUVGNzA0OTBEOUJFMTFFRUFDNUJEMzZEQzRGOUFFMDIvMTIyQzY5NDJE
OUNFMTFFRUI2RUE3RjZDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAnRSPMA0GCSqGSIb3DQEBCwUAA4IBAQCM5M7kkehAMYNOFpJZtMiy
fUn3UHxl6ZQNXvUqqryV6AGFVSXpwCs9+E6+i9q4AfXvqeMkrRkSposmQyvWP4JP
MWgTz1L/FLcvGodX1WHYNa0wQfPHmLj5yNPSZmOVgN6+IC301ruqN8G1T1fYI4pi
AKGMtqLlFa1BBbkEbPjyAJlFgBwz3uo3yB39dTQdLpM4a3/6FDX7m8oCccU7eJ1D
BSqKMwdZ3gJlS2nbe0QG5KuBltCgkz5JubgWSoojGuJJpP4gLVJG02xOagLDSZ5i
K+oq70fG442v0h1Gs9gCX71E9bgEBaZF6DtYSn8Z33zQ6lq5ws/KxDGUh06e8V5I
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:27:50 2026 by rpki-client