Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/C75C471CB05F11EEB81C6C79C4F9AE02.roa
File:                     C75C471CB05F11EEB81C6C79C4F9AE02.roa (raw, json)
Hash identifier:          rghw+/sYjnbFXzAMQhMSIHE8kpwm84FF22wWMv9UmVo=
Subject key identifier:   42:40:A2:3B:11:D0:57:5A:A5:C0:81:20:11:33:38:C1:CC:15:CD:89
Certificate issuer:       /CN=A916B30C/serialNumber=BF08E8E0B2A676DCAEC49D519BFEC76546C2167E
Certificate serial:       0197
Authority key identifier: BF:08:E8:E0:B2:A6:76:DC:AE:C4:9D:51:9B:FE:C7:65:46:C2:16:7E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/C75C471CB05F11EEB81C6C79C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:30:30 +0000
ROA not before:           Fri 21 Mar 2025 04:40:25 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     137000
IP address blocks:        157.10.166.0/24 maxlen: 24
                          157.10.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.crl
                          rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B30C, serialNumber=BF08E8E0B2A676DCAEC49D519BFEC76546C2167E
        Validity
            Not Before: Mar 21 04:40:25 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a41546-8fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:e3:db:7a:e0:a4:3e:65:6f:8f:54:5b:9b:
                    cb:a1:5b:79:79:5e:25:2f:db:de:0f:00:25:3b:a9:
                    ae:6b:f9:3c:9c:9b:e7:81:ec:d1:9d:e4:e2:ad:ed:
                    06:ff:c6:66:8d:c7:e8:30:fd:d2:7f:13:98:60:b3:
                    7f:d9:a6:3e:00:a0:55:da:66:a5:31:b7:cf:a1:0b:
                    a0:09:a6:f2:67:c3:8e:d8:9f:c8:aa:82:00:7a:93:
                    e9:17:46:73:e6:cc:75:29:13:8c:22:73:91:94:1b:
                    f3:cb:cc:4a:c0:34:dc:ec:99:d8:81:8a:85:21:ed:
                    11:39:49:5d:a2:ee:3b:d9:3f:1b:51:bd:bf:7a:54:
                    c6:2e:db:e2:c0:26:7c:0a:cb:db:d3:77:33:4a:78:
                    8f:e4:34:94:62:1d:80:49:50:0f:c0:25:24:45:2e:
                    df:cb:a6:0c:aa:0d:46:e5:c5:b9:b3:ee:8b:6b:49:
                    cb:d8:1c:3d:3a:a2:7f:37:74:39:a3:ac:2f:ab:79:
                    c0:2e:cb:4c:81:f2:56:4f:6c:6b:ee:73:d6:29:3c:
                    85:25:e9:83:8e:67:28:cb:07:9c:ff:6b:19:5d:92:
                    5e:e2:fd:d6:18:df:85:3b:b9:e8:70:1a:04:48:be:
                    02:25:59:14:11:80:9d:a5:b3:ee:c1:ab:e8:fa:6f:
                    6b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:40:A2:3B:11:D0:57:5A:A5:C0:81:20:11:33:38:C1:CC:15:CD:89
            X509v3 Authority Key Identifier:
                keyid:BF:08:E8:E0:B2:A6:76:DC:AE:C4:9D:51:9B:FE:C7:65:46:C2:16:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vwjo4LKmdtyuxJ1Rm_7HZUbCFn4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B30C/915CBA26B05E11EE97C78B75C4F9AE02/C75C471CB05F11EEB81C6C79C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:5d:3e:f8:c6:40:c1:e6:f1:8a:77:d9:4d:b1:e0:2a:45:c0:
         ce:67:ac:fd:04:09:5f:84:0f:53:97:6d:9b:dc:cf:2a:73:78:
         9a:f8:5e:ce:af:bd:04:4e:48:02:1e:bf:e1:9a:93:a9:e1:02:
         67:e7:86:f0:97:a6:f9:cf:51:37:47:a0:cd:fb:0e:e5:0c:08:
         ac:e6:9a:6d:81:fb:4d:bb:78:ce:5b:99:36:c9:47:85:b9:3f:
         fb:b8:a0:50:f2:8c:f3:19:74:21:db:61:da:6f:67:68:98:46:
         a9:55:26:39:17:7d:33:99:f6:93:aa:c8:20:05:06:d4:5f:f6:
         62:00:32:1c:a6:97:28:79:4f:10:6f:8a:dc:57:01:11:1f:bf:
         9b:dd:61:d7:a5:d0:9f:1d:b2:0f:3e:e6:1a:88:c6:5e:8e:55:
         2f:56:eb:55:5b:2d:62:8c:15:82:6c:74:93:70:cc:bd:c5:1f:
         6e:40:dd:10:eb:8e:37:7c:dd:95:12:9d:59:da:39:47:97:1a:
         cc:bd:96:2d:78:4a:6b:0c:fc:d4:14:40:c2:9b:0a:35:79:ae:
         e7:c6:a0:81:96:2b:6c:d8:7d:e1:9b:7e:78:f6:32:70:04:e0:
         fc:bb:98:87:c3:da:6a:d8:d5:f9:3b:55:17:23:28:4c:34:11:
         8f:7d:ba:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:04 2026 by rpki-client