Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/A97CBD42A06611EFA888B57DC4F9AE02.roa
File:                     A97CBD42A06611EFA888B57DC4F9AE02.roa (raw, json)
Hash identifier:          4V1R4yBz9L+Ygkp9Jd1O9idd1/44LPhkeQiPf1Qbp1Q=
Subject key identifier:   E3:CB:AA:68:37:6F:C8:85:CD:84:79:24:BB:FE:68:A0:3E:78:C5:E0
Certificate issuer:       /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Certificate serial:       01AF
Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/A97CBD42A06611EFA888B57DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:23:48 +0000
ROA not before:           Thu 05 Feb 2026 14:23:20 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152333
IP address blocks:        157.10.226.0/23 maxlen: 23
                          157.10.226.0/24 maxlen: 24
                          157.10.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl
                          rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:17:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 431 (0x1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917530D, serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
        Validity
            Not Before: Feb  5 14:23:20 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a43de4-d446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bc:aa:b7:d5:44:21:b1:13:42:ca:bb:d9:e9:
                    4f:44:3b:16:96:2e:06:b7:1e:98:16:b6:a7:ea:51:
                    2c:93:5d:52:95:50:fb:a6:8d:69:78:a7:c4:f1:42:
                    d1:20:d9:f1:7d:cc:63:23:55:53:d5:ea:2c:0c:92:
                    78:b4:c8:39:07:01:1f:70:fb:1a:92:63:25:f2:94:
                    90:b4:75:06:f4:4f:1a:d3:35:f3:ce:bf:5b:73:0f:
                    0c:9a:04:26:4c:76:6c:1b:3a:2e:49:e4:7c:0b:8d:
                    ca:9e:b0:2f:42:7f:ec:8f:4e:43:eb:f1:d0:31:a7:
                    53:2b:22:b8:da:ec:5b:b1:8e:48:73:04:e1:18:b9:
                    2c:3e:83:6b:69:85:31:8a:14:ad:d0:a5:ef:9c:d3:
                    86:74:91:4a:2d:10:8c:36:cb:6d:15:d2:bc:19:dc:
                    8c:58:d0:f4:17:3b:c6:e7:6a:f3:3e:52:a4:bf:d3:
                    30:79:2d:a4:8f:9f:76:4e:d7:3b:56:15:28:5e:c3:
                    62:8f:14:ff:37:09:e2:83:cc:a8:5f:6a:8b:6a:9a:
                    ec:df:e3:96:5c:de:52:7f:06:9e:ad:1d:d7:c1:34:
                    5a:15:d5:ec:8d:fb:b7:7d:6c:d1:d6:e2:0e:a1:d5:
                    ad:c1:25:96:39:0f:c7:1e:5f:78:e2:09:5d:db:97:
                    0d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CB:AA:68:37:6F:C8:85:CD:84:79:24:BB:FE:68:A0:3E:78:C5:E0
            X509v3 Authority Key Identifier:
                keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/A97CBD42A06611EFA888B57DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:26:b6:ad:28:5d:a7:29:f4:48:b8:66:8f:88:48:e5:67:01:
         ab:7d:bc:91:fc:1e:34:66:1a:cc:63:a2:18:24:b1:9e:c7:06:
         1b:47:64:f3:d7:1e:a9:02:3d:4a:b3:c2:34:0a:3a:5d:f5:f1:
         45:d1:fc:5a:1a:6f:61:08:0a:a5:cc:ea:4e:c7:57:4d:7c:6a:
         68:17:6e:7a:de:4d:28:9b:fd:3c:77:c5:a3:fe:ae:53:03:f4:
         3f:81:3d:4e:18:37:62:cb:7d:44:0b:be:cc:e8:cb:40:9a:8c:
         15:14:6d:a9:fb:7a:fa:67:c0:c3:53:a7:a5:8b:8a:11:99:f5:
         4d:0b:e5:84:a9:7a:86:7b:17:04:68:26:0f:10:e9:6a:fd:25:
         80:1b:3b:27:d6:d8:9f:6d:cf:15:95:57:ea:b5:fb:8d:dc:07:
         5d:29:c2:c6:cd:f7:f3:33:81:44:2b:1f:d5:ac:d8:c3:9b:02:
         1c:09:26:fd:bf:e3:f1:56:38:95:c3:70:1f:8e:2a:73:70:81:
         9d:70:22:0f:83:40:ca:98:1c:8b:3f:d9:5d:7e:a1:ab:f3:1d:
         0b:3b:59:91:cd:60:5c:aa:b7:fc:ef:8c:84:69:63:d7:d6:84:
         12:0c:be:3d:16:6f:3e:e5:83:b6:d0:a9:16:17:4f:e5:c0:36:
         72:b3:84:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:48:52 2026 by rpki-client