Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/0C708FB4C67E11EE87B34958C4F9AE02.roa
File:                     0C708FB4C67E11EE87B34958C4F9AE02.roa (raw, json)
Hash identifier:          mKzgFGKwcJVrSKlDmKPyRVAoUhILwDzyVcNCsGkjzBs=
Subject key identifier:   38:64:84:1F:84:04:F4:D8:7D:9E:5D:FE:EF:D8:AA:D7:7E:30:01:02
Certificate issuer:       /CN=A91764E1/serialNumber=70E88557B0C082C9B06ECF59B8F28A7703A63801
Certificate serial:       0181
Authority key identifier: 70:E8:85:57:B0:C0:82:C9:B0:6E:CF:59:B8:F2:8A:77:03:A6:38:01
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/0C708FB4C67E11EE87B34958C4F9AE02.roa
Signing time:             Wed 25 Feb 2026 03:24:03 +0000
ROA not before:           Wed 25 Feb 2026 03:24:03 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152456
IP address blocks:        157.15.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl
                          rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 385 (0x181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91764E1, serialNumber=70E88557B0C082C9B06ECF59B8F28A7703A63801
        Validity
            Not Before: Feb 25 03:24:03 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=699e6b52-6137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e3:d5:ae:b9:eb:f8:85:e8:e5:d4:d9:a6:9b:
                    2c:38:ce:e0:93:80:5e:d9:f2:bc:cf:3c:b8:cd:6f:
                    7a:0a:58:ef:7d:35:c2:2b:41:d2:22:89:0b:38:2f:
                    32:fe:37:e1:13:de:5e:04:cf:03:a9:f7:e3:83:97:
                    c7:75:8d:e8:90:9c:e7:c8:0a:49:8d:46:bd:2d:29:
                    cb:81:9b:02:cd:87:78:8f:82:93:75:1d:1f:7a:12:
                    77:9a:a9:42:4e:43:eb:c9:1f:fe:53:c1:03:db:00:
                    f2:a3:41:98:5f:37:26:de:59:73:35:94:a8:e3:c6:
                    cd:b6:5e:0f:51:68:03:c3:03:86:b6:67:56:89:85:
                    64:a1:80:35:84:2b:a0:2f:07:cf:a4:63:57:a4:14:
                    7e:61:79:cf:a9:37:f7:71:db:c8:15:1d:1c:c6:9b:
                    d5:48:8d:ae:7f:a9:67:39:1b:16:d5:ad:f9:3a:65:
                    73:b3:09:c9:37:89:86:9b:8c:d5:0b:60:de:58:c8:
                    f8:08:71:f0:4b:02:ed:d2:1c:17:23:93:e3:b9:bb:
                    46:b1:7c:40:1d:57:74:98:46:61:38:a9:84:53:2b:
                    53:b2:27:ee:3b:25:24:17:be:73:f9:16:15:b0:1e:
                    77:94:3b:99:63:29:0c:7b:d3:47:48:05:0c:7f:0c:
                    f4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:64:84:1F:84:04:F4:D8:7D:9E:5D:FE:EF:D8:AA:D7:7E:30:01:02
            X509v3 Authority Key Identifier:
                keyid:70:E8:85:57:B0:C0:82:C9:B0:6E:CF:59:B8:F2:8A:77:03:A6:38:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/0C708FB4C67E11EE87B34958C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:c0:b3:fa:18:e4:b6:0b:ed:2a:9a:ca:4b:26:98:31:1c:3f:
         2c:b5:83:e1:ae:9d:4a:5b:db:ab:d6:1a:c1:47:5e:76:74:1f:
         16:45:5c:13:03:20:4d:d0:24:7b:4d:c0:04:d6:1b:02:99:46:
         f6:b8:76:e7:7c:4d:88:90:c1:e1:6c:72:1b:ee:b8:08:18:4a:
         2e:1a:1b:ee:0e:9e:74:b2:a7:82:d6:50:5e:dd:3e:23:55:b7:
         fe:e6:4a:6f:2e:df:56:39:32:83:b0:91:51:7a:84:ab:c7:32:
         cc:15:26:a3:44:96:f2:f2:31:af:2d:cb:99:f6:73:28:30:77:
         80:86:3c:91:37:27:81:db:d8:d3:1a:68:47:72:81:95:28:a4:
         ca:74:85:18:76:2f:c6:02:7f:e1:89:39:64:b5:be:8d:87:04:
         68:ab:23:dd:b3:44:40:bf:d9:17:36:8b:08:e3:56:99:1e:b4:
         f2:03:db:a5:71:91:6b:01:79:7e:69:05:bb:40:08:60:7d:62:
         49:53:a9:67:29:c5:f5:31:38:23:d3:bc:42:e5:08:a1:4b:88:
         e2:5d:49:64:d9:49:ae:37:37:58:c6:3f:44:24:5d:b2:02:27:
         72:75:45:2f:94:98:eb:1f:4e:40:10:68:3a:72:e7:27:63:45:
         6d:9f:26:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:29 2026 by rpki-client