Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/395803C8CDD011EEB4E50681C4F9AE02.roa
File:                     395803C8CDD011EEB4E50681C4F9AE02.roa (raw, json)
Hash identifier:          yp4A2ISsOVYuTmO6d9hWCCMDfhvrp6UrWBSAOlQdSqQ=
Subject key identifier:   09:4B:85:6B:4F:02:A9:AC:13:ED:78:32:16:73:BB:2C:95:68:95:29
Certificate issuer:       /CN=A9178C1E/serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C
Certificate serial:       01A1
Authority key identifier: F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/395803C8CDD011EEB4E50681C4F9AE02.roa
Signing time:             Fri 17 Apr 2026 04:37:24 +0000
ROA not before:           Fri 17 Apr 2026 04:37:24 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     63801
IP address blocks:        157.15.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl
                          rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178C1E, serialNumber=F93EFAA6A6D054AE997C8A3CFF25F169C36F8A0C
        Validity
            Not Before: Apr 17 04:37:24 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e1b903-dc97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a3:84:bf:4b:3f:4a:2e:33:bf:5d:c9:da:40:
                    70:36:b6:78:1b:3b:d8:9a:8a:b4:76:d9:df:5a:d4:
                    05:e4:c7:1e:7d:df:86:b8:fb:69:7f:f0:f9:93:74:
                    c0:ac:f6:9d:5c:ea:f5:ac:35:52:e3:28:d9:dc:7f:
                    e9:01:20:ab:08:fd:6c:d0:da:70:04:f7:28:f3:b1:
                    f1:9d:6b:c6:a6:90:4d:02:84:9e:32:67:03:56:b8:
                    49:a9:92:bb:41:4a:99:32:34:64:1e:e9:38:fb:05:
                    70:a1:2b:b2:0c:52:62:dd:40:15:2e:4f:d2:49:e8:
                    a3:88:06:da:cf:e1:06:f6:88:2d:28:ca:e5:ba:b6:
                    d1:3f:42:20:ee:2a:28:dc:d1:19:96:c2:8e:79:f5:
                    d4:bd:c8:c7:86:66:f7:7f:ad:4c:28:3f:26:9c:23:
                    3c:d2:d5:b1:63:66:ec:1d:e4:40:a5:9d:95:17:e8:
                    dc:9e:47:41:68:02:db:0e:76:8b:13:22:90:b3:f2:
                    26:fb:11:28:b0:cc:42:f7:55:c8:8e:c5:5d:fe:1f:
                    8f:ea:60:8a:1d:ca:5c:94:01:fe:af:bc:b5:90:e7:
                    40:47:70:d6:95:52:e8:ff:ef:9c:8f:e7:9a:b0:09:
                    b1:8b:28:2c:af:a9:c7:b4:59:23:a8:c3:9a:36:0d:
                    ec:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4B:85:6B:4F:02:A9:AC:13:ED:78:32:16:73:BB:2C:95:68:95:29
            X509v3 Authority Key Identifier:
                keyid:F9:3E:FA:A6:A6:D0:54:AE:99:7C:8A:3C:FF:25:F1:69:C3:6F:8A:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/-T76pqbQVK6ZfIo8_yXxacNvigw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-T76pqbQVK6ZfIo8_yXxacNvigw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/B989F8A2C64711EE9D68EB7FC4F9AE02/395803C8CDD011EEB4E50681C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:af:80:8d:07:0e:be:39:78:f4:be:cf:ca:ac:e6:cd:d2:a9:
         ba:ff:9d:73:98:8a:07:8f:27:3d:22:c5:b3:92:f1:fe:fd:45:
         c2:93:88:29:dd:b5:d0:ba:95:30:f4:75:39:13:da:ed:6e:02:
         0d:dc:06:e8:d9:92:0c:c8:0e:95:50:30:03:e4:26:e3:8f:43:
         be:57:42:be:49:25:7b:ca:e9:67:70:87:03:d7:fa:35:94:e5:
         f2:07:ff:50:db:2e:47:38:f4:6b:2b:37:49:bc:fe:ed:a1:8d:
         bc:e4:5c:1d:6e:52:a7:88:2f:0f:ea:27:61:c6:de:1d:64:b0:
         51:c7:30:c4:ec:5a:e6:02:ca:b1:3b:f0:9a:89:2c:18:58:10:
         a1:8d:ff:5e:83:a8:36:13:fb:03:84:7c:d9:08:e2:e2:43:a9:
         0d:4a:1f:9d:7a:95:7a:48:00:f7:a7:4f:dc:6b:5d:a5:88:ca:
         61:fd:57:cf:1e:7b:0d:61:10:21:98:ce:2b:26:d5:a8:e5:01:
         bb:72:53:c4:0e:1f:32:f7:4e:39:df:2c:ff:3e:34:c8:e9:f6:
         4b:77:4a:45:dd:28:95:ea:3b:c6:24:77:0c:98:12:a8:08:c1:
         ab:3e:61:85:2f:5c:e6:79:55:fa:69:7b:d1:f2:c9:57:a0:7f:
         fa:46:f4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:05:13 2026 by rpki-client