Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/E47B5CC8371911F196F6B470C8833773.roa
File:                     E47B5CC8371911F196F6B470C8833773.roa (raw, json)
Hash identifier:          qBhoDtp7mp14HRwHJwctq+CWjS+yyzLGnVuJb1Tow90=
Subject key identifier:   2B:31:FE:8F:F1:AD:D2:40:15:DF:61:03:8F:46:0F:48:73:51:17:C2
Certificate issuer:       /CN=A917F429/serialNumber=76258E081F2E09C0F1FA7BB499B175970565C0EB
Certificate serial:       02
Authority key identifier: 76:25:8E:08:1F:2E:09:C0:F1:FA:7B:B4:99:B1:75:97:05:65:C0:EB
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/E47B5CC8371911F196F6B470C8833773.roa
Signing time:             Mon 13 Apr 2026 09:19:37 +0000
ROA not before:           Mon 13 Apr 2026 09:19:37 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     154497
IP address blocks:        151.158.164.0/23 maxlen: 23
                          151.158.164.0/24 maxlen: 24
                          151.158.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.crl
                          rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F429, serialNumber=76258E081F2E09C0F1FA7BB499B175970565C0EB
        Validity
            Not Before: Apr 13 09:19:37 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69dcb529-ca95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c8:56:a8:02:07:58:14:29:8f:98:c6:6e:4c:
                    79:b2:1b:a8:4c:84:64:9b:a5:a5:66:bb:2c:ec:47:
                    07:36:5d:ff:10:4e:66:2d:1e:db:85:35:91:e2:65:
                    ad:5f:92:b2:d7:fa:d6:c1:b2:58:b6:55:1f:54:15:
                    55:42:56:ac:54:11:26:f6:78:10:ca:81:4c:aa:e0:
                    78:5f:85:e6:2a:00:b8:1c:74:37:8c:be:cb:5b:e3:
                    30:00:a3:56:0b:77:97:88:9c:c4:a5:e9:25:05:bb:
                    9e:10:8d:ce:32:88:66:18:6e:fb:4f:20:73:88:cc:
                    17:bc:a7:a6:e6:f8:dd:bd:94:61:22:fb:d6:dd:be:
                    e3:7a:b5:47:09:4b:7d:d6:c1:29:60:57:59:62:97:
                    15:76:d6:68:17:03:05:55:54:93:57:7a:ac:14:e0:
                    03:d8:4d:c0:ec:ed:bc:22:93:78:ce:06:39:d4:e9:
                    9b:8c:a2:14:aa:c6:2a:1f:e4:01:45:50:93:d0:aa:
                    11:e3:cf:25:76:22:7f:9b:7c:9c:4e:f0:b7:de:29:
                    8c:27:91:34:16:ea:ce:b4:c0:9c:13:60:9d:77:9e:
                    46:e8:bf:76:7a:34:29:d0:ab:dc:a0:42:ec:01:a6:
                    6b:9e:d3:d7:28:13:56:2a:f6:99:41:6e:b0:9e:f3:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:31:FE:8F:F1:AD:D2:40:15:DF:61:03:8F:46:0F:48:73:51:17:C2
            X509v3 Authority Key Identifier:
                keyid:76:25:8E:08:1F:2E:09:C0:F1:FA:7B:B4:99:B1:75:97:05:65:C0:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/E47B5CC8371911F196F6B470C8833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:f4:0c:7a:01:76:73:58:6f:4b:4e:37:b5:3a:d4:0d:ae:a3:
         00:57:ad:b3:c2:2e:22:47:a3:b1:60:b3:84:ef:a6:f8:6c:c3:
         8a:be:0e:0f:4a:8d:b5:39:0d:9d:1b:35:b8:34:fa:97:e6:5d:
         ad:a4:e3:0a:a2:c7:7a:13:49:c3:5a:53:d5:eb:75:5c:e3:c9:
         61:b2:7b:e8:58:63:5c:1f:9d:b7:ea:35:88:5f:02:be:67:c1:
         88:04:e7:3c:80:df:23:34:1f:32:ef:d0:0a:7f:0d:7b:2a:c9:
         c0:42:3f:a0:a3:81:50:4c:0e:5b:6e:2d:87:60:98:01:90:e0:
         25:59:de:cf:26:ca:20:f1:c9:83:6b:74:cc:75:b5:7b:1e:cf:
         6f:26:04:6f:69:c4:f0:57:09:ff:98:1c:16:89:5c:13:04:3d:
         36:fd:42:f0:7b:06:be:6d:7f:91:7c:14:7b:8c:e3:56:bc:9b:
         48:b6:f7:a2:55:29:81:8a:c8:14:a2:44:47:a9:d1:9e:0d:ff:
         97:62:7b:e9:88:50:10:30:c6:49:d0:bf:b9:97:fc:e7:ee:8b:
         c7:c4:1e:5c:e3:d3:a9:22:3d:74:ab:01:23:83:fd:cb:c9:26:
         36:e7:0e:b9:6e:b0:82:04:0f:09:23:93:a6:f3:f5:25:76:bb:
         da:48:56:7c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:02 2026 by rpki-client