Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/F0674762B6B611EE8EF4443AC4F9AE02.roa
File:                     F0674762B6B611EE8EF4443AC4F9AE02.roa (raw, json)
Hash identifier:          3zNJLZO/qJtdGff2Nu7tPbkZZVj2p+PBpjescn5bpo8=
Subject key identifier:   E2:F1:0D:58:62:51:24:8B:8F:53:75:CD:0E:BB:26:2F:1F:CB:51:3F
Certificate issuer:       /CN=A918497E/serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
Certificate serial:       0198
Authority key identifier: 33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/F0674762B6B611EE8EF4443AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:42:13 +0000
ROA not before:           Sun 01 Mar 2026 05:25:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     147006
IP address blocks:        157.10.242.0/23 maxlen: 23
                          157.10.242.0/24 maxlen: 24
                          157.10.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl
                          rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918497E, serialNumber=337BA311FDF7B70527B57EC0380F1FBBFA358AEF
        Validity
            Not Before: Mar  1 05:25:08 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3dfc5-cbb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:b2:90:f4:a0:5a:36:e1:f0:2e:ae:32:3a:
                    fc:56:5c:48:1f:a0:21:72:5d:54:79:3e:09:c3:83:
                    10:2e:ea:f1:a3:75:e9:d4:32:16:14:f1:78:76:7f:
                    d2:ad:ee:ba:eb:ea:80:e0:48:f6:41:f8:83:7d:9a:
                    a4:96:37:c9:e6:d2:b3:02:a3:cc:10:c4:9e:0d:d7:
                    8b:22:75:3c:e1:3b:be:95:fa:8f:5a:2f:44:22:c7:
                    ad:bc:62:13:b5:33:29:49:48:18:0a:1c:bf:64:e9:
                    02:40:69:bc:52:7f:71:41:eb:74:b9:03:98:f9:77:
                    b6:b5:80:d9:64:12:f4:06:ff:d1:06:be:f7:c3:08:
                    34:83:72:30:9a:5f:9d:3e:1b:6d:ca:67:11:72:f4:
                    82:e8:69:5f:58:95:f0:1a:b7:f2:2c:ca:8b:d6:f5:
                    23:53:cb:84:5e:2f:8b:6c:7f:b0:4f:79:89:e0:ca:
                    cb:d4:b2:e9:17:72:0a:98:1f:cd:62:0f:81:d2:ee:
                    cf:b1:96:25:7e:3a:79:55:10:2e:1f:62:c7:ab:55:
                    bd:6a:f3:b8:c0:e5:79:d8:ac:90:5f:24:15:cd:78:
                    3a:11:d2:94:22:7c:6c:9a:ac:25:b8:01:39:e3:ee:
                    81:33:68:f1:9f:66:12:07:e5:e4:5d:ee:b3:fa:76:
                    c3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F1:0D:58:62:51:24:8B:8F:53:75:CD:0E:BB:26:2F:1F:CB:51:3F
            X509v3 Authority Key Identifier:
                keyid:33:7B:A3:11:FD:F7:B7:05:27:B5:7E:C0:38:0F:1F:BB:FA:35:8A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/M3ujEf33twUntX7AOA8fu_o1iu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3ujEf33twUntX7AOA8fu_o1iu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918497E/F21212FCB69A11EE8D8DF60EC4F9AE02/F0674762B6B611EE8EF4443AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:29:ac:33:c2:a5:58:82:3b:3f:14:65:c8:d6:03:f5:66:ca:
         33:91:e1:5d:09:d1:81:cd:a2:1a:56:82:4b:2a:10:91:ed:a8:
         8c:c2:cf:92:18:d2:9c:0e:2d:f9:08:39:cb:fb:bd:96:6d:00:
         f3:83:27:37:8c:04:22:80:ce:80:7b:33:34:f3:fd:56:47:3f:
         97:ef:f5:fd:8e:08:fb:f6:8c:76:86:00:e9:31:f6:ff:bd:45:
         af:30:a3:29:16:a8:4d:97:fc:91:6f:04:5a:5a:f2:e0:b1:92:
         ad:cd:19:8f:0a:58:e2:99:93:89:82:67:fc:07:13:66:b5:55:
         8e:52:42:bd:64:92:13:c0:23:2d:ee:e5:94:81:16:34:5f:85:
         46:8c:6f:9b:65:bc:bd:18:a6:aa:da:7a:be:4b:07:64:76:f6:
         0b:ef:42:3f:aa:4c:55:b3:64:ef:7b:bc:f5:7d:45:50:bf:dc:
         d0:3a:9f:e4:fa:80:2a:a6:63:23:55:e1:ca:2b:ce:61:e1:9d:
         dc:70:40:f6:ab:e2:1f:0c:6f:3a:9b:96:a7:95:24:ab:6f:19:
         6e:5a:dd:5b:ab:c9:ba:6d:8d:07:e7:a6:17:c3:b6:ff:ed:fa:
         fc:e7:df:05:78:a1:41:4c:57:8d:38:92:e3:61:43:cc:30:1e:
         71:2b:c0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:47 2026 by rpki-client