Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/9C6F77784A3211EFBDBCEB2FC4F9AE02.roa
File:                     9C6F77784A3211EFBDBCEB2FC4F9AE02.roa (raw, json)
Hash identifier:          Nc9DSQfoP8lp71rB/yIzwnzaLGPXE+pUgVZdrBLN3aQ=
Subject key identifier:   16:5D:E2:74:86:03:E5:E7:B3:B5:10:31:FE:D0:89:5A:6D:93:DE:C5
Certificate issuer:       /CN=A918549C/serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
Certificate serial:       0136
Authority key identifier: 43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/9C6F77784A3211EFBDBCEB2FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:41:29 +0000
ROA not before:           Tue 25 Mar 2025 05:42:58 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     141153
IP address blocks:        157.15.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl
                          rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 12:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918549C, serialNumber=43634C701BA1F1EFCE8F56AA6AD1DB2945A1DB9F
        Validity
            Not Before: Mar 25 05:42:58 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a58579-5c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c2:d0:53:6c:d5:a7:87:2c:7a:cf:f4:a0:65:
                    4e:2b:4e:1b:b9:c6:5a:1b:83:25:be:9d:be:99:3e:
                    08:18:42:e1:4f:96:ca:28:26:de:0b:af:b5:5e:bd:
                    01:66:9d:85:73:6e:f9:b9:cf:9b:03:5a:b8:be:d4:
                    38:2f:6a:0d:ab:5b:2c:bb:dd:bf:20:db:b9:cf:54:
                    57:30:47:64:52:6e:dc:a3:10:35:cc:e5:43:d5:4a:
                    fb:db:b9:9a:7f:18:9d:4f:c8:68:89:35:9e:51:01:
                    1c:5d:32:b3:b6:00:74:d5:20:af:56:38:a0:b1:f4:
                    ef:e2:1e:61:b6:e1:35:c9:94:c7:68:e6:2f:ca:c3:
                    f2:58:cb:18:6f:87:63:76:ed:c1:a5:f6:64:7c:69:
                    b6:ce:2b:86:74:b2:71:9c:e5:37:12:ca:fd:3c:ad:
                    fb:8f:83:6b:9a:32:c3:4c:16:ec:20:00:c2:05:47:
                    02:cf:99:df:cc:4d:0a:a4:3b:d7:45:98:ef:a7:06:
                    24:76:92:0d:d7:9a:37:e1:07:68:a9:fe:85:e7:c5:
                    d9:a5:1a:5b:db:bc:a2:e9:9a:7e:78:ae:1a:a0:47:
                    c2:25:87:1c:fe:39:6e:e2:6c:d8:f0:8e:43:ad:fd:
                    42:b6:f6:92:46:be:31:b2:cb:16:90:a4:c0:8a:50:
                    1f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5D:E2:74:86:03:E5:E7:B3:B5:10:31:FE:D0:89:5A:6D:93:DE:C5
            X509v3 Authority Key Identifier:
                keyid:43:63:4C:70:1B:A1:F1:EF:CE:8F:56:AA:6A:D1:DB:29:45:A1:DB:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/Q2NMcBuh8e_Oj1aqatHbKUWh258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q2NMcBuh8e_Oj1aqatHbKUWh258.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/DE8718C44A3111EFB7BBD51CC4F9AE02/9C6F77784A3211EFBDBCEB2FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:22:df:7f:f1:f8:0a:b5:a5:e5:b6:56:d2:b4:09:20:49:a2:
         be:4e:be:04:0d:ab:ab:bb:8f:60:65:b5:ba:69:ea:d3:83:d3:
         ce:9c:ff:42:f5:d9:d1:2a:6c:8a:5e:40:d5:7f:48:23:ca:ab:
         c4:e0:65:54:e8:52:fa:d1:1c:54:5b:f0:f9:5b:70:78:34:5c:
         9c:7a:27:54:d1:d7:9e:cc:eb:42:ab:77:16:15:0d:d9:6a:a9:
         4c:46:d2:b0:03:b9:09:09:62:49:79:c6:28:4c:e9:db:df:78:
         81:30:ff:95:82:26:af:8a:0d:13:1d:a0:bd:68:2b:79:6e:0c:
         eb:56:24:36:b6:56:f5:c2:b3:8c:53:d4:6f:40:36:3a:b5:2b:
         8e:f9:7c:1f:10:84:00:34:f2:8d:4a:f9:74:60:00:f7:85:9f:
         bf:72:0f:9c:b7:0f:a8:67:e2:7a:56:57:2a:aa:e0:7c:ef:d9:
         e3:5f:a9:72:ab:21:a5:1b:68:94:20:66:2a:2a:5b:13:69:55:
         1d:87:97:24:61:28:e3:e3:a7:ad:ee:c1:f1:1b:ce:c1:b7:02:
         0d:75:51:46:d1:99:bc:5f:4b:36:21:61:d0:93:68:d0:a3:b7:
         2d:6c:0e:97:74:b0:82:9c:16:bc:c1:7f:29:0e:73:0a:c6:39:
         c1:d2:0e:35
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU0OUMxMTAvBgNVBAUTKDQzNjM0QzcwMUJBMUYxRUZDRThGNTZBQTZBRDFEQjI5
NDVBMURCOUYwHhcNMjUwMzI1MDU0MjU4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1ODU3OS01YzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoMLQU2zVp4cses/0oGVOK04bucZaG4Mlvp2+mT4IGELhT5bKKCbeC6+1Xr0B
Zp2Fc275uc+bA1q4vtQ4L2oNq1ssu92/INu5z1RXMEdkUm7coxA1zOVD1Ur727ma
fxidT8hoiTWeUQEcXTKztgB01SCvVjigsfTv4h5htuE1yZTHaOYvysPyWMsYb4dj
du3BpfZkfGm2ziuGdLJxnOU3Esr9PK37j4NrmjLDTBbsIADCBUcCz5nfzE0KpDvX
RZjvpwYkdpIN15o34Qdoqf6F58XZpRpb27yi6Zp+eK4aoEfCJYcc/jlu4mzY8I5D
rf1CtvaSRr4xsssWkKTAilAfrQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBZd4nSG
A+Xns7UQMf7QiVptk97FMB8GA1UdIwQYMBaAFENjTHAbofHvzo9WqmrR2ylFoduf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ5Qy9ERTg3MThDNDRB
MzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9RMk5NY0J1aDhlX09qMWFxYXRIYktVV2gy
NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1EyTk1jQnVoOGVfT2oxYXFhdEhiS1VXaDI1OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODU0OUMvREU4NzE4QzQ0QTMxMTFFRkI3QkJENTFDQzRGOUFFMDIvOUM2Rjc3Nzg0
QTMyMTFFRkJEQkNFQjJGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAnQ/gMA0GCSqGSIb3DQEBCwUAA4IBAQCiIt9/8fgKtaXltlbStAkg
SaK+Tr4EDauru49gZbW6aerTg9POnP9C9dnRKmyKXkDVf0gjyqvE4GVU6FL60RxU
W/D5W3B4NFyceidU0deezOtCq3cWFQ3ZaqlMRtKwA7kJCWJJecYoTOnb33iBMP+V
giavig0THaC9aCt5bgzrViQ2tlb1wrOMU9RvQDY6tSuO+XwfEIQANPKNSvl0YAD3
hZ+/cg+ctw+oZ+J6VlcqquB879njX6lyqyGlG2iUIGYqKlsTaVUdh5ckYSjj46et
7sHxG87BtwINdVFG0Zm8X0s2IWHQk2jQo7ctbA6XdLCCnBa8wX8pDnMKxjnB0g41
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:27:57 2026 by rpki-client