Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/3F6F4A1A01B211F19B62C4E66C6F56BC.roa
File:                     3F6F4A1A01B211F19B62C4E66C6F56BC.roa (raw, json)
Hash identifier:          rCzJIy/NYAsPTGfAatavk8j2jLpwkOtS62qzcnx2R38=
Subject key identifier:   D3:AD:58:64:B2:9F:F7:A4:F1:78:A6:44:7E:7A:5B:B1:82:A6:9C:09
Certificate issuer:       /CN=A918E3C0/serialNumber=61FA7086811CB03FCB94C316CFEEAD889A8527F7
Certificate serial:       02
Authority key identifier: 61:FA:70:86:81:1C:B0:3F:CB:94:C3:16:CF:EE:AD:88:9A:85:27:F7
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/3F6F4A1A01B211F19B62C4E66C6F56BC.roa
Signing time:             Wed 04 Feb 2026 10:14:11 +0000
ROA not before:           Wed 04 Feb 2026 10:14:11 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     138233
IP address blocks:        151.158.140.0/24 maxlen: 24
                          151.158.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.crl
                          rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E3C0, serialNumber=61FA7086811CB03FCB94C316CFEEAD889A8527F7
        Validity
            Not Before: Feb  4 10:14:11 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69831bf2-5e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e2:57:38:c8:3f:e1:a5:83:9b:db:2c:5c:a7:
                    72:b4:4c:89:f2:97:19:4e:8a:ec:18:76:99:a1:77:
                    a0:e3:d7:73:26:24:89:2d:12:74:48:49:be:cd:a8:
                    d5:f0:ce:88:56:10:a3:f5:2b:a6:bf:96:cf:d0:3e:
                    63:77:5c:39:73:29:83:e7:0b:ff:42:4e:f9:a0:21:
                    f8:41:fb:08:64:c8:e9:9b:1a:86:05:b6:ea:2d:04:
                    71:c3:41:7a:28:df:e7:73:5e:cb:49:af:aa:79:6c:
                    2a:ba:ea:53:f0:fb:9a:49:18:fa:c5:52:8a:b2:bb:
                    ae:58:d6:dd:25:37:fc:81:65:c3:68:da:d7:cf:63:
                    05:c5:b5:af:d9:45:6c:c1:88:27:c7:8f:41:9e:df:
                    60:d4:be:45:d9:fa:1d:63:0c:5d:62:89:07:0d:99:
                    c7:51:2a:39:e1:1d:c4:31:0f:6f:3f:b0:3f:dd:73:
                    03:ad:45:9f:c6:de:97:55:58:d8:a6:ba:bb:1a:32:
                    d2:e7:22:c3:08:d5:e0:bf:91:0f:80:0c:30:53:fb:
                    df:22:d2:26:a0:ba:cb:76:ee:14:12:05:aa:c5:48:
                    80:1e:23:7a:1b:64:2c:e2:43:59:09:37:08:eb:dc:
                    6b:6a:1b:23:d5:51:f8:44:7e:57:5c:c1:e0:e3:d6:
                    c7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AD:58:64:B2:9F:F7:A4:F1:78:A6:44:7E:7A:5B:B1:82:A6:9C:09
            X509v3 Authority Key Identifier:
                keyid:61:FA:70:86:81:1C:B0:3F:CB:94:C3:16:CF:EE:AD:88:9A:85:27:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YfpwhoEcsD_LlMMWz-6tiJqFJ_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E3C0/B573B4E001B111F19C1E42C16B6F56BC/3F6F4A1A01B211F19B62C4E66C6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:1c:26:8c:0e:28:08:af:0e:86:fc:69:1a:fa:3a:0b:75:7f:
         cc:5c:7a:cc:69:e2:82:b5:3b:b2:79:3e:e6:ad:86:93:b1:72:
         89:3a:71:00:0f:ef:ee:a9:6a:95:d3:9f:55:84:e9:4e:e0:7e:
         c6:28:b7:5e:0b:70:32:e5:03:97:9b:8e:2e:3d:a6:fd:76:96:
         e9:8a:d9:d4:51:f8:38:e3:f3:91:5c:86:7e:c6:de:b5:3e:5e:
         ff:54:b7:1b:f8:b3:ba:78:1d:a8:97:ae:ef:c6:3a:c2:72:0c:
         fd:b6:42:ec:af:f9:0c:f6:38:c1:1c:a5:49:17:80:99:9a:72:
         4f:06:52:52:82:6b:e4:2d:f8:aa:ee:69:62:e4:81:c3:84:79:
         31:92:d9:ce:dd:e9:b7:b2:74:0b:20:c1:e2:bb:f1:86:9b:c3:
         62:6c:26:c8:ff:70:6c:a5:20:be:b9:f6:d9:27:57:b1:3f:68:
         9c:19:13:3b:a2:79:de:32:a6:02:fa:4a:3a:97:5d:05:9a:98:
         c9:e4:fa:85:e0:51:5f:6d:d6:61:e1:15:d1:93:c1:b4:0d:cd:
         1f:9c:f1:fa:9b:a7:05:bd:3d:bc:a8:83:cc:c1:6c:9a:18:14:
         f8:39:93:3d:fb:1b:56:a8:21:16:6a:51:ed:28:59:66:ad:e6:
         aa:2f:a4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:44:35 2026 by rpki-client