Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3D8177A4AB5211EEAC610B2CC4F9AE02.roa
File:                     3D8177A4AB5211EEAC610B2CC4F9AE02.roa (raw, json)
Hash identifier:          Ppabo7WEhMXcX0R9sWTWr5Mhyr6ngSdhDchvoweHa2M=
Subject key identifier:   F2:81:84:F9:83:82:79:98:42:BB:F8:17:25:2E:8B:BC:6A:50:27:03
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2BF9
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3D8177A4AB5211EEAC610B2CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:44:48 +0000
ROA not before:           Thu 08 May 2025 15:53:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151743
IP address blocks:        157.10.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11257 (0x2bf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:53:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c160-6593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8a:09:50:eb:b8:ca:5d:fb:8e:3f:60:e0:a4:
                    51:70:a5:6b:16:fb:32:70:a7:df:51:fc:35:b1:48:
                    e2:77:9d:f8:ea:96:cd:85:fe:3e:e9:97:5d:53:db:
                    bb:07:b4:76:c3:49:82:85:0e:6c:8b:32:00:49:c3:
                    64:ea:78:0a:dc:74:2d:31:bb:6d:19:88:58:1a:75:
                    70:5e:c2:de:79:64:3a:d2:9d:00:0c:59:1c:30:d4:
                    f4:d1:14:20:98:ec:b8:9c:3f:10:82:d8:cb:b5:ea:
                    58:6d:14:3b:11:ab:9b:8b:f9:fd:7b:4d:62:53:23:
                    df:db:ac:95:d9:58:77:b2:ed:39:b6:61:14:58:77:
                    4a:fe:3c:5c:d5:db:5f:22:8d:51:6e:69:d2:03:7a:
                    22:28:04:74:0b:83:ea:09:21:c0:53:ac:7c:81:3b:
                    76:b3:a4:d6:2b:99:b9:bc:63:e9:49:24:5c:c6:50:
                    23:4a:aa:74:63:fa:cd:42:0c:d4:a2:9f:f5:a4:ac:
                    dc:2e:da:9f:41:e4:a8:33:5a:13:35:f4:9c:89:54:
                    44:b2:c8:40:0d:64:f4:85:67:f3:07:0b:b2:60:6c:
                    c0:19:65:45:c6:8f:cd:ea:9b:d7:1f:53:48:59:4f:
                    5c:88:77:92:67:ed:5d:0a:d1:64:c6:48:2c:bb:4b:
                    37:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:81:84:F9:83:82:79:98:42:BB:F8:17:25:2E:8B:BC:6A:50:27:03
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3D8177A4AB5211EEAC610B2CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:b6:4b:3a:a3:82:14:ae:c9:76:2b:c3:0c:4e:78:55:0d:2d:
         ef:24:29:27:a2:93:d0:bc:10:83:bb:bb:87:11:bb:89:b4:8f:
         cb:4e:d8:4f:4c:b6:2e:49:87:de:10:5c:43:cd:4a:2b:f6:fd:
         c3:a3:a2:95:d7:c7:92:bc:6e:1f:50:d7:10:25:ad:78:3d:8e:
         b2:31:3e:b9:aa:a3:39:3b:24:63:46:33:47:a9:81:98:10:c9:
         98:b8:4c:51:37:18:22:8b:1f:35:58:d0:07:96:ca:f4:17:d7:
         4b:d0:bd:0b:00:46:41:49:f5:31:d6:cf:46:9c:4e:e5:3d:04:
         58:cc:f5:88:ee:ac:9f:df:36:f1:e5:e0:e4:66:e6:b1:c6:3c:
         ef:c7:ad:56:a7:34:3e:19:57:6b:2e:c5:72:98:da:c6:62:f1:
         7d:ba:db:f6:0b:39:60:95:e6:91:a1:f2:1c:28:73:f2:33:d5:
         91:e6:ea:7a:64:96:1e:e8:1d:4e:83:a8:72:31:c8:d8:68:13:
         f9:f3:ff:4a:42:d3:13:da:cc:64:d7:c7:8e:96:6e:25:23:08:
         a7:ad:61:2e:2b:6d:36:2f:a8:91:53:de:cb:8d:20:66:5f:ce:
         ba:47:21:db:0c:39:26:02:9a:52:58:b0:8b:c8:fc:82:1d:a4:
         12:8c:f0:bc
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICK/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTA4MTU1MzQ3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzE2MC02NTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxooJUOu4yl37jj9g4KRRcKVrFvsycKffUfw1sUjid5346pbNhf4+6ZddU9u7
B7R2w0mChQ5sizIAScNk6ngK3HQtMbttGYhYGnVwXsLeeWQ60p0ADFkcMNT00RQg
mOy4nD8QgtjLtepYbRQ7Eaubi/n9e01iUyPf26yV2Vh3su05tmEUWHdK/jxc1dtf
Io1RbmnSA3oiKAR0C4PqCSHAU6x8gTt2s6TWK5m5vGPpSSRcxlAjSqp0Y/rNQgzU
op/1pKzcLtqfQeSoM1oTNfSciVREsshADWT0hWfzBwuyYGzAGWVFxo/N6pvXH1NI
WU9ciHeSZ+1dCtFkxkgsu0s3jwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPKBhPmD
gnmYQrv4FyUui7xqUCcDMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvM0Q4MTc3QTRB
QjUyMTFFRUFDNjEwQjJDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAnQo+MA0GCSqGSIb3DQEBCwUAA4IBAQCGtks6o4IUrsl2K8MMTnhV
DS3vJCknopPQvBCDu7uHEbuJtI/LTthPTLYuSYfeEFxDzUor9v3Do6KV18eSvG4f
UNcQJa14PY6yMT65qqM5OyRjRjNHqYGYEMmYuExRNxgiix81WNAHlsr0F9dL0L0L
AEZBSfUx1s9GnE7lPQRYzPWI7qyf3zbx5eDkZuaxxjzvx61WpzQ+GVdrLsVymNrG
YvF9utv2CzlgleaRofIcKHPyM9WR5up6ZJYe6B1Og6hyMcjYaBP58/9KQtMT2sxk
18eOlm4lIwinrWEuK202L6iRU97LjSBmX866RyHbDDkmAppSWLCLyPyCHaQSjPC8
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:10 2026 by rpki-client