Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5FF2362E009411EFA47E9D43C4F9AE02.roa
File:                     5FF2362E009411EFA47E9D43C4F9AE02.roa (raw, json)
Hash identifier:          CARQOxf+xSDxK1OAXbvQUtRw3qcvRtHwQwiqo0ueEbE=
Subject key identifier:   B5:63:03:49:5D:3B:3F:54:88:B4:3C:10:F6:BD:B0:B5:1F:3F:D5:E3
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2BF4
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5FF2362E009411EFA47E9D43C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:44:41 +0000
ROA not before:           Thu 08 May 2025 15:53:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151733
IP address blocks:        157.15.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11252 (0x2bf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:53:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c159-8fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:19:8f:40:32:c4:06:c2:ac:e9:02:0d:c2:
                    21:91:2a:1c:c5:d9:ca:d3:ee:cf:f9:aa:f8:a2:90:
                    27:be:93:fe:f6:5b:4b:41:3a:8f:d1:17:da:4e:bf:
                    84:96:b3:4f:da:00:3b:29:44:93:06:9f:18:13:8a:
                    22:e2:58:3a:88:46:cf:7b:1b:91:42:1a:75:bd:0e:
                    2c:0d:42:4b:94:ac:33:b4:35:9d:c5:dc:ce:c8:f9:
                    a1:6e:2c:9b:fe:32:c2:95:9d:13:d2:3a:88:e7:27:
                    dc:db:e7:00:22:c4:10:d2:d0:de:5d:c7:9b:8e:e3:
                    e8:8d:6c:3c:c5:91:99:44:3e:79:87:57:ad:ab:92:
                    15:5a:9e:d4:55:4f:75:8f:41:3c:90:f5:7b:6c:37:
                    92:0f:c1:98:66:eb:83:3f:0d:86:a4:b7:6d:a7:33:
                    9b:e4:99:1f:92:02:a0:d4:2b:37:ff:ac:92:84:a7:
                    d4:84:f8:45:a4:7e:04:ba:59:4b:b0:d1:82:de:c7:
                    90:31:00:cb:ab:6d:83:a0:c1:04:9c:e1:3d:2d:68:
                    1c:09:5b:99:7e:6d:78:57:7b:91:92:e4:eb:18:6d:
                    f5:52:1e:14:32:7d:6d:26:95:1d:fb:b6:cc:f6:e2:
                    1d:3d:36:a6:60:5b:df:06:83:56:8d:8b:f5:8f:a9:
                    cb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:63:03:49:5D:3B:3F:54:88:B4:3C:10:F6:BD:B0:B5:1F:3F:D5:E3
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5FF2362E009411EFA47E9D43C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:72:d2:5c:0b:7c:95:06:38:52:8e:73:cd:36:8b:6f:56:83:
         88:ab:2d:28:b1:f0:65:c1:e9:9d:16:a1:72:3c:84:21:e8:9e:
         97:37:0e:db:60:8d:02:18:cd:fb:2a:bc:6f:b9:5b:cb:fa:b8:
         c4:cd:7b:45:08:a7:7c:5d:9b:d5:46:52:8d:65:a0:3f:d0:87:
         66:c5:0f:e5:2f:dd:20:1e:42:68:23:45:9b:51:05:21:35:80:
         1c:11:fe:4a:32:61:32:0f:d4:81:00:3a:62:b4:02:76:d3:43:
         b9:26:10:70:8c:e3:c2:a6:c2:dd:8b:95:cf:10:ee:be:f6:b8:
         59:79:e1:58:ac:f0:66:56:b2:38:74:6f:61:19:27:de:91:6c:
         1b:1d:4b:3e:6a:b1:5f:fc:91:75:4c:96:03:7c:ae:b9:b7:81:
         01:33:7d:44:a8:a3:b1:4a:1b:50:8f:60:eb:bc:a5:c6:86:ca:
         5e:b3:43:ef:ab:c7:95:3c:71:cd:52:39:62:a7:ae:9e:09:01:
         a4:ab:67:ef:5c:03:ad:35:db:99:aa:d9:22:81:3e:09:64:35:
         e1:79:ce:da:78:c2:fb:4e:00:0b:64:a1:68:8a:09:19:19:d4:
         15:e7:60:4f:a4:ac:fa:57:47:87:7c:8e:d0:82:58:9c:39:be:
         52:9c:ee:5e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICK/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTA4MTU1MzQzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzE1OS04ZmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwsMZj0AyxAbCrOkCDcIhkSocxdnK0+7P+ar4opAnvpP+9ltLQTqP0RfaTr+E
lrNP2gA7KUSTBp8YE4oi4lg6iEbPexuRQhp1vQ4sDUJLlKwztDWdxdzOyPmhbiyb
/jLClZ0T0jqI5yfc2+cAIsQQ0tDeXcebjuPojWw8xZGZRD55h1etq5IVWp7UVU91
j0E8kPV7bDeSD8GYZuuDPw2GpLdtpzOb5JkfkgKg1Cs3/6yShKfUhPhFpH4EullL
sNGC3seQMQDLq22DoMEEnOE9LWgcCVuZfm14V3uRkuTrGG31Uh4UMn1tJpUd+7bM
9uIdPTamYFvfBoNWjYv1j6nLJwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLVjA0ld
Oz9UiLQ8EPa9sLUfP9XjMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNUZGMjM2MkUw
MDk0MTFFRkE0N0U5RDQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnQ+eMA0GCSqGSIb3DQEBCwUAA4IBAQC7ctJcC3yVBjhSjnPNNotv
VoOIqy0osfBlwemdFqFyPIQh6J6XNw7bYI0CGM37KrxvuVvL+rjEzXtFCKd8XZvV
RlKNZaA/0IdmxQ/lL90gHkJoI0WbUQUhNYAcEf5KMmEyD9SBADpitAJ200O5JhBw
jOPCpsLdi5XPEO6+9rhZeeFYrPBmVrI4dG9hGSfekWwbHUs+arFf/JF1TJYDfK65
t4EBM31EqKOxShtQj2DrvKXGhspes0Pvq8eVPHHNUjlip66eCQGkq2fvXAOtNduZ
qtkigT4JZDXhec7aeML7TgALZKFoigkZGdQV52BPpKz6V0eHfI7QglicOb5SnO5e
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:09 2026 by rpki-client