Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/78E70772B90E11EE95522F7FC4F9AE02.roa
File:                     78E70772B90E11EE95522F7FC4F9AE02.roa (raw, json)
Hash identifier:          Ndrguyvjm0VNr/otT/vyMqtTe4SvJIcqY+R/NAW9xv0=
Subject key identifier:   CE:20:E1:60:24:3F:05:74:1A:35:A5:4E:F3:22:4E:1C:AE:DE:89:69
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2BEE
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/78E70772B90E11EE95522F7FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:44:33 +0000
ROA not before:           Thu 08 May 2025 15:53:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151718
IP address blocks:        157.10.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11246 (0x2bee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:53:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c151-4189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4e:49:82:78:82:cb:22:18:1b:b8:64:41:74:
                    69:89:f3:28:22:9d:f5:06:c4:c5:08:c2:36:14:25:
                    1a:e3:e6:5f:b8:99:d9:36:42:3f:4f:a4:e4:b9:7d:
                    63:f7:98:c5:8a:33:66:0b:13:46:c2:96:90:ec:09:
                    f5:49:23:6a:26:a3:64:67:4c:cc:d7:ba:8d:ad:40:
                    bd:28:a0:4c:3b:56:b7:70:f3:d8:16:70:eb:2b:e1:
                    d2:34:66:db:22:34:f6:a5:a8:7c:c6:95:7e:4b:3b:
                    1c:1f:74:56:6c:39:66:9f:53:a5:c1:f3:4a:66:cd:
                    f0:b5:2f:6c:e2:04:bb:82:0e:51:e8:c4:ca:5f:a5:
                    14:fd:e8:6e:a6:d2:aa:1c:b3:24:6e:71:eb:71:88:
                    c8:9a:4b:97:08:05:16:2b:cf:0f:4e:d8:77:67:34:
                    82:1e:dc:bf:85:bc:9c:bc:55:a4:29:a1:5a:d9:ea:
                    15:31:df:3d:83:9f:a4:22:74:45:6f:f2:a5:95:1d:
                    cb:1f:6f:fc:cc:d2:6d:e9:72:2a:0d:0a:f5:97:e6:
                    f0:f4:6d:50:d8:d5:86:5f:0b:de:b8:2b:39:fb:47:
                    73:d6:18:56:95:43:01:e6:78:b4:1b:f8:93:a9:c2:
                    9d:ea:cd:d0:24:6d:46:e5:87:64:97:25:b7:f4:9f:
                    f2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:20:E1:60:24:3F:05:74:1A:35:A5:4E:F3:22:4E:1C:AE:DE:89:69
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/78E70772B90E11EE95522F7FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:ed:88:d0:92:7f:17:d8:15:13:c4:66:4f:ea:ee:6e:ba:80:
         5a:0b:ee:e4:ce:97:87:23:6c:a1:3f:a3:0a:60:17:6c:e6:6e:
         bd:bf:7d:90:c1:ff:44:03:8e:5e:31:c5:e9:e3:17:77:7f:cc:
         aa:7c:af:86:32:0c:2d:98:06:d1:37:17:9d:8f:66:18:5b:d3:
         c6:c5:e3:65:21:f4:7c:f7:7c:08:89:4d:8b:4a:4c:4a:57:8b:
         4c:1e:0f:8c:c2:7a:bb:d2:45:14:d2:7a:59:12:ab:ed:b5:1a:
         35:1f:49:1a:54:20:77:ef:23:ff:b4:33:85:de:64:57:e2:ac:
         53:02:18:79:e3:f7:e8:f7:12:04:9c:5e:39:bd:84:19:2a:7f:
         b1:9d:9b:00:dd:46:e9:b6:cc:3f:b8:b8:be:a5:73:28:a1:97:
         96:f9:cf:0e:07:ac:05:95:7c:94:8a:87:41:4f:07:e0:ce:20:
         51:bd:e1:ae:23:11:ee:77:ad:76:e7:7c:a5:67:dd:e9:67:80:
         28:6f:f2:1d:c3:e7:31:eb:99:82:da:01:5a:e4:95:fa:c4:e2:
         10:01:25:8c:b9:e0:30:cb:87:88:37:36:fa:40:55:85:79:7b:
         3b:4b:68:72:8b:5c:73:ac:f6:af:cf:b0:03:1d:7f:a0:ad:9c:
         f1:45:a1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:19:24 2026 by rpki-client