Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/981259BEE02B11EEB402C50AC4F9AE02.roa
File:                     981259BEE02B11EEB402C50AC4F9AE02.roa (raw, json)
Hash identifier:          Q5oCAqjN9VnRg6IeW7LHS+jYcceGm0bU4pb8uYYRoFA=
Subject key identifier:   AA:B7:24:A9:5A:6B:C0:BB:D7:5E:76:83:09:55:69:95:CC:C1:FD:C1
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2BDD
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/981259BEE02B11EEB402C50AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:44:10 +0000
ROA not before:           Thu 08 May 2025 15:53:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149591
IP address blocks:        157.20.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11229 (0x2bdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:53:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c13a-cf39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cc:bb:11:2c:d7:7b:e5:31:a4:66:76:cd:bf:
                    bc:fe:4a:6a:df:44:cd:ba:f0:b2:14:94:66:2f:c0:
                    f5:7c:da:9f:7b:86:03:e0:8b:3f:6d:91:6e:b2:6d:
                    8b:e1:69:ba:91:f3:e1:86:69:b2:c0:fb:3f:bf:69:
                    65:e7:e9:49:36:f9:f3:e7:73:ee:99:ae:6b:00:7b:
                    c5:24:1f:9d:e3:46:44:55:b5:48:35:31:a8:26:a9:
                    d2:e4:19:01:37:af:3c:44:bb:ef:29:f3:75:67:c1:
                    5f:f9:80:fa:64:18:e7:28:5c:6f:d7:04:ac:99:e1:
                    20:2a:e9:f6:ce:df:e0:0a:a0:92:c5:00:e2:50:8b:
                    54:78:7f:cd:92:55:1d:de:05:63:cf:88:42:db:a9:
                    bc:47:45:06:a7:19:ac:a3:e6:44:ca:19:cb:cd:3f:
                    37:d4:8f:92:29:db:dc:3f:1e:b8:7e:bd:3f:80:53:
                    99:5e:97:b0:f1:e3:a7:89:71:9e:03:c4:02:bb:3d:
                    c6:92:1d:01:d1:dc:e7:a5:02:94:0a:e8:2c:ba:ef:
                    42:96:48:f2:de:42:3d:ca:bb:b4:d4:d6:31:51:b9:
                    66:06:84:47:bb:78:41:5c:af:56:07:95:d4:02:75:
                    3f:23:06:bb:95:8b:b5:50:60:5b:86:98:95:b6:8c:
                    09:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B7:24:A9:5A:6B:C0:BB:D7:5E:76:83:09:55:69:95:CC:C1:FD:C1
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/981259BEE02B11EEB402C50AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:66:61:97:63:10:c7:f2:b5:97:61:40:27:82:79:95:35:2a:
         80:63:7c:de:2c:ae:0f:57:f4:f5:93:db:16:71:0e:f8:f0:b7:
         66:7b:11:7e:f0:6b:69:af:a4:b8:59:0c:07:48:b0:94:14:fa:
         ff:60:0a:4e:a1:59:03:45:b1:a9:14:81:0d:ea:7f:96:6f:2a:
         0d:d9:70:fa:29:60:1a:f1:46:ac:c1:c6:4c:fb:48:00:f8:18:
         4a:c3:a5:f5:ed:7e:7b:8c:d4:9e:8b:56:e1:ce:85:b9:3c:76:
         c1:4c:6c:fc:e4:2e:a0:af:c4:b6:b8:b5:5f:d9:4f:ba:72:10:
         9b:71:7b:e5:88:b5:a9:22:ad:83:80:0b:5f:0b:f2:93:48:d6:
         c9:49:f5:2a:39:49:f9:ed:da:17:15:e5:a0:4b:d6:04:a1:09:
         ce:18:2e:94:87:c9:56:f7:08:d8:04:9c:f7:b1:97:e8:9a:c7:
         6b:35:fc:20:dd:8f:67:02:c8:e5:83:9b:a0:90:75:2c:0e:1a:
         af:47:6e:9d:2f:cd:e1:28:87:06:30:ed:fd:1e:c7:e6:35:01:
         ee:11:42:3f:bf:ab:57:5f:4c:62:0d:c1:f1:40:89:d8:40:bb:
         ab:28:9f:bd:8f:9f:f7:49:7c:4b:c4:ec:2b:fb:cb:57:38:c3:
         75:83:90:02
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICK90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTA4MTU1MzE5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzEzYS1jZjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzMy7ESzXe+UxpGZ2zb+8/kpq30TNuvCyFJRmL8D1fNqfe4YD4Is/bZFusm2L
4Wm6kfPhhmmywPs/v2ll5+lJNvnz53Puma5rAHvFJB+d40ZEVbVINTGoJqnS5BkB
N688RLvvKfN1Z8Ff+YD6ZBjnKFxv1wSsmeEgKun2zt/gCqCSxQDiUItUeH/NklUd
3gVjz4hC26m8R0UGpxmso+ZEyhnLzT831I+SKdvcPx64fr0/gFOZXpew8eOniXGe
A8QCuz3Gkh0B0dznpQKUCugsuu9Clkjy3kI9yru01NYxUblmBoRHu3hBXK9WB5XU
AnU/Iwa7lYu1UGBbhpiVtowJiQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKq3JKla
a8C71152gwlVaZXMwf3BMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTgxMjU5QkVF
MDJCMTFFRUI0MDJDNTBBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAnRTAMA0GCSqGSIb3DQEBCwUAA4IBAQDKZmGXYxDH8rWXYUAngnmV
NSqAY3zeLK4PV/T1k9sWcQ748LdmexF+8Gtpr6S4WQwHSLCUFPr/YApOoVkDRbGp
FIEN6n+WbyoN2XD6KWAa8UaswcZM+0gA+BhKw6X17X57jNSei1bhzoW5PHbBTGz8
5C6gr8S2uLVf2U+6chCbcXvliLWpIq2DgAtfC/KTSNbJSfUqOUn57doXFeWgS9YE
oQnOGC6Uh8lW9wjYBJz3sZfomsdrNfwg3Y9nAsjlg5ugkHUsDhqvR26dL83hKIcG
MO39HsfmNQHuEUI/v6tXX0xiDcHxQInYQLurKJ+9j5/3SXxLxOwr+8tXOMN1g5AC
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:12:36 2026 by rpki-client