Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A1E94B1AD33611EFBB5ACC53C4F9AE02.roa
File:                     A1E94B1AD33611EFBB5ACC53C4F9AE02.roa (raw, json)
Hash identifier:          g+V4mHHQWumZRL4rQ59+WoGr4/NGOYkKQLXo29jsTAI=
Subject key identifier:   AE:6C:E0:AB:FD:93:AD:94:74:D1:A8:70:69:98:72:18:78:B4:1F:BD
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2BBC
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A1E94B1AD33611EFBB5ACC53C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:43:23 +0000
ROA not before:           Thu 08 May 2025 15:52:46 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138272
IP address blocks:        157.15.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11196 (0x2bbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:52:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c10b-10fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:02:8a:ff:66:6b:8c:60:9e:5b:22:33:ed:
                    7d:ae:ec:6f:38:7c:9a:bb:0b:b5:c5:92:31:c6:90:
                    32:42:80:54:d5:5e:c7:5d:5a:1b:d0:4b:f9:e2:c0:
                    80:76:99:cd:bc:29:03:8c:8a:19:ca:a0:ec:d3:9a:
                    ae:6f:f2:26:7a:4f:d5:50:bc:12:16:49:b4:dd:de:
                    e7:1e:5a:e5:ed:71:18:87:15:1f:0e:20:57:2e:59:
                    e3:ed:66:2f:95:00:39:2e:97:a6:4b:eb:b9:8e:ac:
                    8e:e1:5f:6c:0c:98:f4:6e:1e:dd:7a:84:23:fe:ac:
                    33:ff:ee:fd:69:ce:f3:51:61:3c:02:a0:a4:22:40:
                    e3:2b:d3:99:97:d5:b3:64:c5:ab:6c:fa:23:34:cf:
                    dd:a7:60:db:4a:97:27:90:26:31:4a:8d:d6:6d:62:
                    dd:9e:8e:ac:9b:8c:83:82:dc:54:e7:b6:0e:1a:9b:
                    7f:8b:50:fa:8f:08:f1:dc:93:2f:f1:3a:78:20:5b:
                    12:4c:b9:00:ac:91:b1:12:2f:06:10:bf:6b:e4:33:
                    c9:38:29:d6:75:98:89:a8:09:e9:09:84:53:a6:be:
                    5c:9e:ef:8a:2f:77:e4:0f:b6:ab:04:ad:a0:ec:b2:
                    de:b6:26:f9:1f:ad:1f:aa:df:57:65:69:8d:4e:0c:
                    d6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6C:E0:AB:FD:93:AD:94:74:D1:A8:70:69:98:72:18:78:B4:1F:BD
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A1E94B1AD33611EFBB5ACC53C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:c3:86:fe:0b:4a:81:1c:60:ab:4f:85:96:6f:0d:a0:99:39:
         b4:46:cf:07:65:a9:24:44:6c:98:69:6f:b3:46:19:fb:a5:8e:
         91:99:7b:75:54:d7:3a:11:eb:1e:1a:44:8f:a2:6e:dc:d4:2e:
         0c:b4:bb:5d:af:56:f7:5a:5b:a2:96:69:d2:57:9a:31:d5:0e:
         c0:38:1e:72:c9:13:dc:f7:38:93:0c:84:76:af:ee:82:7d:42:
         97:d1:de:f1:ec:e9:b9:dd:61:39:07:5c:04:88:e7:b7:2f:eb:
         0b:cd:75:6f:88:e7:59:9a:93:8d:58:f9:dc:5b:dc:34:9f:a6:
         19:a0:d2:16:95:b1:38:be:30:01:ff:3a:2d:9a:2c:c4:62:56:
         f3:6c:62:73:5e:48:62:ad:73:db:40:82:00:4a:33:6b:57:37:
         a7:c8:8a:6c:7a:71:b2:64:9d:ab:ce:34:8e:a6:a1:44:b2:2d:
         ee:cc:e2:da:ce:da:32:aa:b7:64:29:c2:2e:5c:e3:3c:71:93:
         01:1d:cf:2c:94:bf:56:46:e5:43:a4:f3:45:d8:3c:42:e0:e2:
         7a:dd:f0:4b:2d:5c:8a:45:c9:e1:7e:60:43:89:4e:a3:0d:d7:
         24:00:0b:86:8f:29:c2:55:02:54:f4:2f:1b:3b:36:91:e2:67:
         27:3f:4c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:54 2026 by rpki-client