Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BD032766013D11EFA1F5104BC4F9AE02.roa
File:                     BD032766013D11EFA1F5104BC4F9AE02.roa (raw, json)
Hash identifier:          0/fJqHIK1lktupYi91j9z/iDF+QMM3mdKWHQfhTQSvg=
Subject key identifier:   27:AA:3A:FF:47:7E:F7:14:B3:60:EB:1D:AE:FA:29:75:18:33:7E:22
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2BF0
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BD032766013D11EFA1F5104BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:44:36 +0000
ROA not before:           Thu 08 May 2025 15:53:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151726
IP address blocks:        157.10.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11248 (0x2bf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:53:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c153-9b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:7b:39:9c:01:cf:3e:4d:13:9b:70:fc:da:
                    99:10:0f:d6:31:d6:d3:b4:cc:65:43:76:fd:ac:fc:
                    8c:be:ab:88:ea:6e:bd:03:23:45:81:1d:11:7f:a4:
                    2d:5a:3d:47:15:97:dd:2b:f4:f2:14:b4:b5:10:4c:
                    e2:2c:fe:9a:52:f9:24:1a:1c:c3:63:5d:4b:bc:1c:
                    7e:aa:c3:d1:45:47:0e:5d:20:a2:4b:05:76:08:35:
                    f0:ac:cc:ab:bc:94:dd:03:83:df:57:5b:ff:17:60:
                    42:e9:5c:56:9c:ac:b7:d7:66:02:4e:db:37:2d:c0:
                    64:d8:1b:9a:24:9b:4b:65:0c:91:4f:ad:32:c1:69:
                    a5:48:23:6d:91:e2:a9:51:5a:5d:3a:de:18:68:6f:
                    03:53:b0:7f:13:88:af:d8:be:bb:e4:c6:54:16:0a:
                    ca:9b:81:c9:70:93:3d:a3:7d:8d:35:78:76:02:62:
                    38:43:93:63:a3:ce:9a:fa:ea:34:31:b4:36:5d:98:
                    a0:92:98:81:3e:52:51:c8:c9:b9:3c:be:9b:76:e6:
                    62:d9:0b:f6:7d:01:9c:ff:75:55:08:7f:85:20:19:
                    93:15:93:17:21:e1:01:d7:d1:dd:2f:b4:af:5e:c1:
                    2c:78:5d:d4:44:d0:5d:94:1e:b5:a3:af:91:19:54:
                    13:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AA:3A:FF:47:7E:F7:14:B3:60:EB:1D:AE:FA:29:75:18:33:7E:22
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BD032766013D11EFA1F5104BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:be:02:0e:81:27:f9:cb:ba:69:2a:51:6d:3b:96:94:87:ed:
         cc:54:d9:e3:32:1f:0a:b7:e7:c6:e5:03:04:05:d4:11:74:c5:
         52:41:41:ca:cc:84:11:21:fb:01:aa:cb:60:16:6e:13:c7:a2:
         64:36:24:59:85:c6:a8:b8:28:fd:9f:41:29:27:ff:9a:29:91:
         f1:38:b2:b2:f3:70:66:2a:93:ef:ed:21:79:5e:c1:b5:b4:c2:
         14:44:24:17:10:78:9b:36:2c:75:b8:9a:88:16:76:31:9c:a9:
         a4:fc:7e:dd:05:e8:8e:42:b5:32:b7:27:1e:30:e2:a2:3d:2c:
         e1:08:b3:85:d2:4b:53:ae:5a:5e:62:07:4b:f0:6d:2e:36:e9:
         7b:7b:ed:b8:22:4e:b0:f3:59:6e:b0:77:76:9d:1f:ed:63:b8:
         17:63:cd:4a:b9:c5:0f:a1:5f:80:74:d3:57:11:34:6a:32:79:
         6b:7e:2c:cb:e8:6f:2b:a1:31:58:c0:8b:6f:c1:be:8f:08:db:
         83:29:48:a7:b9:2d:b2:44:6f:05:ed:89:dd:63:f8:ca:83:b3:
         78:e0:7f:7f:61:6c:30:f0:1b:c5:29:31:86:50:63:33:cb:88:
         63:bb:74:48:a8:51:72:42:55:ba:10:af:39:c9:1d:b2:a4:01:
         2f:e4:40:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:12:30 2026 by rpki-client