Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F5615BC09B4111EF9EB3AD3AC4F9AE02.roa
File:                     F5615BC09B4111EF9EB3AD3AC4F9AE02.roa (raw, json)
Hash identifier:          IZ+tzypgp4Cm2A76Ta4TlPtPph1ZT6v2ytWi3/SHMis=
Subject key identifier:   CC:13:16:20:19:99:13:E7:F2:23:A9:F1:46:FF:6E:89:9F:78:7F:BD
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2C15
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F5615BC09B4111EF9EB3AD3AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:45:36 +0000
ROA not before:           Thu 08 May 2025 15:54:14 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152516
IP address blocks:        157.20.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11285 (0x2c15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:54:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c190-99df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:af:b1:a2:08:47:89:00:8a:02:07:84:3a:a9:
                    78:34:bc:74:2c:27:79:f5:eb:08:4f:56:d8:58:c6:
                    a1:91:14:71:31:57:c1:ce:79:0d:85:96:4c:9f:b5:
                    54:55:5a:db:03:74:7b:68:d6:61:d3:5c:bc:3a:56:
                    44:2f:a0:21:33:a1:3a:4f:44:71:44:07:ad:7b:2b:
                    0a:62:92:43:8b:d1:f5:74:32:ba:9d:c1:a4:53:68:
                    a4:33:92:78:16:a6:06:25:59:92:d0:12:bf:1c:01:
                    28:6a:59:a7:b2:5d:0f:48:6c:14:cc:0b:97:bf:5f:
                    26:98:16:c2:d9:53:9b:18:c2:95:3e:ac:05:98:53:
                    51:d0:11:02:d4:0d:e3:3e:c8:94:fc:0b:16:ae:c8:
                    12:63:8f:40:77:e8:10:86:34:f8:0a:7e:4d:ab:8b:
                    33:7c:b4:92:95:82:e5:e0:b1:4f:e6:7b:36:45:08:
                    c3:fb:97:6c:e9:5d:34:3e:ef:eb:16:c8:2f:e3:74:
                    67:18:27:5a:f1:61:28:7d:f9:1b:c5:04:12:a5:d0:
                    7f:0a:a2:e2:8a:e0:99:89:4e:e8:12:84:a8:6b:cf:
                    40:32:28:9d:54:4a:32:f0:04:49:ab:ea:76:14:20:
                    3c:0f:59:7f:3f:6d:9a:95:3e:35:0c:4b:58:d4:20:
                    11:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:13:16:20:19:99:13:E7:F2:23:A9:F1:46:FF:6E:89:9F:78:7F:BD
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F5615BC09B4111EF9EB3AD3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:41:37:dc:23:d3:59:e8:1c:16:eb:93:85:72:c6:65:e5:49:
         d8:a8:73:ad:7c:d5:09:be:b2:ea:ad:af:24:92:36:1c:c0:56:
         e2:e2:72:ae:34:6e:b8:dc:2f:0c:2c:24:37:2a:03:92:9d:5b:
         a7:59:85:61:62:19:78:5e:e0:11:df:f4:46:4f:a7:64:ea:a0:
         ef:ae:28:6b:d9:e9:75:19:8a:3d:d4:e7:81:5e:bb:16:73:d3:
         24:62:16:25:2e:8d:34:2b:45:df:c4:0f:83:e8:06:46:ba:15:
         01:e2:c9:77:d8:02:64:7c:1d:eb:08:96:85:52:4d:1d:54:82:
         e3:ce:9b:67:7b:70:e3:77:a4:ae:71:25:33:4f:3f:d1:66:ed:
         08:fb:c6:14:f9:8d:3c:68:f9:59:82:f4:2f:00:68:a5:7c:25:
         79:5c:55:b0:35:4d:7a:75:d8:26:b1:e1:a7:04:a4:f2:de:b1:
         73:3e:84:d5:97:f9:1f:df:35:1d:25:fd:9e:16:09:7b:2d:2d:
         f3:f5:5a:5c:69:71:cb:36:9a:02:99:b5:ab:29:d4:23:10:99:
         a2:43:30:b7:60:11:fc:d6:1f:a7:0f:89:44:64:12:13:8d:ee:
         0b:f5:d9:42:6a:87:b0:dc:48:23:ec:93:ad:27:85:63:78:01:
         ae:3f:f4:8b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTA4MTU1NDE0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzE5MC05OWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArK+xoghHiQCKAgeEOql4NLx0LCd59esIT1bYWMahkRRxMVfBznkNhZZMn7VU
VVrbA3R7aNZh01y8OlZEL6AhM6E6T0RxRAeteysKYpJDi9H1dDK6ncGkU2ikM5J4
FqYGJVmS0BK/HAEoalmnsl0PSGwUzAuXv18mmBbC2VObGMKVPqwFmFNR0BEC1A3j
PsiU/AsWrsgSY49Ad+gQhjT4Cn5Nq4szfLSSlYLl4LFP5ns2RQjD+5ds6V00Pu/r
Fsgv43RnGCda8WEoffkbxQQSpdB/CqLiiuCZiU7oEoSoa89AMiidVEoy8ARJq+p2
FCA8D1l/P22alT41DEtY1CARYwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMwTFiAZ
mRPn8iOp8Ub/bomfeH+9MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRjU2MTVCQzA5
QjQxMTFFRjlFQjNBRDNBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnRTkMA0GCSqGSIb3DQEBCwUAA4IBAQBYQTfcI9NZ6BwW65OFcsZl
5UnYqHOtfNUJvrLqra8kkjYcwFbi4nKuNG643C8MLCQ3KgOSnVunWYVhYhl4XuAR
3/RGT6dk6qDvrihr2el1GYo91OeBXrsWc9MkYhYlLo00K0XfxA+D6AZGuhUB4sl3
2AJkfB3rCJaFUk0dVILjzptne3Djd6SucSUzTz/RZu0I+8YU+Y08aPlZgvQvAGil
fCV5XFWwNU16ddgmseGnBKTy3rFzPoTVl/kf3zUdJf2eFgl7LS3z9VpcaXHLNpoC
mbWrKdQjEJmiQzC3YBH81h+nD4lEZBITje4L9dlCaoew3Egj7JOtJ4VjeAGuP/SL
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:46:47 2026 by rpki-client