Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3EA9619092BF11F0A853B122C4F9AE02.roa
File:                     3EA9619092BF11F0A853B122C4F9AE02.roa (raw, json)
Hash identifier:          VvWTORYDbUEls3k3CA+5oQAP4Pq+rPml4XIqnkAeG14=
Subject key identifier:   3E:FF:04:25:5A:46:06:0C:9A:2D:74:5E:7D:52:CC:8E:94:2D:73:44
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       DA17
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3EA9619092BF11F0A853B122C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 23:02:27 +0000
ROA not before:           Tue 16 Sep 2025 05:37:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134258
IP address blocks:        157.119.169.0/24 maxlen: 24
                          157.119.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55831 (0xda17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep 16 05:37:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c583-5f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:30:25:06:4f:ae:45:c2:92:c3:f7:8f:0c:d5:
                    10:28:05:24:8a:77:88:b4:72:1b:f4:32:0b:8a:4d:
                    57:06:13:dc:8c:16:9c:08:f2:11:f3:6b:aa:29:4d:
                    3b:72:44:ea:56:b6:19:f3:60:32:45:b0:10:84:5f:
                    e4:6f:a2:3f:91:29:7e:04:e4:d3:1a:18:0f:ef:23:
                    ba:ba:09:4c:89:2c:c1:f3:1b:4d:59:0f:c3:18:e1:
                    22:82:0f:ba:98:ef:76:d5:41:55:ec:9f:85:3c:f7:
                    c4:77:c4:d0:25:68:8e:c7:9a:67:5b:f9:12:b2:51:
                    c4:19:1f:d1:e5:1f:89:a3:c8:49:a0:03:b5:29:9d:
                    88:80:e9:96:ed:e4:e4:1b:a4:a5:b8:88:8e:2f:5f:
                    68:03:03:7b:ab:31:6e:ff:a8:4e:60:a2:0d:f7:0c:
                    de:1f:5b:25:02:7b:6b:71:c2:d4:f1:db:ec:df:0a:
                    29:95:8d:dd:95:75:45:2b:78:ed:9d:63:69:ef:2b:
                    5c:cd:77:c2:28:b2:83:5e:3c:a6:d8:09:18:c9:50:
                    bd:d5:9a:9c:fe:ec:86:8c:91:35:ff:fa:97:f4:b7:
                    f5:fd:3f:e0:18:a6:b9:bc:a9:1e:ec:2d:6d:96:d1:
                    fc:d1:5b:44:4d:7a:db:79:eb:fd:0a:fd:9f:19:29:
                    03:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FF:04:25:5A:46:06:0C:9A:2D:74:5E:7D:52:CC:8E:94:2D:73:44
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3EA9619092BF11F0A853B122C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.119.169.0-157.119.171.255

    Signature Algorithm: sha256WithRSAEncryption
         7d:7d:b6:14:5f:b6:90:ea:3d:48:94:ca:88:c1:4d:f2:d8:e5:
         9c:ee:5e:4c:57:86:eb:69:22:04:75:f4:ca:62:95:33:4d:9b:
         88:b2:6e:28:b3:a7:0e:ee:77:2d:75:05:5b:9a:b7:47:76:b0:
         bd:71:c6:20:bb:e5:37:7a:f5:09:3e:b8:95:ba:fe:03:4b:d6:
         a4:c8:73:e3:74:dc:d7:c7:c4:a2:0d:77:dc:4e:ce:21:14:77:
         9e:13:33:82:e6:8e:e0:59:2b:3d:44:40:4a:cd:c9:49:5a:09:
         a0:88:07:00:19:c5:de:42:40:25:cc:19:b1:d1:bf:51:3f:eb:
         7a:47:8c:e2:c4:32:cb:0b:b4:dc:00:04:87:1b:14:fb:1c:e1:
         7a:c0:76:40:b4:e8:bc:82:29:48:68:53:03:80:44:a1:b2:43:
         4d:82:27:12:02:26:cb:15:d7:13:a4:50:a6:c6:f4:65:6c:fe:
         4d:65:78:d9:7f:8b:9f:c4:39:40:6b:5a:de:dd:43:e7:41:4c:
         fa:f9:ab:ea:0e:ad:ac:fe:f9:16:45:ef:fe:b0:94:02:a7:b1:
         c6:d5:e9:aa:99:d5:88:f1:c7:f6:9e:48:42:8a:2f:32:07:8d:
         f5:1a:33:7d:95:b4:e8:8a:e8:8f:78:a7:68:16:d3:b3:36:c5:
         f0:81:87:6c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIDANoXMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDkxNjA1MzczM1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGM1ODMtNWY2ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKEwJQZPrkXCksP3jwzVECgFJIp3iLRyG/QyC4pNVwYT3IwWnAjyEfNrqilN
O3JE6la2GfNgMkWwEIRf5G+iP5EpfgTk0xoYD+8juroJTIkswfMbTVkPwxjhIoIP
upjvdtVBVeyfhTz3xHfE0CVojseaZ1v5ErJRxBkf0eUfiaPISaADtSmdiIDplu3k
5BukpbiIji9faAMDe6sxbv+oTmCiDfcM3h9bJQJ7a3HC1PHb7N8KKZWN3ZV1RSt4
7Z1jae8rXM13wiiyg148ptgJGMlQvdWanP7shoyRNf/6l/S39f0/4BimubypHuwt
bZbR/NFbRE1623nr/Qr9nxkpA7ECAwEAAaOCAmgwggJkMB0GA1UdDgQWBBQ+/wQl
WkYGDJotdF59UsyOlC1zRDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNFQTk2MTkw
OTJCRjExRjBBODUzQjEyMkM0RjlBRTAyLnJvYTAnBggrBgEFBQcBBwEB/wQYMBYw
FAQCAAEwDjAMAwQAnXepAwQCnXeoMA0GCSqGSIb3DQEBCwUAA4IBAQB9fbYUX7aQ
6j1IlMqIwU3y2OWc7l5MV4braSIEdfTKYpUzTZuIsm4os6cO7nctdQVbmrdHdrC9
ccYgu+U3evUJPriVuv4DS9akyHPjdNzXx8SiDXfcTs4hFHeeEzOC5o7gWSs9REBK
zclJWgmgiAcAGcXeQkAlzBmx0b9RP+t6R4zixDLLC7TcAASHGxT7HOF6wHZAtOi8
gilIaFMDgEShskNNgicSAibLFdcTpFCmxvRlbP5NZXjZf4ufxDlAa1re3UPnQUz6
+avqDq2s/vkWRe/+sJQCp7HG1emqmdWI8cf2nkhCii8yB431GjN9lbToiuiPeKdo
FtOzNsXwgYds
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:15 2026 by rpki-client