Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/40E6AE74FAAA11F0BBD6BD435A6F56BC.roa
File:                     40E6AE74FAAA11F0BBD6BD435A6F56BC.roa (raw, json)
Hash identifier:          rFUINwctLdCKpeYymZBC+HyAkWIaWkc+ZM7j+MzLgis=
Subject key identifier:   56:7D:E0:A9:EE:6C:1B:62:02:5E:AA:B5:11:26:A2:18:41:75:0C:17
Certificate issuer:       /CN=A9197A55/serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
Certificate serial:       23
Authority key identifier: C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/40E6AE74FAAA11F0BBD6BD435A6F56BC.roa
Signing time:             Sun 01 Mar 2026 05:47:54 +0000
ROA not before:           Mon 26 Jan 2026 11:29:19 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     136141
IP address blocks:        151.158.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl
                          rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:28:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197A55, serialNumber=C5EB2546BB73ACE693E19AB107D83F266632CEE8
        Validity
            Not Before: Jan 26 11:29:19 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a3d30a-9178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ce:85:ac:22:64:42:2c:e0:66:7f:67:09:e4:
                    3a:38:11:e0:82:41:5e:99:21:c3:74:4e:4d:32:ef:
                    16:02:29:69:76:24:c2:0e:63:e7:85:19:68:66:fa:
                    3c:0b:e5:14:f3:3a:f0:08:c9:98:55:65:dd:31:b7:
                    f0:d7:47:17:32:05:e3:5d:9f:1e:d4:a1:22:f8:bf:
                    b1:e5:10:48:8f:ca:e8:30:d6:3e:e6:0b:28:d0:95:
                    e3:b4:63:18:e7:3e:a8:f9:b7:dd:f8:a9:c7:59:e7:
                    64:88:e0:87:56:8f:fc:f6:cb:09:71:61:f4:bc:74:
                    ec:99:5f:ac:20:8c:21:6d:9f:20:cd:83:af:54:8b:
                    0a:7e:27:b8:7e:37:1e:7e:a5:9b:42:97:8e:0a:74:
                    95:40:6d:16:67:ec:6a:93:fd:2c:e9:78:46:7a:b4:
                    69:72:ee:9f:98:91:f3:7a:61:ee:4c:dd:9c:63:6c:
                    f4:21:45:a2:95:93:1f:f7:2f:2d:75:43:63:e6:8e:
                    d2:52:0c:7f:c9:44:f0:c8:eb:65:1d:93:5f:8b:e4:
                    36:2a:3b:ce:3d:34:24:57:2c:a2:54:70:7a:5b:83:
                    63:bf:80:88:e1:2b:34:b6:be:6c:ef:78:0d:b6:23:
                    3f:bb:2d:1f:eb:c9:2e:4f:15:4a:d3:3d:e8:94:5e:
                    45:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7D:E0:A9:EE:6C:1B:62:02:5E:AA:B5:11:26:A2:18:41:75:0C:17
            X509v3 Authority Key Identifier:
                keyid:C5:EB:25:46:BB:73:AC:E6:93:E1:9A:B1:07:D8:3F:26:66:32:CE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/xeslRrtzrOaT4ZqxB9g_JmYyzug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xeslRrtzrOaT4ZqxB9g_JmYyzug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A55/B32B5028F7A511F087E51F16556F56BC/40E6AE74FAAA11F0BBD6BD435A6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:36:ea:42:8d:b1:2a:f8:5c:1b:16:d8:e3:93:72:a8:4a:c8:
         74:35:84:9e:34:42:bc:cf:94:da:0f:19:db:7c:59:44:e8:0b:
         4c:27:86:40:5c:0a:a8:b5:20:c7:04:1e:e2:cc:9a:50:45:b4:
         a2:c6:c7:78:13:fb:a7:63:1b:44:c1:3a:e5:30:06:0b:61:17:
         b6:f4:17:d3:73:ee:6d:c2:1b:8d:06:74:4f:00:56:fa:5e:d2:
         2a:f5:55:73:95:08:75:4a:98:8f:7b:67:61:80:77:d2:04:7d:
         2a:f8:94:89:30:8b:74:49:96:a6:80:e4:5d:1f:85:c0:3c:dd:
         07:27:4a:ce:d9:94:cb:f0:1e:dc:82:23:4e:ec:1f:83:41:03:
         b6:b4:55:2b:34:07:b5:8a:68:6a:ed:70:df:12:c2:4f:8f:db:
         c6:50:a0:d1:8d:38:0c:87:96:f7:e8:13:de:b7:6a:f9:51:ca:
         eb:a4:7b:3f:7f:9f:87:8f:8e:e7:bb:e1:e1:74:66:d1:89:f4:
         fc:98:19:f9:ac:ca:fc:0a:3d:0d:23:f1:62:f1:6f:b1:e8:ca:
         ea:0e:6f:47:17:00:60:6e:2f:59:e0:8d:7f:3b:3e:39:78:e2:
         ec:47:07:80:e8:d2:c6:2a:60:d8:39:34:b8:de:d5:07:2a:44:
         c2:b3:22:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:22:46 2026 by rpki-client