Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/79E25D40601211F1AD9319218A47A888.roa
File:                     79E25D40601211F1AD9319218A47A888.roa (raw, json)
Hash identifier:          q30SnaEDLTLFEYzr3C7O98SoFArm/k9dGLI4gYwGx7A=
Subject key identifier:   03:14:5B:02:70:93:71:81:34:A1:F0:A8:38:0B:97:4C:53:99:87:6E
Certificate issuer:       /CN=A9197CBD/serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D
Certificate serial:       01D0
Authority key identifier: B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/79E25D40601211F1AD9319218A47A888.roa
Signing time:             Thu 04 Jun 2026 12:39:50 +0000
ROA not before:           Thu 04 Jun 2026 12:39:50 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152327
IP address blocks:        157.10.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl
                          rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197CBD, serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D
        Validity
            Not Before: Jun  4 12:39:50 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a217215-45ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:78:d6:da:6b:09:5f:6d:7f:e5:bc:8d:81:
                    86:51:51:b4:0a:75:dd:ef:8c:9e:5c:74:70:3e:c1:
                    98:3c:57:d2:86:a7:66:90:9b:86:d4:fa:fa:f3:9a:
                    39:3b:07:80:fa:16:2e:a4:5d:4b:83:36:40:54:e3:
                    ca:3e:1c:ac:1c:9f:e9:d3:eb:d6:0b:5e:74:4a:a7:
                    9e:aa:30:ef:94:2a:dc:6f:17:16:9a:20:59:ad:69:
                    50:be:89:49:82:5d:4c:4b:b6:38:dc:c8:c7:29:ce:
                    76:b0:03:75:56:7d:e6:d0:9d:c8:1e:3b:92:ba:ac:
                    ca:0d:06:b8:47:02:78:83:55:20:f5:06:0b:1c:32:
                    97:08:cf:d0:e3:9a:2c:06:e0:7f:81:14:03:14:62:
                    47:4c:4b:81:dd:d6:af:f6:9e:67:97:bc:d7:1e:95:
                    da:dc:10:8e:2b:70:ea:b5:d4:02:94:8c:6e:19:3b:
                    65:44:c8:9a:55:e5:b1:e0:e1:31:5a:4d:22:d5:fd:
                    7c:a0:48:f8:7e:24:d0:18:13:dd:a8:51:eb:6a:10:
                    a0:0f:3d:68:ff:53:6a:23:13:d0:58:72:29:cc:77:
                    87:1a:9a:c4:ac:c5:8e:82:14:80:bd:3c:a4:ee:e8:
                    29:21:61:e5:9d:96:c1:16:f8:cf:77:3e:d5:5a:59:
                    96:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:14:5B:02:70:93:71:81:34:A1:F0:A8:38:0B:97:4C:53:99:87:6E
            X509v3 Authority Key Identifier:
                keyid:B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/79E25D40601211F1AD9319218A47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:3b:e2:cd:24:1a:0f:b2:c6:08:32:87:b6:17:88:32:09:8a:
         b6:14:0b:58:f3:d1:0f:ec:a2:b7:7d:98:87:c7:d9:52:d0:e3:
         d1:9e:58:19:18:4a:01:bc:c5:b3:5c:16:c1:e9:69:58:eb:35:
         5c:5c:91:dc:5c:6a:cc:b4:b8:86:de:5d:78:33:d4:22:13:90:
         af:81:4c:47:58:50:8e:cb:22:d5:f2:9e:93:6c:8a:bf:2e:99:
         9a:b6:8c:39:96:d3:fb:82:72:99:84:34:16:c0:55:14:3b:32:
         26:72:e9:80:2e:3a:ce:4c:df:ed:d3:de:d8:94:08:c8:9a:d7:
         b8:cf:1e:89:9f:65:13:62:da:7c:1f:51:cc:14:17:f5:d4:2e:
         a8:a3:6b:3e:83:a7:6c:a0:97:7f:2e:04:c9:f7:d1:0a:f8:64:
         e0:37:77:d9:ae:27:61:5f:e3:2f:4c:81:67:44:f2:88:9e:03:
         32:a0:cc:81:22:6c:02:51:ba:e8:4f:37:d1:de:fc:e2:64:2f:
         f9:ad:b2:17:aa:d8:67:58:ac:f9:2b:83:a9:25:a1:1c:2e:76:
         de:5b:55:fc:2e:e5:50:17:58:0d:99:bf:8c:96:a2:79:8a:13:
         20:01:02:3c:77:5b:81:07:11:c1:99:2c:e5:02:41:0c:d6:5c:
         c8:1e:31:ba
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTdDQkQxMTAvBgNVBAUTKEI0ODY1RTNCRTlDNTY5RDJCOTNGMkMzNTFDQUIyNEQx
NTA2QUFDMEQwHhcNMjYwNjA0MTIzOTUwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIxNzIxNS00NWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu8Z41tprCV9tf+W8jYGGUVG0CnXd74yeXHRwPsGYPFfShqdmkJuG1Pr685o5
OweA+hYupF1LgzZAVOPKPhysHJ/p0+vWC150SqeeqjDvlCrcbxcWmiBZrWlQvolJ
gl1MS7Y43MjHKc52sAN1Vn3m0J3IHjuSuqzKDQa4RwJ4g1Ug9QYLHDKXCM/Q45os
BuB/gRQDFGJHTEuB3dav9p5nl7zXHpXa3BCOK3DqtdQClIxuGTtlRMiaVeWx4OEx
Wk0i1f18oEj4fiTQGBPdqFHrahCgDz1o/1NqIxPQWHIpzHeHGprErMWOghSAvTyk
7ugpIWHlnZbBFvjPdz7VWlmWLQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAMUWwJw
k3GBNKHwqDgLl0xTmYduMB8GA1UdIwQYMBaAFLSGXjvpxWnSuT8sNRyrJNFQaqwN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0NCRC8zNTcwREYyRUIx
MTQxMUVFOTVFNzQzNjVDNEY5QUUwMi90SVplTy1uRmFkSzVQeXcxSEtzazBWQnFy
QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3RJWmVPLW5GYWRLNVB5dzFIS3NrMFZCcXJBMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTdDQkQvMzU3MERGMkVCMTE0MTFFRTk1RTc0MzY1QzRGOUFFMDIvNzlFMjVENDA2
MDEyMTFGMUFEOTMxOTIxOEE0N0E4ODgucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAnQquMA0GCSqGSIb3DQEBCwUAA4IBAQB2O+LNJBoPssYIMoe2F4gy
CYq2FAtY89EP7KK3fZiHx9lS0OPRnlgZGEoBvMWzXBbB6WlY6zVcXJHcXGrMtLiG
3l14M9QiE5CvgUxHWFCOyyLV8p6TbIq/Lpmatow5ltP7gnKZhDQWwFUUOzImcumA
LjrOTN/t097YlAjImte4zx6Jn2UTYtp8H1HMFBf11C6oo2s+g6dsoJd/LgTJ99EK
+GTgN3fZridhX+MvTIFnRPKIngMyoMyBImwCUbroTzfR3vziZC/5rbIXqthnWKz5
K4OpJaEcLnbeW1X8LuVQF1gNmb+MlqJ5ihMgAQI8d1uBBxHBmSzlAkEM1lzIHjG6
-----END CERTIFICATE-----
Generated at Wed Jun 17 12:54:30 2026 by rpki-client