Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/CD58C016F98011F0A50135134F6F56BC.roa
File:                     CD58C016F98011F0A50135134F6F56BC.roa (raw, json)
Hash identifier:          VKmP5GSlMtE0hfaEMKrJ0vlnmX22ydFfoChIzO12Lj8=
Subject key identifier:   C6:1D:3A:9C:57:73:B9:48:DB:D9:23:30:91:54:AC:FB:4D:1A:E3:CA
Certificate issuer:       /CN=A91A3AD9/serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
Certificate serial:       1C
Authority key identifier: EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/CD58C016F98011F0A50135134F6F56BC.roa
Signing time:             Sun 01 Mar 2026 05:44:05 +0000
ROA not before:           Sun 25 Jan 2026 00:00:04 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     4766
IP address blocks:        151.158.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl
                          rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:28:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3AD9, serialNumber=EC2AF0740FD7899DE5DA12D4127A5DFCFA6E63DE
        Validity
            Not Before: Jan 25 00:00:04 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a3d225-ff71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:09:ee:2a:4a:29:ab:8d:4f:18:64:66:ea:80:
                    96:1a:21:6c:fb:64:32:8d:ac:11:74:6e:14:95:e0:
                    a1:46:19:ca:cd:53:eb:7f:30:cd:88:74:8c:07:b9:
                    d1:02:9a:f0:d3:29:26:d4:a3:54:48:95:21:40:d8:
                    35:53:28:0a:da:ec:7c:0a:48:7b:00:f8:41:6e:a9:
                    58:27:53:d4:3e:b3:8e:59:0b:cb:41:e0:ca:71:a7:
                    75:41:0e:84:ee:1c:46:7f:84:b5:ab:97:9c:0c:92:
                    0d:d3:9a:ee:45:58:64:b2:94:2d:25:ca:e1:a2:5c:
                    66:0a:17:2e:21:91:03:4f:67:16:92:9a:7e:e7:21:
                    c5:8c:d0:98:fb:cd:08:e1:61:96:47:2b:f1:84:cc:
                    9c:1c:f7:28:45:9e:8c:9b:76:d1:0c:e1:00:fe:59:
                    bc:4a:25:35:09:e9:ea:b7:51:08:5e:5d:a5:fb:e9:
                    75:68:11:af:26:83:09:bb:73:c0:91:6b:43:74:37:
                    17:9b:60:f3:74:e2:e0:2d:6e:bf:8e:9c:95:4f:1f:
                    be:51:7c:6e:d4:42:9c:5e:ae:74:b1:18:90:b0:ef:
                    a9:70:d3:cd:9a:d8:f3:57:5b:a5:85:ca:ad:d8:5a:
                    37:5a:9f:8c:26:9b:3d:ce:91:3c:b5:cf:d5:d5:ce:
                    80:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1D:3A:9C:57:73:B9:48:DB:D9:23:30:91:54:AC:FB:4D:1A:E3:CA
            X509v3 Authority Key Identifier:
                keyid:EC:2A:F0:74:0F:D7:89:9D:E5:DA:12:D4:12:7A:5D:FC:FA:6E:63:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/7CrwdA_XiZ3l2hLUEnpd_PpuY94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7CrwdA_XiZ3l2hLUEnpd_PpuY94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3AD9/9150DA4AF98011F087DA99084F6F56BC/CD58C016F98011F0A50135134F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:6b:3e:54:2f:73:0b:05:32:4f:78:41:94:24:03:ae:3f:ee:
         60:bd:76:92:fa:f6:98:aa:a7:9d:74:f5:25:32:55:47:dc:d6:
         66:1d:0c:74:08:75:4d:e7:89:38:0f:00:34:41:87:e3:24:a6:
         e9:c1:61:68:c1:87:a7:be:c4:f5:e7:3b:2e:2a:6d:c2:93:ef:
         33:d5:10:fa:3b:bd:3d:5a:a3:9d:de:3b:fd:2d:92:e2:bc:87:
         70:46:ea:37:f0:b2:60:7c:ea:2d:ac:d0:4c:47:13:77:ee:0f:
         88:cf:88:9e:9f:2c:30:4e:eb:10:c2:38:a8:50:3a:b9:af:8e:
         e7:5b:c5:54:3f:51:20:6b:26:4b:47:21:04:ac:ba:a0:c1:a1:
         c6:e8:a2:bb:32:de:ea:7c:f6:23:46:0f:a7:0a:b0:e6:0b:00:
         db:39:a5:0c:8c:8d:49:68:9a:f1:25:5b:0f:d1:bd:92:1e:e3:
         71:9d:ba:18:0f:a0:68:26:57:42:33:94:2b:49:8a:12:bf:7a:
         ee:6c:29:73:71:57:e5:84:86:6d:34:a2:6e:61:0d:71:f5:1a:
         3d:e9:e7:60:64:50:e5:2d:ef:de:a2:12:a6:ab:ee:e3:f0:dd:
         50:07:ad:05:87:b8:b5:2b:ca:c4:d1:71:9c:e3:cb:f8:78:cc:
         7a:4a:7c:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:54 2026 by rpki-client