Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/A9925838F47E11F092821EB06E6F56BC.roa
File:                     A9925838F47E11F092821EB06E6F56BC.roa (raw, json)
Hash identifier:          HVLb7YcTy6FtSdFKu4O67iu7/AW30GmLNr7zoREuOm8=
Subject key identifier:   74:88:FD:7B:64:ED:34:42:DC:85:F4:0A:89:D3:0C:F7:8D:5E:7F:CC
Certificate issuer:       /CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
Certificate serial:       01DE
Authority key identifier: BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/A9925838F47E11F092821EB06E6F56BC.roa
Signing time:             Sun 01 Mar 2026 18:25:11 +0000
ROA not before:           Tue 20 Jan 2026 01:56:27 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     133157
IP address blocks:        157.10.134.0/24 maxlen: 24
                          157.10.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B39, serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
        Validity
            Not Before: Jan 20 01:56:27 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a48487-04a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:67:8f:ac:b4:5c:8a:7c:89:65:ce:7c:39:
                    a2:7f:7e:13:eb:47:52:ee:87:d9:b0:07:a4:8f:2a:
                    37:91:2c:d8:58:cd:f0:ae:1b:ca:61:70:fc:0c:79:
                    a7:8b:e6:20:5a:fa:7a:48:1f:48:59:8f:08:c0:98:
                    43:9c:78:a9:a2:f8:46:b2:b8:31:d8:4a:50:c1:6b:
                    60:81:2b:9c:65:21:f1:57:a7:67:10:96:9d:f0:58:
                    a7:06:6e:ad:c3:61:8e:ad:e9:54:26:ac:a7:43:e3:
                    23:5a:d1:c9:95:6a:73:ff:1a:ce:c8:0d:f1:0f:f2:
                    29:96:c9:9d:14:6a:85:48:7d:ba:83:5e:09:d5:ac:
                    34:b0:1e:42:26:a3:6d:7d:8f:2d:64:41:c0:2c:ee:
                    7b:e0:20:ca:55:d8:d9:5a:b9:80:eb:88:00:9b:54:
                    70:ec:39:a8:58:ad:f3:50:95:a6:7e:8b:2b:3e:bb:
                    55:87:11:b1:08:33:a6:97:aa:98:84:b3:af:c9:75:
                    42:44:d2:b8:0c:ef:b5:56:9d:6d:6f:1b:3f:49:d1:
                    11:29:84:00:9e:a6:d0:db:d5:5a:9e:b3:74:89:cf:
                    7f:14:81:81:28:27:78:34:ad:6f:3e:d2:8e:a5:21:
                    e5:a1:94:1c:80:71:b1:b1:c2:b8:c7:07:de:4d:46:
                    88:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:88:FD:7B:64:ED:34:42:DC:85:F4:0A:89:D3:0C:F7:8D:5E:7F:CC
            X509v3 Authority Key Identifier:
                keyid:BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/A9925838F47E11F092821EB06E6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:12:11:bf:b1:1e:55:ea:94:96:0a:7d:d1:db:b5:ed:f3:5e:
         90:35:61:51:de:d8:3c:1a:96:55:5e:72:2e:c9:d6:a2:a3:70:
         52:77:7f:5f:98:ee:18:02:4a:1a:fa:b7:5a:46:7e:e1:46:65:
         82:f4:17:25:c4:c4:0c:cd:5a:80:57:2c:38:cf:6c:ad:7e:16:
         d9:1c:46:bc:51:cc:95:e4:e1:87:ea:7d:af:92:83:b4:0a:6e:
         e9:2d:f0:03:02:ba:b7:42:4a:25:57:95:8f:e5:55:26:d5:b3:
         eb:44:28:89:99:19:5b:46:8c:d3:31:6d:08:c3:92:1e:dc:d5:
         a2:df:61:ab:fc:e6:74:db:a0:05:1e:23:ee:5e:17:ac:fb:8c:
         80:2f:d8:e1:e0:af:46:aa:37:39:e4:95:07:85:d2:82:f8:c9:
         1d:c8:53:73:5b:4c:41:8d:48:28:03:a4:92:dd:a9:14:df:45:
         ad:82:88:fe:59:f3:a4:56:b6:f3:dc:77:ad:88:39:05:03:9a:
         44:e9:d4:95:8f:a2:93:1b:e5:f8:c4:40:85:a1:01:ef:26:ad:
         84:1c:6c:7f:49:c2:31:ff:42:c1:24:73:03:5e:d7:db:be:eb:
         da:08:f6:75:7c:30:9b:10:83:79:6c:f1:49:06:45:9b:39:3c:
         9c:86:ba:41
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCMzkxMTAvBgNVBAUTKEJFRkZCRUY4RUZDNTAyN0MzNERGRjcwNEM3OUZCMjgx
MkE3MTMzMUUwHhcNMjYwMTIwMDE1NjI3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODQ4Ny0wNGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwblnj6y0XIp8iWXOfDmif34T60dS7ofZsAekjyo3kSzYWM3wrhvKYXD8DHmn
i+YgWvp6SB9IWY8IwJhDnHipovhGsrgx2EpQwWtggSucZSHxV6dnEJad8FinBm6t
w2GOrelUJqynQ+MjWtHJlWpz/xrOyA3xD/IplsmdFGqFSH26g14J1aw0sB5CJqNt
fY8tZEHALO574CDKVdjZWrmA64gAm1Rw7DmoWK3zUJWmfosrPrtVhxGxCDOml6qY
hLOvyXVCRNK4DO+1Vp1tbxs/SdERKYQAnqbQ29VanrN0ic9/FIGBKCd4NK1vPtKO
pSHloZQcgHGxscK4xwfeTUaIxwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHSI/Xtk
7TRC3IX0ConTDPeNXn/MMB8GA1UdIwQYMBaAFL7/vvjvxQJ8NN/3BMefsoEqcTMe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS85NTA3NEEwQUFG
NTYxMUVFQTY1NUI1ODFDNEY5QUUwMi92di0tLU9fRkFudzAzX2NFeDUteWdTcHhN
eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3Z2LS0tT19GQW53MDNfY0V4NS15Z1NweE14NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTRCMzkvOTUwNzRBMEFBRjU2MTFFRUE2NTVCNTgxQzRGOUFFMDIvQTk5MjU4MzhG
NDdFMTFGMDkyODIxRUIwNkU2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnQqGMA0GCSqGSIb3DQEBCwUAA4IBAQBvEhG/sR5V6pSWCn3R27Xt
816QNWFR3tg8GpZVXnIuydaio3BSd39fmO4YAkoa+rdaRn7hRmWC9BclxMQMzVqA
Vyw4z2ytfhbZHEa8UcyV5OGH6n2vkoO0Cm7pLfADArq3QkolV5WP5VUm1bPrRCiJ
mRlbRozTMW0Iw5Ie3NWi32Gr/OZ026AFHiPuXhes+4yAL9jh4K9Gqjc55JUHhdKC
+MkdyFNzW0xBjUgoA6SS3akU30Wtgoj+WfOkVrbz3HetiDkFA5pE6dSVj6KTG+X4
xECFoQHvJq2EHGx/ScIx/0LBJHMDXtfbvuvaCPZ1fDCbEIN5bPFJBkWbOTychrpB
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:31:58 2026 by rpki-client