Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/A9925838F47E11F092821EB06E6F56BC.roa
File:                     A9925838F47E11F092821EB06E6F56BC.roa (raw, json)
Hash identifier:          lRSIkKd/zwuYLdX3bUyWEFiDoE9wxA+sXYjnkUtzvqo=
Subject key identifier:   AC:5A:66:CE:46:E4:DE:02:EE:1B:F6:28:8C:98:30:36:79:AB:6B:92
Certificate issuer:       /CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
Certificate serial:       01F4
Authority key identifier: BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/A9925838F47E11F092821EB06E6F56BC.roa
Signing time:             Fri 03 Apr 2026 04:36:56 +0000
ROA not before:           Fri 03 Apr 2026 04:36:56 +0000
ROA not after:            Sat 01 Aug 2026 00:00:00 +0000
asID:                     133157
IP address blocks:        157.10.134.0/24 maxlen: 24
                          157.10.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:46:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B39, serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
        Validity
            Not Before: Apr  3 04:36:56 2026 GMT
            Not After : Aug  1 00:00:00 2026 GMT
        Subject: CN=69cf43e7-7e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:81:67:65:7c:14:d4:20:a2:1c:4f:fc:86:eb:
                    02:aa:b8:cf:8e:1f:54:b4:3c:8e:69:7f:ab:3b:5c:
                    7d:7b:63:8c:84:07:c8:3c:bf:ae:db:3e:88:2b:a3:
                    b2:bf:a5:f9:60:fd:0f:ac:e8:1b:03:00:eb:b6:e2:
                    77:82:6f:26:35:ad:27:82:70:cd:2d:17:c9:c7:14:
                    8c:2c:23:8d:aa:ff:e0:ce:82:0c:76:f5:f4:3c:35:
                    49:af:c6:f6:38:49:39:bd:84:7b:20:89:77:15:03:
                    03:20:d3:1a:0b:08:da:ae:45:8e:4e:3f:7c:e0:da:
                    bb:9d:d4:1b:a9:d6:3b:9a:32:60:d0:87:b1:1a:16:
                    a2:b9:9c:88:2d:32:e6:7e:1d:10:1c:a3:e6:9e:1d:
                    43:fb:c0:4e:8c:45:e9:99:23:ce:5f:e5:7f:7c:fc:
                    1f:a8:11:df:16:b2:91:e6:9e:d3:e8:bc:d7:6d:a2:
                    7e:eb:2a:09:06:19:fc:f0:78:7a:ad:bc:93:9c:e1:
                    0c:8e:27:f0:75:74:02:5c:2a:86:76:74:df:6f:d8:
                    4a:0b:fb:4f:90:a2:29:ba:46:ea:9e:e6:6a:84:f4:
                    aa:d6:7f:8c:60:da:d0:66:8f:9f:fe:51:e3:5d:e0:
                    74:c5:1d:35:d2:bc:06:e8:30:1c:07:57:c6:fe:03:
                    89:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5A:66:CE:46:E4:DE:02:EE:1B:F6:28:8C:98:30:36:79:AB:6B:92
            X509v3 Authority Key Identifier:
                keyid:BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/A9925838F47E11F092821EB06E6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:9d:7f:bb:59:f6:33:5f:bd:cd:45:2e:cc:be:47:8c:9d:44:
         ca:07:fb:c9:79:93:59:9f:60:ee:69:a1:12:bf:b3:82:3c:9a:
         5f:b1:4a:86:73:ff:8a:f7:12:9e:28:b6:5d:5a:60:f2:10:d3:
         42:bd:a2:4c:51:90:18:f8:1a:77:81:5c:72:69:4e:06:c9:55:
         44:24:11:21:c1:20:48:1d:04:49:22:f7:c1:bb:e3:d0:09:69:
         5a:ab:2d:1f:48:65:e6:73:a6:2d:22:ba:ae:b2:b8:d6:44:32:
         b0:d8:82:16:78:23:86:5d:3b:cf:57:02:43:98:14:90:4a:ac:
         11:58:a0:af:f5:23:7e:d1:fa:40:d5:b5:67:73:eb:d0:ec:54:
         95:da:c3:30:64:d9:2b:17:67:df:d7:22:f2:88:0c:b0:68:ad:
         03:41:4a:7a:a7:e6:ee:5d:58:22:b6:6c:e1:97:5b:a7:8b:6e:
         65:6a:f0:99:10:7b:47:3f:b5:58:7d:b1:31:a5:1a:ca:95:0d:
         ad:01:92:cf:d4:95:34:8f:52:91:7e:e9:47:2b:a2:0f:22:60:
         54:09:c3:17:06:a6:5f:4d:d1:59:90:c6:9e:18:d5:bf:b8:a9:
         a9:8f:1b:7d:ab:98:4f:32:34:ef:2d:84:19:a1:80:2b:d8:b7:
         db:9d:b5:8f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCMzkxMTAvBgNVBAUTKEJFRkZCRUY4RUZDNTAyN0MzNERGRjcwNEM3OUZCMjgx
MkE3MTMzMUUwHhcNMjYwNDAzMDQzNjU2WhcNMjYwODAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNmNDNlNy03ZThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqIFnZXwU1CCiHE/8husCqrjPjh9UtDyOaX+rO1x9e2OMhAfIPL+u2z6IK6Oy
v6X5YP0PrOgbAwDrtuJ3gm8mNa0ngnDNLRfJxxSMLCONqv/gzoIMdvX0PDVJr8b2
OEk5vYR7IIl3FQMDINMaCwjarkWOTj984Nq7ndQbqdY7mjJg0IexGhaiuZyILTLm
fh0QHKPmnh1D+8BOjEXpmSPOX+V/fPwfqBHfFrKR5p7T6LzXbaJ+6yoJBhn88Hh6
rbyTnOEMjifwdXQCXCqGdnTfb9hKC/tPkKIpukbqnuZqhPSq1n+MYNrQZo+f/lHj
XeB0xR010rwG6DAcB1fG/gOJ8wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKxaZs5G
5N4C7hv2KIyYMDZ5q2uSMB8GA1UdIwQYMBaAFL7/vvjvxQJ8NN/3BMefsoEqcTMe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIzOS85NTA3NEEwQUFG
NTYxMUVFQTY1NUI1ODFDNEY5QUUwMi92di0tLU9fRkFudzAzX2NFeDUteWdTcHhN
eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3Z2LS0tT19GQW53MDNfY0V4NS15Z1NweE14NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTRCMzkvOTUwNzRBMEFBRjU2MTFFRUE2NTVCNTgxQzRGOUFFMDIvQTk5MjU4MzhG
NDdFMTFGMDkyODIxRUIwNkU2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnQqGMA0GCSqGSIb3DQEBCwUAA4IBAQCinX+7WfYzX73NRS7MvkeM
nUTKB/vJeZNZn2DuaaESv7OCPJpfsUqGc/+K9xKeKLZdWmDyENNCvaJMUZAY+Bp3
gVxyaU4GyVVEJBEhwSBIHQRJIvfBu+PQCWlaqy0fSGXmc6YtIrqusrjWRDKw2IIW
eCOGXTvPVwJDmBSQSqwRWKCv9SN+0fpA1bVnc+vQ7FSV2sMwZNkrF2ff1yLyiAyw
aK0DQUp6p+buXVgitmzhl1uni25lavCZEHtHP7VYfbExpRrKlQ2tAZLP1JU0j1KR
fulHK6IPImBUCcMXBqZfTdFZkMaeGNW/uKmpjxt9q5hPMjTvLYQZoYAr2LfbnbWP
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:41:24 2026 by rpki-client