Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/15B06ACE01B211F1A8498BCA6C6F56BC.roa
File:                     15B06ACE01B211F1A8498BCA6C6F56BC.roa (raw, json)
Hash identifier:          vfgHR88PhYRAzmF0aY8gFJt60hD5VjBXzNXNlgarQHk=
Subject key identifier:   21:B6:DB:8F:90:0A:33:AE:DC:F0:2D:E4:E6:D6:86:97:C2:B9:51:FB
Certificate issuer:       /CN=A91A560A/serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD
Certificate serial:       3719
Authority key identifier: 86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/15B06ACE01B211F1A8498BCA6C6F56BC.roa
Signing time:             Sun 01 Mar 2026 17:38:10 +0000
ROA not before:           Wed 04 Feb 2026 10:13:00 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     63735
IP address blocks:        151.158.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14105 (0x3719)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD
        Validity
            Not Before: Feb  4 10:13:00 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a47982-5af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:2e:f9:f3:67:28:df:d5:09:74:49:1a:f0:
                    95:b1:f9:61:b5:12:44:7e:a4:2d:49:bc:c8:fb:3f:
                    3b:c4:50:6b:ac:7b:4a:0e:bd:aa:79:0f:91:6f:9a:
                    d9:cb:a1:d3:f5:88:17:1f:cf:9e:af:0e:60:5c:e7:
                    52:8b:e5:f4:25:4a:27:f6:6b:49:2e:54:ee:ec:37:
                    3a:b3:ba:c8:40:38:81:79:1c:d7:ae:b6:fd:1b:d7:
                    e7:2c:d1:43:4c:e7:e3:0c:40:d0:e0:63:ba:54:c7:
                    e6:34:5f:07:a8:3d:85:5b:68:48:2f:16:1f:2c:71:
                    36:17:30:ea:f9:97:15:75:ef:92:8f:de:f9:3e:c7:
                    a1:5c:58:45:4f:fa:3f:e8:88:68:16:94:d8:eb:92:
                    eb:b8:19:3d:5f:24:52:32:ba:2c:fa:63:8b:92:02:
                    b5:d7:6c:2a:13:47:97:ef:77:40:cd:4b:35:6f:86:
                    b4:d8:55:b0:90:21:4e:f4:04:64:25:aa:f3:40:b8:
                    c9:6b:aa:4c:8b:2c:51:80:80:3b:e8:09:93:88:f4:
                    e6:df:9c:9f:65:ad:e1:70:32:ec:47:9d:d8:1d:22:
                    df:0e:80:6c:ab:34:7c:b9:07:95:e1:90:9f:22:07:
                    01:1d:bb:9f:66:c3:87:cb:eb:48:e3:68:55:12:95:
                    ec:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B6:DB:8F:90:0A:33:AE:DC:F0:2D:E4:E6:D6:86:97:C2:B9:51:FB
            X509v3 Authority Key Identifier:
                keyid:86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/15B06ACE01B211F1A8498BCA6C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:3b:26:b3:cc:ef:b7:72:e6:d7:bc:88:40:f2:3f:24:43:b1:
         69:30:a0:e0:cb:44:05:09:19:09:ea:f7:84:7c:e0:24:95:c7:
         8d:12:38:ba:73:c6:c5:fa:0d:4f:ec:73:24:c3:8a:98:45:42:
         e6:d3:74:0d:6e:9c:91:68:48:4f:e8:cc:dc:db:78:16:5c:c2:
         d4:f8:70:2b:36:ad:f9:9b:1e:64:a4:72:9c:12:f2:04:4a:39:
         fe:99:92:32:04:16:39:0f:21:db:8c:a6:ce:10:08:91:03:80:
         bc:75:bf:ae:1b:6f:67:a8:22:b5:ab:eb:b7:c9:d5:f3:8c:fa:
         2c:84:9d:e5:6d:18:8a:42:ca:51:37:d9:89:c3:8e:3d:10:49:
         b0:54:ab:d6:30:19:76:23:12:5a:80:70:5d:ab:7c:fd:cd:83:
         cf:7f:cd:79:4b:17:7d:86:0a:2b:c5:51:d9:52:b2:73:d2:c7:
         3a:67:89:04:4b:33:76:00:05:bb:ee:59:30:8d:65:0f:53:0b:
         ca:4d:96:a7:42:21:4f:c6:dd:af:00:8a:a1:ad:2b:6e:f5:ef:
         ca:9b:b5:cb:88:79:25:22:24:d6:44:af:f7:a3:15:2f:f8:46:
         1e:32:2e:f8:85:6a:1d:f9:f6:c7:ca:5b:a5:03:19:47:3f:56:
         3d:c0:b6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:36:16 2026 by rpki-client