Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/26E31278CA3811EEB0C6A436C4F9AE02.roa
File:                     26E31278CA3811EEB0C6A436C4F9AE02.roa (raw, json)
Hash identifier:          0JDuK//wuAegrwuCc80bntCG84tWqAxx6pjRbEhGYec=
Subject key identifier:   5F:1C:BE:F6:58:16:CC:3F:74:04:0B:67:CE:29:68:A5:D8:D5:38:B8
Certificate issuer:       /CN=A91A76AD/serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A
Certificate serial:       0191
Authority key identifier: 11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/26E31278CA3811EEB0C6A436C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:03:34 +0000
ROA not before:           Thu 19 Feb 2026 03:24:18 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152448
IP address blocks:        157.15.58.0/23 maxlen: 23
                          157.15.58.0/24 maxlen: 24
                          157.15.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl
                          rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A76AD, serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A
        Validity
            Not Before: Feb 19 03:24:18 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a41d06-4529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:70:51:eb:f1:0d:69:a8:5c:e4:74:1f:d1:
                    99:a5:87:57:20:40:8f:7c:a7:55:64:f2:b3:5b:27:
                    0b:91:dc:99:ee:27:0a:c9:2a:65:ae:a9:7c:1f:92:
                    8c:84:4b:3c:1f:cc:15:09:c2:76:7d:e0:9c:97:4a:
                    d7:67:c1:0d:88:06:0b:b6:32:ab:37:b7:b5:3a:96:
                    1f:c0:2e:60:71:82:39:a4:1f:f1:6f:6e:07:44:58:
                    ac:77:af:ce:1d:ac:f3:31:84:9a:81:16:60:83:57:
                    1c:67:ee:9b:fe:d0:3f:38:b9:e7:e7:83:ee:d1:e1:
                    f6:a8:d9:96:14:9c:6b:fd:bb:1e:ad:f9:46:d4:35:
                    1b:34:95:01:b7:0d:36:42:45:81:75:bd:ea:bf:3d:
                    1e:8b:dc:44:79:a2:af:92:a4:0a:17:71:f1:96:ec:
                    a6:ca:2e:2b:49:e9:8f:8e:cb:29:81:e1:a8:cc:d1:
                    8e:1d:f3:16:93:c7:af:56:4d:f7:1a:68:64:ca:a2:
                    9b:7d:f8:c0:f2:65:7c:7b:5e:18:04:9e:4a:5b:5e:
                    12:70:11:de:fa:0a:ba:50:28:95:e1:4d:94:bc:33:
                    6c:61:ee:d5:07:a8:cd:f9:ae:90:73:e2:11:f7:68:
                    50:84:bc:5c:cf:e6:24:c5:98:99:8c:62:34:75:aa:
                    95:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1C:BE:F6:58:16:CC:3F:74:04:0B:67:CE:29:68:A5:D8:D5:38:B8
            X509v3 Authority Key Identifier:
                keyid:11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/26E31278CA3811EEB0C6A436C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:82:f8:0c:06:7c:fb:96:06:84:5f:98:4e:60:cd:9f:31:96:
         b9:44:da:71:2b:66:34:82:33:b9:39:03:aa:fb:8e:f3:93:63:
         ee:89:ae:c9:cf:67:c3:b4:1a:25:31:d6:e7:06:bd:e5:16:94:
         37:e1:3d:c0:1c:7c:7a:c8:7c:71:95:b2:5d:08:2a:16:17:0f:
         91:50:03:b1:81:6f:99:aa:3a:f5:34:e2:6b:73:6c:00:9f:09:
         a6:38:3f:fc:10:ac:b8:c5:b6:08:68:98:f6:61:82:22:1d:2b:
         6e:fa:bc:17:63:5b:6a:6e:fd:02:66:35:e3:c9:ad:f6:c4:93:
         a9:4f:8e:c5:a0:ce:c3:31:11:97:28:db:14:de:b7:54:ea:47:
         22:1c:67:84:3d:23:77:d4:eb:2b:f9:e9:31:6a:f8:1d:a9:80:
         d5:bb:c5:37:e5:bd:b1:e9:77:b8:cc:f0:23:e8:a6:25:11:0e:
         53:69:83:1b:d1:d6:95:3c:cd:87:f5:3e:f9:0b:01:bd:96:3c:
         f3:02:d5:59:52:42:82:57:21:49:5d:79:5a:80:81:9f:98:29:
         c8:3b:54:e5:33:83:02:2a:62:a5:a0:6f:7c:7b:40:97:a9:3c:
         b3:57:2b:24:7b:54:0d:1b:f6:c7:9e:9a:ef:7b:65:2d:13:73:
         80:ef:8e:83
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc2QUQxMTAvBgNVBAUTKDExNUE0MTYwQzg1NTU0N0Q5RTMxMEM2MEQzRDA4OENC
QkM5QTk5MkEwHhcNMjYwMjE5MDMyNDE4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MWQwNi00NTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtHdwUevxDWmoXOR0H9GZpYdXIECPfKdVZPKzWycLkdyZ7icKySplrql8H5KM
hEs8H8wVCcJ2feCcl0rXZ8ENiAYLtjKrN7e1OpYfwC5gcYI5pB/xb24HRFisd6/O
HazzMYSagRZgg1ccZ+6b/tA/OLnn54Pu0eH2qNmWFJxr/bserflG1DUbNJUBtw02
QkWBdb3qvz0ei9xEeaKvkqQKF3Hxluymyi4rSemPjsspgeGozNGOHfMWk8evVk33
GmhkyqKbffjA8mV8e14YBJ5KW14ScBHe+gq6UCiV4U2UvDNsYe7VB6jN+a6Qc+IR
92hQhLxcz+YkxZiZjGI0daqV3QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF8cvvZY
Fsw/dAQLZ84paKXY1Ti4MB8GA1UdIwQYMBaAFBFaQWDIVVR9njEMYNPQiMu8mpkq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzZBRC9GRUNBNzUwNkJF
N0YxMUVFOTY3ODRENjJDNEY5QUUwMi9FVnBCWU1oVlZIMmVNUXhnMDlDSXk3eWFt
U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VWcEJZTWhWVkgyZU1ReGcwOUNJeTd5YW1Tby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTc2QUQvRkVDQTc1MDZCRTdGMTFFRTk2Nzg0RDYyQzRGOUFFMDIvMjZFMzEyNzhD
QTM4MTFFRUIwQzZBNDM2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnQ86MA0GCSqGSIb3DQEBCwUAA4IBAQAfgvgMBnz7lgaEX5hOYM2f
MZa5RNpxK2Y0gjO5OQOq+47zk2Puia7Jz2fDtBolMdbnBr3lFpQ34T3AHHx6yHxx
lbJdCCoWFw+RUAOxgW+Zqjr1NOJrc2wAnwmmOD/8EKy4xbYIaJj2YYIiHStu+rwX
Y1tqbv0CZjXjya32xJOpT47FoM7DMRGXKNsU3rdU6kciHGeEPSN31Osr+ekxavgd
qYDVu8U35b2x6Xe4zPAj6KYlEQ5TaYMb0daVPM2H9T75CwG9ljzzAtVZUkKCVyFJ
XXlagIGfmCnIO1TlM4MCKmKloG98e0CXqTyzVyske1QNG/bHnprve2UtE3OA746D
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:10 2026 by rpki-client