Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/675CAE1C097B11F089FAE77FC4F9AE02.roa
File:                     675CAE1C097B11F089FAE77FC4F9AE02.roa (raw, json)
Hash identifier:          1R5i5o2t6sI6xlQkmjgkQQNJTTUz/BHQTGAZz17WwEA=
Subject key identifier:   09:29:D7:E3:BD:0E:E7:DE:9F:66:05:31:73:F8:90:31:12:33:71:C0
Certificate issuer:       /CN=A91B758E/serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70
Certificate serial:       01B9
Authority key identifier: D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/675CAE1C097B11F089FAE77FC4F9AE02.roa
Signing time:             Sun 17 May 2026 04:36:28 +0000
ROA not before:           Sun 17 May 2026 04:36:28 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     152474
IP address blocks:        157.15.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl
                          rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B758E, serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70
        Validity
            Not Before: May 17 04:36:28 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a0945cc-bc91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9d:44:71:96:58:82:1d:c8:73:84:6a:fb:f9:
                    8c:88:66:f7:3c:29:9a:b6:5d:4c:b9:3b:62:12:69:
                    fa:4f:15:fd:88:cb:00:55:cb:ee:da:d2:d5:fb:c0:
                    93:a9:0f:d1:be:f4:ac:2f:67:df:f4:26:d3:bd:5a:
                    8b:01:a2:21:39:2d:a1:10:7a:12:f0:d7:0c:9a:39:
                    15:64:7c:20:81:e4:15:d8:1c:da:a2:78:8f:2c:25:
                    8c:c6:4c:26:87:bd:ac:39:53:2f:f5:85:a5:e4:68:
                    6d:3f:a6:df:52:45:88:f0:a0:b4:51:0f:21:6c:83:
                    ed:da:da:e2:23:46:b2:94:6d:d7:e3:3b:9d:6b:db:
                    81:b3:09:b4:65:6c:5f:ff:de:8b:bf:36:91:f5:b9:
                    c2:4a:4a:6c:48:c3:1c:4f:ee:e5:91:50:15:9d:89:
                    ee:39:21:2a:b7:93:95:0a:32:f3:81:8b:91:1c:9b:
                    b0:ef:d8:df:f8:63:65:ce:53:be:14:01:f4:19:1d:
                    09:bf:3a:cf:21:a1:7d:06:6a:6b:72:45:8a:53:d9:
                    4f:8d:86:63:39:5d:04:ef:59:d1:06:d8:fa:09:0f:
                    f7:d8:8b:22:79:e7:28:44:7c:58:ba:f1:a9:f5:4f:
                    d7:11:9c:92:3a:4f:40:d0:7a:53:b8:f1:51:5b:32:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:29:D7:E3:BD:0E:E7:DE:9F:66:05:31:73:F8:90:31:12:33:71:C0
            X509v3 Authority Key Identifier:
                keyid:D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/675CAE1C097B11F089FAE77FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:f0:9d:dd:14:7d:d6:4f:0d:fa:47:68:08:be:9f:0d:2c:8c:
         9f:34:1b:7b:49:ed:ea:1d:2a:5c:be:e0:f8:a1:b5:67:95:97:
         1b:2c:82:35:bf:9e:5f:40:f1:7f:49:e7:07:a0:bb:f1:07:50:
         32:25:48:21:ae:f4:13:f2:5a:2c:dc:94:a5:90:72:f4:24:b2:
         82:6e:b5:21:fe:4a:c4:ad:0b:3e:41:50:57:11:74:b7:e7:60:
         ab:a5:5d:00:db:37:bf:e3:2a:96:eb:86:35:e7:b2:a9:f5:a3:
         6d:3d:93:eb:00:33:1c:27:3f:d4:ac:76:19:d8:7f:ea:77:b5:
         ac:05:a4:e7:24:74:ab:5f:c3:e1:ef:79:1b:0d:4b:d4:5c:6c:
         3d:7d:78:f2:f9:71:50:29:d6:05:14:46:16:27:4a:83:08:69:
         69:12:00:0e:b2:fb:67:13:91:4f:51:c4:7a:dc:0e:24:c0:d9:
         ee:42:ea:91:77:ab:1c:09:3f:cf:7e:6c:ae:29:f5:37:03:04:
         c5:49:a5:8c:3c:62:a8:3e:f3:57:7a:9c:c0:d4:08:94:15:d3:
         5a:c2:63:3b:bb:ff:ef:3a:9e:37:0c:84:f1:f2:36:51:fa:28:
         15:fe:b9:1b:eb:4e:fe:11:82:7c:8f:c9:1e:2e:16:28:dc:55:
         28:92:be:30
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc1OEUxMTAvBgNVBAUTKEQzQkM4NDI4MDJEQUQyMkQ1QzMwQzI4MjY1RjdEMTA4
QkQ0NzhFNzAwHhcNMjYwNTE3MDQzNjI4WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YTA5NDVjYy1iYzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA051EcZZYgh3Ic4Rq+/mMiGb3PCmatl1MuTtiEmn6TxX9iMsAVcvu2tLV+8CT
qQ/RvvSsL2ff9CbTvVqLAaIhOS2hEHoS8NcMmjkVZHwggeQV2BzaoniPLCWMxkwm
h72sOVMv9YWl5GhtP6bfUkWI8KC0UQ8hbIPt2triI0aylG3X4zuda9uBswm0ZWxf
/96LvzaR9bnCSkpsSMMcT+7lkVAVnYnuOSEqt5OVCjLzgYuRHJuw79jf+GNlzlO+
FAH0GR0JvzrPIaF9BmprckWKU9lPjYZjOV0E71nRBtj6CQ/32IsieecoRHxYuvGp
9U/XEZySOk9A0HpTuPFRWzLoRQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAkp1+O9
Dufen2YFMXP4kDESM3HAMB8GA1UdIwQYMBaAFNO8hCgC2tItXDDCgmX30Qi9R45w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzU4RS9EREVDODEyNEQ1
M0QxMUVFOEYxRThBODVDNEY5QUUwMi8wN3lFS0FMYTBpMWNNTUtDWmZmUkNMMUhq
bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzA3eUVLQUxhMGkxY01NS0NaZmZSQ0wxSGpuQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qjc1OEUvRERFQzgxMjRENTNEMTFFRThGMUU4QTg1QzRGOUFFMDIvNjc1Q0FFMUMw
OTdCMTFGMDg5RkFFNzdGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAnQ/lMA0GCSqGSIb3DQEBCwUAA4IBAQBH8J3dFH3WTw36R2gIvp8N
LIyfNBt7Se3qHSpcvuD4obVnlZcbLII1v55fQPF/SecHoLvxB1AyJUghrvQT8los
3JSlkHL0JLKCbrUh/krErQs+QVBXEXS352CrpV0A2ze/4yqW64Y157Kp9aNtPZPr
ADMcJz/UrHYZ2H/qd7WsBaTnJHSrX8Ph73kbDUvUXGw9fXjy+XFQKdYFFEYWJ0qD
CGlpEgAOsvtnE5FPUcR63A4kwNnuQuqRd6scCT/PfmyuKfU3AwTFSaWMPGKoPvNX
epzA1AiUFdNawmM7u//vOp43DITx8jZR+igV/rkb607+EYJ8j8keLhYo3FUokr4w
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:54:44 2026 by rpki-client