Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/7DA50F9C3E0B11F09779DF13C4F9AE02.roa
File:                     7DA50F9C3E0B11F09779DF13C4F9AE02.roa (raw, json)
Hash identifier:          A2+Rc3xoTrncaTR95Sq9MBAmQnYMit+OOLZAoM52Nuk=
Subject key identifier:   70:C0:F1:07:2C:D5:95:16:F9:06:11:0A:42:56:EA:C7:1F:8C:B0:E5
Certificate issuer:       /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
Certificate serial:       01C7
Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/7DA50F9C3E0B11F09779DF13C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:07:23 +0000
ROA not before:           Fri 27 Feb 2026 04:23:19 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     138658
IP address blocks:        157.15.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl
                          rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
        Validity
            Not Before: Feb 27 04:23:19 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a43a0b-d916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:08:b4:51:7c:3c:15:5e:49:87:2d:cc:bb:c9:
                    bc:12:9e:51:da:d9:26:45:c7:0d:61:d7:af:85:5e:
                    91:ea:6a:f6:c8:1e:71:de:55:4d:b6:ff:fc:fe:06:
                    0c:0a:ab:3a:c9:6c:f5:d1:f5:3d:f5:89:c7:c9:e9:
                    89:5e:29:2f:a3:2e:53:7b:23:f0:44:be:1d:fa:0c:
                    d4:0f:4c:9b:5d:b1:b5:9e:ca:47:d7:6e:66:de:15:
                    91:14:02:cc:44:f9:93:f3:ed:13:b4:04:c0:05:8e:
                    66:e4:85:94:3a:e4:a5:f0:ee:48:fb:1d:8d:0e:15:
                    d7:8a:c7:3b:dc:17:a8:d7:8c:c4:ad:1c:5d:48:0d:
                    43:a8:f6:40:49:2f:d5:03:24:4f:0f:fb:b8:3d:1e:
                    2c:e7:fd:f5:19:04:26:18:96:99:67:b8:c0:8f:55:
                    98:b9:90:82:b2:d3:20:15:b9:95:bd:73:40:61:c1:
                    86:c1:a6:ca:61:99:18:f2:37:1e:07:08:00:22:c8:
                    43:22:49:bd:29:24:97:05:f7:40:a9:d7:5c:e8:6f:
                    06:fd:47:34:0e:d8:4b:e2:bc:b8:75:cb:bd:84:05:
                    48:08:cd:00:e8:09:9c:8b:66:b8:f3:77:51:8b:0b:
                    2d:a8:36:92:42:fa:ae:24:0b:39:75:8f:f2:51:ca:
                    fb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C0:F1:07:2C:D5:95:16:F9:06:11:0A:42:56:EA:C7:1F:8C:B0:E5
            X509v3 Authority Key Identifier:
                keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/7DA50F9C3E0B11F09779DF13C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:2a:47:c0:d2:0a:d4:b3:ae:12:58:68:27:82:b7:2e:19:2e:
         66:ba:98:c1:a0:b5:af:f8:76:a9:31:49:8d:3e:5d:d3:ad:6d:
         d2:ee:db:ca:36:13:70:61:a3:34:1e:eb:e8:54:4f:4a:65:6b:
         61:ee:2d:e7:32:d5:5b:a0:20:4e:10:42:e7:02:74:78:5e:c2:
         30:8a:ff:c3:27:5b:67:83:70:58:42:e9:57:9b:23:3e:a2:fe:
         de:7b:00:01:50:7a:7b:ea:38:f3:fc:fd:90:d4:a5:f8:2d:72:
         73:b4:85:bf:9f:59:4f:bc:15:c4:5e:5b:05:3a:cb:d2:13:ff:
         68:22:43:fd:b6:4b:27:0e:06:9c:ae:08:5d:83:d9:9f:66:d9:
         43:6a:25:8f:d8:cf:ac:c7:9d:ad:06:78:d2:9b:e1:db:d7:03:
         00:d6:28:fb:bf:78:36:7d:c0:8d:94:cb:f6:9d:a7:70:30:80:
         b9:c4:21:90:9a:3f:1c:0d:88:4f:3e:79:e1:e2:20:bf:3a:2e:
         a8:1f:24:7a:91:65:46:ec:83:70:ca:b9:c1:99:e4:7b:38:ab:
         a3:03:68:62:36:18:5f:e0:e4:10:db:a3:a3:94:c5:9e:30:ed:
         1f:cd:89:cc:5a:5f:dc:f8:4b:1f:61:b7:60:c6:08:c1:d8:8c:
         95:0a:93:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:49:04 2026 by rpki-client