Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/A2516E42DE4511EF8C37E320C4F9AE02.roa
File:                     A2516E42DE4511EF8C37E320C4F9AE02.roa (raw, json)
Hash identifier:          RzSv2j2oh1Hlys0YAQhXioiDQyIBRgHkQXZEytLmhoc=
Subject key identifier:   4B:27:0E:6C:C3:78:38:8D:C0:C8:DC:65:00:95:97:42:02:1F:9B:33
Certificate issuer:       /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
Certificate serial:       01C4
Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/A2516E42DE4511EF8C37E320C4F9AE02.roa
Signing time:             Fri 27 Feb 2026 04:23:21 +0000
ROA not before:           Fri 27 Feb 2026 04:23:21 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152462
IP address blocks:        157.15.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl
                          rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:29:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
        Validity
            Not Before: Feb 27 04:23:21 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a11c39-5864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:18:95:34:6e:66:0f:a2:e5:ad:0e:ed:d7:
                    67:4f:12:60:6b:eb:7f:5d:2b:c1:69:19:a6:54:13:
                    62:b9:77:c0:d7:ff:db:a5:e8:23:02:0c:8e:cf:ec:
                    91:e1:f2:6f:4b:75:ef:26:5c:25:1a:10:50:e8:22:
                    e5:14:47:6d:66:9d:dd:4e:70:6d:d4:bc:04:57:71:
                    82:84:33:ac:63:d7:e2:b2:b2:6c:31:3e:04:b8:81:
                    6e:a2:c1:81:97:2c:40:d9:3a:81:52:4b:fd:b3:da:
                    75:63:12:9c:d9:da:a6:59:5a:67:91:c9:23:7b:ac:
                    bf:18:a9:56:64:c6:f6:7e:19:32:8b:c3:65:ad:56:
                    15:0c:70:22:95:9d:88:d5:f2:53:d7:7b:6a:0d:0d:
                    5d:ab:af:ff:3c:d2:35:3d:73:34:0f:71:e9:85:42:
                    da:f3:9e:5b:a6:08:27:89:d2:87:c8:96:c0:cc:95:
                    fd:db:f3:a1:28:b0:69:86:e7:35:08:31:a0:5b:4e:
                    62:c6:7b:f4:50:24:a2:38:f4:f2:d2:16:60:ab:54:
                    61:c0:5c:c8:b7:ef:be:a4:5d:b5:fc:93:08:ab:76:
                    b1:9a:bc:ec:0f:71:d5:b8:48:93:22:63:3d:81:a6:
                    b6:db:3e:57:42:35:69:2c:74:23:54:86:c8:e0:0d:
                    e0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:27:0E:6C:C3:78:38:8D:C0:C8:DC:65:00:95:97:42:02:1F:9B:33
            X509v3 Authority Key Identifier:
                keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/A2516E42DE4511EF8C37E320C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:5e:8f:6a:1f:d6:67:3d:36:a4:a3:c4:94:1c:fb:9b:0f:e2:
         de:c4:38:d4:7a:c0:78:f0:08:08:c5:13:8e:5d:c8:30:d1:15:
         04:48:0a:f7:0c:f5:b2:78:38:17:c1:25:e8:8d:92:86:56:17:
         d7:83:93:2e:88:a0:c8:39:ce:38:58:6b:99:f2:6d:62:97:8b:
         b5:18:15:3d:31:55:12:65:e0:01:e8:9d:74:91:9c:1a:0c:79:
         5f:09:45:b1:94:8e:2b:8c:ae:b6:f9:60:4f:1d:0e:98:fc:b6:
         73:21:cf:e4:67:91:b9:f4:5f:df:8a:14:99:72:9c:f9:19:3a:
         ac:54:a1:88:f2:15:4b:3f:35:e1:ef:24:38:27:12:54:e7:18:
         3c:df:67:58:e0:e5:07:89:c3:7d:84:0d:71:26:47:88:44:ca:
         f7:4c:9e:58:77:7d:be:d2:81:eb:63:67:22:b7:43:e2:5a:0e:
         5b:ed:22:3a:45:c0:15:21:ab:29:0b:46:50:29:07:b9:21:b8:
         b1:51:3c:a6:7e:42:9a:6f:9b:cc:1c:e8:45:a8:3f:d4:8a:cb:
         22:6f:1c:dc:b8:c5:bb:25:52:93:d5:9a:d9:d6:3f:ad:a6:d9:
         79:82:ed:04:9f:47:8a:a5:40:a5:73:9e:f7:07:56:ed:3a:62:
         ae:21:95:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:18 2026 by rpki-client