Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/C19C2720CA2711EE82C12B0CC4F9AE02.roa
File:                     C19C2720CA2711EE82C12B0CC4F9AE02.roa (raw, json)
Hash identifier:          umLP2ipjzrn27HsxfsR6cmYxOOEjkmgBD9Z5UkidCXY=
Subject key identifier:   3F:C9:8D:62:CD:63:E2:29:E6:14:0A:03:2D:F2:33:4F:98:00:7C:B9
Certificate issuer:       /CN=A91CD1A2/serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096
Certificate serial:       01F7
Authority key identifier: C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/C19C2720CA2711EE82C12B0CC4F9AE02.roa
Signing time:             Thu 01 Oct 2026 04:52:31 +0000
ROA not before:           Thu 01 Oct 2026 04:52:31 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     136582
IP address blocks:        157.15.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl
                          rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 03:41:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD1A2, serialNumber=C3E200D4005D9A23E4BFAEAE0EDB72EA43F1D096
        Validity
            Not Before: Oct  1 04:52:31 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abde70f-aed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b0:ed:f0:02:f1:38:e6:0a:16:ad:50:18:a4:
                    55:14:ab:b5:a3:c0:20:37:15:41:90:06:e6:55:fe:
                    ed:e9:6a:99:d3:38:3e:c0:bd:43:45:5f:ea:25:0d:
                    2c:18:2b:b8:54:78:19:b5:20:8b:c1:77:97:d1:73:
                    48:69:da:4d:05:ba:cf:2a:f5:8a:7b:72:e8:9d:e8:
                    0c:1c:6b:93:6f:1b:65:60:3b:1f:b2:c3:78:90:65:
                    8d:15:24:fc:bb:9d:8c:60:16:e6:db:6d:69:55:de:
                    ce:aa:a4:04:93:82:f7:13:ea:91:a0:89:fe:c4:64:
                    15:c2:23:72:22:a5:dd:e2:4f:b5:ec:6c:d4:cb:04:
                    e8:62:96:11:82:b1:3e:28:7f:41:7d:d6:c9:91:70:
                    3c:5d:c8:d1:63:31:a2:9c:32:2a:54:22:8e:88:2a:
                    37:37:28:cc:4e:67:f2:66:e7:6e:66:08:e5:3d:91:
                    39:98:39:20:dd:cf:0f:71:8c:d5:1a:4c:5f:1f:f6:
                    c4:2f:b0:1b:97:87:28:e9:f6:a0:51:ce:fc:6f:f5:
                    90:d5:59:b1:3c:49:d2:b6:08:94:2b:8a:3b:dd:50:
                    0b:83:87:75:e1:4b:a0:49:94:1d:3f:10:5c:7d:61:
                    36:da:4d:8e:be:da:d0:21:d3:bb:1a:77:98:d6:52:
                    3e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C9:8D:62:CD:63:E2:29:E6:14:0A:03:2D:F2:33:4F:98:00:7C:B9
            X509v3 Authority Key Identifier:
                keyid:C3:E2:00:D4:00:5D:9A:23:E4:BF:AE:AE:0E:DB:72:EA:43:F1:D0:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/w-IA1ABdmiPkv66uDtty6kPx0JY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w-IA1ABdmiPkv66uDtty6kPx0JY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD1A2/1A1E3DE4C9FA11EE83F5B029C4F9AE02/C19C2720CA2711EE82C12B0CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:29:99:f9:bf:d8:22:3b:c3:18:1b:7b:aa:42:14:80:6c:66:
         e3:f5:fc:94:14:7c:79:57:45:84:8d:45:77:f7:2d:96:61:75:
         2d:c9:d7:af:d8:76:af:23:b5:48:0a:42:62:bc:55:84:1c:04:
         25:70:25:c8:ab:c2:fb:16:22:a7:be:4b:96:b1:d6:b2:33:d6:
         e4:8a:df:83:9d:4a:2d:d6:32:54:7b:60:f8:0a:17:40:f1:f3:
         a4:28:48:7a:38:dd:d0:1e:99:2e:f2:ad:02:3e:de:3a:36:96:
         0c:1f:2f:7d:3d:06:10:29:12:e4:43:55:03:69:f4:d8:78:e0:
         d6:c5:27:7a:b9:ff:49:72:d6:90:29:63:7f:d0:7f:d6:dc:9a:
         e1:f5:e0:6e:34:93:fc:5f:ce:6f:fd:43:c3:13:48:e3:f3:2c:
         67:31:36:b5:22:5e:e4:a5:d3:34:83:c1:3b:33:4a:dd:89:73:
         5c:e1:d2:13:fb:43:61:78:ff:b3:cb:21:89:ef:16:fc:83:30:
         2d:5d:6f:9e:1b:a1:ba:30:00:09:c1:d9:46:64:05:34:95:bf:
         c0:ec:3c:70:c3:32:6c:c0:88:61:71:a0:35:7d:3b:d6:05:82:
         15:f4:73:44:07:31:73:77:dc:3a:94:f4:d1:21:d0:19:d5:e8:
         fc:38:c7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:16:13 2026 by rpki-client