Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/604F4E3C0D6611F1AAA528DE1B3D8C67.roa
File:                     604F4E3C0D6611F1AAA528DE1B3D8C67.roa (raw, json)
Hash identifier:          zn+Y2EzBvu1Td2sgtLKQfgs/gBSjMOZeXn2CBE9VYms=
Subject key identifier:   16:90:DD:4E:31:41:B5:27:AA:AB:80:0A:EB:85:EC:0E:96:43:FB:7E
Certificate issuer:       /CN=A91CD314/serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2
Certificate serial:       0F
Authority key identifier: DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/604F4E3C0D6611F1AAA528DE1B3D8C67.roa
Signing time:             Sun 01 Mar 2026 05:35:43 +0000
ROA not before:           Thu 19 Feb 2026 07:41:18 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     151151
IP address blocks:        151.158.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl
                          rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD314, serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2
        Validity
            Not Before: Feb 19 07:41:18 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a3d02f-82d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:69:14:d5:b1:31:2e:ae:0e:78:d8:bc:8d:40:
                    11:2e:fe:19:c1:1f:03:6a:11:69:7c:1e:7a:a2:d4:
                    b6:f0:ae:a1:7a:48:10:1d:35:a1:4a:8e:72:a7:8e:
                    39:68:9b:78:59:f6:28:a9:cb:e0:ec:ab:31:b9:ca:
                    f2:62:c3:27:68:d0:42:11:2c:30:f4:9e:cb:c2:4c:
                    22:07:57:ad:ca:b0:8e:80:70:9a:a1:35:12:d6:1e:
                    b0:8c:3c:31:ae:9f:72:a9:87:45:10:b4:87:a4:a8:
                    6d:fb:5c:10:85:27:36:ad:1b:6c:79:54:e8:86:2a:
                    72:30:c0:20:ef:00:5e:13:e7:81:65:1e:90:c1:51:
                    ff:54:57:0b:ac:c2:b1:15:17:fa:af:5d:18:a2:00:
                    06:44:c1:22:86:4a:14:b1:2e:c2:c5:c5:f8:9b:cf:
                    1b:73:12:f4:60:86:84:92:c0:6f:67:76:4d:b1:3f:
                    1f:ca:cc:68:d4:98:54:68:e9:ae:ec:d3:c0:88:ff:
                    b0:29:12:fe:c9:34:f7:f0:d8:b6:86:87:9f:0a:2c:
                    fc:a7:d0:58:b8:32:cb:43:dd:08:0f:5d:7e:00:d3:
                    1c:85:eb:b0:7f:98:b5:80:60:13:d8:97:a7:46:98:
                    fe:ad:cc:1e:1c:4f:27:55:8f:f2:4b:f6:e3:fd:a9:
                    75:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:90:DD:4E:31:41:B5:27:AA:AB:80:0A:EB:85:EC:0E:96:43:FB:7E
            X509v3 Authority Key Identifier:
                keyid:DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/604F4E3C0D6611F1AAA528DE1B3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:c5:75:59:94:a2:0c:b4:7f:a8:e8:ed:81:52:03:15:61:d3:
         62:ea:b0:16:44:dd:32:ee:52:15:2a:88:22:53:a3:a9:21:3b:
         00:ab:af:21:bd:d2:2a:27:63:36:99:85:8e:46:48:5a:86:db:
         59:57:3e:62:1b:a6:b3:8c:43:42:8f:f6:43:74:91:cf:68:6c:
         97:a5:0a:e0:71:82:50:2c:0d:03:73:9b:38:fd:e3:30:7b:78:
         94:fc:c7:e9:bf:2e:d8:1e:b7:bd:f9:44:b0:e3:7b:2b:8a:88:
         f4:f5:aa:b0:a1:82:ac:a4:36:e2:0c:31:a0:20:36:1f:ab:5a:
         46:05:ca:8f:d7:ef:91:48:5e:ea:07:81:fe:11:df:86:8f:f2:
         61:54:a6:fb:13:e3:43:2c:1f:85:e2:fb:bc:0f:5a:8c:e6:ae:
         48:3c:52:b3:2d:54:ae:3b:77:2d:8e:c7:90:ba:27:b2:9a:af:
         6f:fb:c3:5d:49:b5:9d:72:fe:d7:58:ba:89:9b:c7:e8:fd:15:
         e4:3e:08:57:49:92:03:a6:aa:82:fa:ea:c2:f7:76:25:13:1a:
         af:82:7c:b4:14:89:80:8f:7a:fe:71:e9:ba:80:1d:c0:27:bb:
         e6:71:85:66:a9:ce:0b:a2:25:b6:c5:83:c2:81:53:21:12:05:
         c1:20:07:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:55:47 2026 by rpki-client