Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/C4D99CDE097B11F1B8223907113D8C67.roa
File:                     C4D99CDE097B11F1B8223907113D8C67.roa (raw, json)
Hash identifier:          KEWr/3hG6gAXbw8XNIv0hau0dk9zYvinvGd5h59v7Jw=
Subject key identifier:   45:7C:AB:62:73:31:9D:D1:AF:C1:92:9C:A2:0B:8B:13:B4:B0:80:36
Certificate issuer:       /CN=A91CD314/serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2
Certificate serial:       0E
Authority key identifier: DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/C4D99CDE097B11F1B8223907113D8C67.roa
Signing time:             Sun 01 Mar 2026 05:35:43 +0000
ROA not before:           Sat 14 Feb 2026 08:04:21 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152702
IP address blocks:        151.158.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl
                          rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD314, serialNumber=DE266D6AF0B93DE9C86927320A2E9DBBC9CF9CC2
        Validity
            Not Before: Feb 14 08:04:21 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a3d02f-6132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:d4:bd:a1:88:71:1f:99:b8:c0:67:ca:bd:
                    90:ce:ad:d7:82:23:45:1b:a5:a5:21:20:a4:29:0d:
                    fc:cc:29:78:e6:c3:c5:b4:0d:95:21:4b:8c:90:d0:
                    70:46:6b:64:84:a0:8e:26:29:a7:87:59:b9:7a:06:
                    a0:7f:d6:df:9c:05:e9:d7:75:53:0a:d0:58:19:8f:
                    84:4f:4f:90:b9:a1:a6:dd:2d:4c:bd:6a:ac:ef:11:
                    d3:08:6b:8f:92:b2:73:ec:1f:58:4c:c8:2f:da:b9:
                    4f:a7:4e:46:cd:14:d2:4f:0a:a1:2e:78:41:f1:62:
                    b8:46:03:68:de:a2:b8:3f:57:86:58:76:b8:17:f7:
                    b1:11:28:e1:cd:1b:7f:d5:3b:ca:6d:d6:c8:0d:78:
                    6d:e2:a6:94:f0:a9:c7:d7:34:0a:3b:94:7c:62:65:
                    79:f5:44:8b:5e:e8:f4:dd:8d:28:12:2b:29:39:cc:
                    ed:42:f8:f9:79:d5:b9:ff:6b:dc:4c:ee:ef:9f:3f:
                    a8:e1:27:25:f3:0a:32:f6:79:19:c4:8d:49:85:6b:
                    b4:78:26:99:27:ae:c7:70:51:45:7f:3b:15:fb:96:
                    55:a2:6f:6d:96:8a:92:52:03:25:ed:20:a2:ae:04:
                    81:27:01:c1:20:c5:e2:d9:5b:0e:80:b4:d3:7d:ab:
                    c6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7C:AB:62:73:31:9D:D1:AF:C1:92:9C:A2:0B:8B:13:B4:B0:80:36
            X509v3 Authority Key Identifier:
                keyid:DE:26:6D:6A:F0:B9:3D:E9:C8:69:27:32:0A:2E:9D:BB:C9:CF:9C:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/3iZtavC5PenIaScyCi6du8nPnMI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3iZtavC5PenIaScyCi6du8nPnMI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD314/365974C6097A11F1804F5EA1103D8C67/C4D99CDE097B11F1B8223907113D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:1f:ee:d9:b2:db:f2:1e:5c:7a:ea:d8:41:44:46:8b:57:10:
         52:7c:e9:f8:b7:9a:bf:76:d3:3e:4a:a7:3f:70:ac:19:0f:a5:
         4d:b9:90:28:73:a7:3d:d7:94:31:b1:45:b3:70:33:b1:74:b1:
         cf:06:bc:e8:3d:e3:da:e1:da:b3:1f:45:7d:c5:52:81:a4:07:
         68:0e:cd:36:9d:ad:bb:ec:27:2f:39:35:3d:ea:ad:a6:fa:9a:
         66:5c:07:7e:c8:55:7b:e0:dd:20:f2:d1:f6:9f:50:52:99:93:
         3a:32:7e:67:c7:d1:17:f3:a7:4f:8a:28:17:a1:f4:d6:fe:39:
         04:c2:ae:3e:2b:47:99:d7:37:d7:8e:95:75:43:f8:67:c5:19:
         47:54:8c:51:fe:dc:1f:d9:f1:b0:16:51:20:da:0f:d5:b5:e2:
         fd:18:88:ec:95:aa:49:bb:16:14:ca:03:cb:d9:80:64:52:19:
         2f:27:6c:16:d1:82:f4:a6:21:5e:dc:15:e8:75:0d:6b:aa:13:
         60:09:29:6f:11:d1:ee:6a:de:85:99:4f:b0:49:66:20:f7:f5:
         ea:2d:50:11:67:a4:c8:7b:c9:56:8f:07:c6:cf:31:00:4d:a7:
         b2:1e:68:b7:b7:2f:1d:43:d9:c3:65:94:df:33:53:04:21:ee:
         71:02:8e:11
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
RDMxNDExMC8GA1UEBRMoREUyNjZENkFGMEI5M0RFOUM4NjkyNzMyMEEyRTlEQkJD
OUNGOUNDMjAeFw0yNjAyMTQwODA0MjFaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkMDJmLTYxMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHpdS9oYhxH5m4wGfKvZDOrdeCI0UbpaUhIKQpDfzMKXjmw8W0DZUhS4yQ0HBG
a2SEoI4mKaeHWbl6BqB/1t+cBenXdVMK0FgZj4RPT5C5oabdLUy9aqzvEdMIa4+S
snPsH1hMyC/auU+nTkbNFNJPCqEueEHxYrhGA2jeorg/V4ZYdrgX97ERKOHNG3/V
O8pt1sgNeG3ippTwqcfXNAo7lHxiZXn1RIte6PTdjSgSKyk5zO1C+Pl51bn/a9xM
7u+fP6jhJyXzCjL2eRnEjUmFa7R4JpknrsdwUUV/OxX7llWib22WipJSAyXtIKKu
BIEnAcEgxeLZWw6AtNN9q8aHAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQURXyrYnMx
ndGvwZKcoguLE7SwgDYwHwYDVR0jBBgwFoAU3iZtavC5PenIaScyCi6du8nPnMIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMzE0LzM2NTk3NEM2MDk3
QTExRjE4MDRGNUVBMTEwM0Q4QzY3LzNpWnRhdkM1UGVuSWFTY3lDaTZkdThuUG5N
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvM2ladGF2QzVQZW5JYVNjeUNpNmR1OG5Qbk1JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RDMxNC8zNjU5NzRDNjA5N0ExMUYxODA0RjVFQTExMDNEOEM2Ny9DNEQ5OUNERTA5
N0IxMUYxQjgyMjM5MDcxMTNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGXnqowDQYJKoZIhvcNAQELBQADggEBACMf7tmy2/IeXHrq2EFERotX
EFJ86fi3mr920z5Kpz9wrBkPpU25kChzpz3XlDGxRbNwM7F0sc8GvOg949rh2rMf
RX3FUoGkB2gOzTadrbvsJy85NT3qrab6mmZcB37IVXvg3SDy0fafUFKZkzoyfmfH
0Rfzp0+KKBeh9Nb+OQTCrj4rR5nXN9eOlXVD+GfFGUdUjFH+3B/Z8bAWUSDaD9W1
4v0YiOyVqkm7FhTKA8vZgGRSGS8nbBbRgvSmIV7cFeh1DWuqE2AJKW8R0e5q3oWZ
T7BJZiD39eotUBFnpMh7yVaPB8bPMQBNp7IeaLe3Lx1D2cNllN8zUwQh7nECjhE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:55 2026 by rpki-client