Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/15F2CAD0D0AD11F08058D727C4F9AE02.roa
File:                     15F2CAD0D0AD11F08058D727C4F9AE02.roa (raw, json)
Hash identifier:          YLMA9nTAlWfeJbokNuZSOeyCNtPrV//prQQ6jsVgAzw=
Subject key identifier:   4A:C6:E2:09:A8:EC:B1:00:B7:8A:56:37:A0:B7:17:38:49:76:F4:17
Certificate issuer:       /CN=A91D7578/serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5
Certificate serial:       0222
Authority key identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/15F2CAD0D0AD11F08058D727C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:57:42 +0000
ROA not before:           Thu 04 Dec 2025 01:03:47 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     134143
IP address blocks:        157.85.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl
                          rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7578, serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5
        Validity
            Not Before: Dec  4 01:03:47 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a453e6-56b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e1:40:ae:e0:cf:88:34:5b:85:f9:9d:fa:b7:
                    cb:cf:b6:46:99:9c:fc:9a:c9:b7:b2:71:fe:ac:b3:
                    bd:8d:7a:86:9e:ad:bb:fd:94:f2:29:c4:4d:f7:8d:
                    a8:02:1b:90:77:7b:64:4d:a2:3c:22:72:16:1a:e1:
                    b1:be:7d:b0:69:8b:25:66:f4:3a:fd:24:04:63:bc:
                    0b:6d:21:e0:6f:1f:37:bd:a6:36:60:49:b0:76:5f:
                    c9:b3:0a:de:6a:46:ed:79:e4:f4:a2:04:d6:35:f6:
                    e1:d7:4b:ab:18:a4:36:aa:65:de:a8:34:2c:a6:0a:
                    3f:04:57:e9:66:b3:67:fa:45:5d:8b:32:55:38:3d:
                    77:f0:bd:70:26:ec:85:df:46:4f:ea:74:66:9a:a9:
                    3b:ef:94:7c:27:04:3b:7d:f7:3b:10:72:77:b2:4f:
                    85:b8:45:07:b2:03:06:7c:0a:5b:4c:10:5a:e9:74:
                    44:17:f3:8f:ef:bf:96:53:3e:a4:d8:2d:5b:c1:1e:
                    3c:bb:69:3e:28:eb:d9:c7:c8:7e:89:1a:6c:69:18:
                    5f:29:e4:95:da:a7:a9:df:38:32:b4:7b:9b:2a:95:
                    1a:95:f3:cb:10:69:d9:64:4d:d7:21:32:0e:a3:cd:
                    df:6f:80:47:e5:90:4a:8c:77:f6:f6:12:83:01:d9:
                    a2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C6:E2:09:A8:EC:B1:00:B7:8A:56:37:A0:B7:17:38:49:76:F4:17
            X509v3 Authority Key Identifier:
                keyid:9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/15F2CAD0D0AD11F08058D727C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a7:f8:2f:52:be:1e:a2:0c:1a:7b:2d:39:c6:21:bc:f0:d9:1b:
         30:e5:3c:6f:ff:5d:5d:3b:8d:31:f9:26:df:ba:aa:58:8b:9b:
         db:16:86:4a:36:4b:a9:e6:20:37:bf:b2:53:c1:5f:4e:5d:ae:
         97:8f:15:60:ca:b5:d1:04:f9:cc:d7:59:87:33:d1:96:6f:0f:
         ac:ff:90:d2:c4:3f:87:57:36:6c:b2:d3:5d:62:6d:40:00:f8:
         6f:8e:be:62:98:4a:28:53:2c:7b:ce:a8:a4:4e:00:9d:1a:bb:
         c3:f1:0b:6f:42:27:e3:60:b7:9f:27:7f:96:0b:da:82:31:56:
         d2:2d:a4:55:5a:ba:c2:81:c9:6d:1b:7e:99:65:59:24:a1:56:
         62:65:4f:6f:24:0c:ae:bc:d2:8a:b5:1c:60:b1:b2:11:fd:4c:
         1c:4f:b7:c6:19:d2:3b:38:af:1b:79:41:12:4e:a0:86:d4:e3:
         30:f0:3a:0c:20:a0:aa:d6:48:ad:31:fa:a3:87:66:e8:fe:6f:
         40:f0:04:4d:70:34:96:82:d6:fa:be:8a:ac:53:e7:5f:2f:8a:
         51:5a:43:c4:09:cd:b4:34:f0:5a:7c:be:83:5d:34:79:d8:ef:
         f3:3a:e7:75:b4:9c:63:cb:89:11:26:11:6f:8b:57:d5:e2:a5:
         77:dd:55:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:53 2026 by rpki-client