Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/30D2517AF1F211F0B442E9B1456F56BC.roa
File:                     30D2517AF1F211F0B442E9B1456F56BC.roa (raw, json)
Hash identifier:          UAtyjnkkGVt2+haohA8ppdzMqX4q+YbKNZp+6njQiaY=
Subject key identifier:   F5:74:73:0E:A6:03:AE:D5:DB:0F:4F:8F:AE:72:D0:91:1C:D1:9B:42
Certificate issuer:       /CN=A91DA5F7/serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270
Certificate serial:       1F
Authority key identifier: 98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/30D2517AF1F211F0B442E9B1456F56BC.roa
Signing time:             Sun 01 Mar 2026 05:46:18 +0000
ROA not before:           Thu 15 Jan 2026 09:11:35 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     136418
IP address blocks:        151.158.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl
                          rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:25:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA5F7, serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270
        Validity
            Not Before: Jan 15 09:11:35 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a3d2a9-6ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e1:69:4f:1f:eb:b9:30:1b:a2:a5:fb:6c:22:
                    4b:2c:73:b2:df:94:98:5b:a6:e4:e1:f6:0a:09:4a:
                    2e:d3:24:8b:4b:30:16:c6:3b:70:36:04:e8:b6:d7:
                    90:e8:98:38:b1:2f:24:e3:4d:21:6b:15:da:24:45:
                    bf:4e:69:56:d1:36:6c:21:f0:f3:0c:69:bc:90:a6:
                    35:ca:8b:71:f8:95:56:8b:49:90:b9:f6:0a:0a:4c:
                    e0:13:01:80:e4:66:3c:07:6d:b2:3e:28:37:b2:32:
                    8d:37:4a:dc:e1:85:3b:e4:cf:bf:cb:fa:84:7d:b4:
                    88:82:ff:06:7d:e6:5b:dc:f2:78:2d:5b:80:b6:f0:
                    ba:bf:df:bb:e6:01:8d:44:cb:6a:23:ba:b0:02:44:
                    a1:c1:31:54:d4:4f:b3:4f:54:9e:b3:e9:47:84:1c:
                    14:59:bb:60:23:27:d1:4b:70:44:21:3b:c8:7d:43:
                    45:ec:48:45:4f:83:98:57:eb:ca:29:f3:0d:ac:66:
                    6a:77:32:73:fc:02:d0:5f:00:11:62:bc:3f:a1:87:
                    f8:13:11:ea:95:20:06:5d:4e:07:ff:65:5d:87:ed:
                    79:7d:c3:d3:0c:45:f2:f0:5e:a1:a8:5d:64:a1:e9:
                    13:3b:09:b2:48:a7:fe:c9:2b:1d:e4:2b:dc:f3:1d:
                    9b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:74:73:0E:A6:03:AE:D5:DB:0F:4F:8F:AE:72:D0:91:1C:D1:9B:42
            X509v3 Authority Key Identifier:
                keyid:98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/30D2517AF1F211F0B442E9B1456F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:5b:05:eb:d3:20:2c:43:9d:74:50:32:6c:de:15:c3:05:d4:
         79:3a:88:95:ad:f4:fa:2d:e5:fd:93:f7:64:9c:7f:db:77:a9:
         c5:ee:98:ca:1f:35:e7:61:60:3b:73:91:bb:28:0b:06:d1:99:
         ae:c6:03:98:93:67:66:a8:4d:7e:3b:75:39:1d:10:07:07:77:
         94:81:e3:c9:5c:c9:c1:cb:91:10:ed:c6:51:29:2f:28:2b:48:
         2d:6b:8a:af:a0:6b:41:b5:1d:09:0e:d6:8d:7f:3b:8f:0f:10:
         74:7a:ed:12:be:9a:de:f7:88:f2:d1:76:0b:a4:af:1d:65:b5:
         cc:21:37:9e:8a:24:1b:8c:d2:83:95:a0:76:31:b7:84:19:6e:
         e6:ac:49:7c:88:53:c4:b5:95:1f:fe:b0:ac:7f:56:a7:3c:31:
         a9:70:ac:67:bf:d2:6a:dc:24:bf:ec:0f:8b:60:79:a3:2a:4c:
         9b:e1:c3:0f:16:af:13:6d:70:1f:4b:14:47:f7:70:98:eb:2b:
         01:a1:3c:4d:02:75:e5:7e:a4:0a:fd:c5:d2:5f:36:eb:a3:ff:
         28:5b:d2:d6:67:a2:0f:a9:1f:0d:18:ed:15:bd:3f:21:12:e9:
         79:19:9e:81:bf:17:8c:30:86:0d:fe:6d:22:bc:38:98:40:2f:
         a9:de:11:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:26:13 2026 by rpki-client