Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/CF6BED9EC63611EEA0C70259C4F9AE02.roa
File:                     CF6BED9EC63611EEA0C70259C4F9AE02.roa (raw, json)
Hash identifier:          G8nSskd1+3Dt8bKMm41Vgd5eqqIso/sxjiFR4lCLrKo=
Subject key identifier:   C8:0F:FD:40:FE:DC:F3:A7:79:F2:5A:67:9F:24:82:6D:9E:3D:B0:48
Certificate issuer:       /CN=A91E1936/serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041
Certificate serial:       0180
Authority key identifier: 5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/CF6BED9EC63611EEA0C70259C4F9AE02.roa
Signing time:             Wed 11 Feb 2026 04:23:32 +0000
ROA not before:           Wed 11 Feb 2026 04:23:32 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     398704
IP address blocks:        157.15.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl
                          rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1936, serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041
        Validity
            Not Before: Feb 11 04:23:32 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=698c0444-6349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d3:a5:7a:2e:e4:e7:2e:d8:47:a4:92:ef:3f:
                    30:86:78:28:0e:58:47:cf:a8:90:3e:30:a7:89:45:
                    58:18:cd:33:06:f8:cc:d2:5f:a2:86:e4:07:78:82:
                    4e:f1:07:a0:44:58:23:90:e4:e3:47:24:da:24:0e:
                    67:a6:9d:7f:a4:ca:ed:b9:48:5c:0a:1b:fa:87:8c:
                    86:85:35:d7:26:6d:84:ac:c9:ef:c8:6a:5e:76:7a:
                    6c:f8:af:78:f2:c2:7f:76:c9:74:63:16:01:01:25:
                    8d:f2:24:32:8f:d5:f9:cb:a2:ee:8a:06:8b:66:a1:
                    6e:18:a6:a7:7a:ea:5c:1e:ce:bc:a0:2e:c5:78:21:
                    7a:07:98:6d:f6:95:b1:f0:34:63:fb:24:cc:28:5e:
                    24:d3:79:b5:1b:fd:ac:5b:dc:54:fc:aa:99:61:6c:
                    b9:5c:b9:dc:2c:0a:3b:5f:72:53:a5:ae:99:ee:9e:
                    55:7c:be:d5:9e:de:5a:17:61:04:9f:3b:43:7c:ab:
                    ab:c0:7b:30:9f:45:d2:8e:30:71:a7:72:dd:dd:b3:
                    1b:d2:8b:99:e7:cf:e1:8a:14:fa:0a:d3:8c:a5:80:
                    04:96:42:75:4e:ea:90:c1:e3:f9:b7:f7:89:d0:bf:
                    96:b0:58:aa:c8:0c:92:cc:fa:7d:c8:9b:76:7d:15:
                    83:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0F:FD:40:FE:DC:F3:A7:79:F2:5A:67:9F:24:82:6D:9E:3D:B0:48
            X509v3 Authority Key Identifier:
                keyid:5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/CF6BED9EC63611EEA0C70259C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:11:f6:2b:52:b1:77:9a:09:31:a4:88:c4:bf:bd:95:0e:1c:
         9f:12:29:43:45:70:39:e9:3d:77:5e:09:ac:6a:0a:1a:ae:bb:
         a8:cb:ea:c8:eb:fe:7f:e7:96:27:d5:0f:fe:61:62:93:33:a3:
         54:c4:44:b2:f3:fd:8a:31:52:cc:9d:7f:cd:bb:3f:a5:ea:11:
         a9:6d:78:0d:9c:b1:69:15:f0:4a:24:be:1f:64:7c:87:db:b2:
         91:4e:47:2a:37:cc:09:9d:1e:34:63:ab:e1:59:54:23:34:2a:
         0e:7c:45:85:91:09:42:64:76:f0:b2:84:03:e2:9d:f3:eb:0c:
         c7:36:ae:c6:ec:89:2c:f3:19:0b:9f:6d:fe:d2:7b:18:ed:96:
         41:2c:4c:42:7d:3a:60:7f:0d:58:56:4f:84:2a:cf:c9:cc:c5:
         33:f3:4a:68:9d:93:61:96:89:01:a0:f4:4f:8a:9e:94:2b:59:
         fd:b9:d1:19:cd:e1:0d:e7:bb:e8:ee:e0:8a:a0:db:e0:a1:5b:
         69:c5:8d:0c:51:a1:27:dd:a2:ca:f5:61:05:ba:6d:69:b7:93:
         8f:3a:e8:e1:fd:58:70:95:77:d9:28:ae:c5:44:6d:91:59:63:
         1d:90:17:97:d5:e9:66:76:ac:8e:aa:ac:19:07:4c:4c:b6:ca:
         38:ec:a7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:27:37 2026 by rpki-client