Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/A19F973C60C011F0A28C7F2CC4F9AE02.roa
File:                     A19F973C60C011F0A28C7F2CC4F9AE02.roa (raw, json)
Hash identifier:          y+sTsz0tA3g3DzsQDXuqpBvyUzmJcH4SyCIepVtJQs4=
Subject key identifier:   55:20:5B:91:9B:CA:73:E4:3D:5B:BA:AE:D6:CC:6B:41:55:56:1B:F2
Certificate issuer:       /CN=A91F43F2/serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09
Certificate serial:       DB
Authority key identifier: 55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/A19F973C60C011F0A28C7F2CC4F9AE02.roa
Signing time:             Tue 01 Sep 2026 14:29:49 +0000
ROA not before:           Tue 01 Sep 2026 14:29:49 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     151335
IP address blocks:        157.15.128.0/24 maxlen: 24
                          157.15.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl
                          rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F43F2, serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09
        Validity
            Not Before: Sep  1 14:29:49 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a96e15d-7ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:b8:17:3f:85:13:45:6b:44:01:8a:35:c1:
                    11:02:8d:99:4c:b3:2c:a7:3f:a0:64:bb:32:95:72:
                    3c:a8:24:5d:a1:fd:9e:d5:1d:db:87:31:e8:aa:f7:
                    02:48:e5:ef:a7:f9:3e:95:9f:0a:32:dc:6a:a9:99:
                    8a:8d:40:d6:28:a2:de:b2:45:14:cd:1d:65:75:5e:
                    1e:3f:ea:23:6d:e5:22:26:d0:9a:aa:e5:6d:27:49:
                    d1:52:78:cd:82:fa:53:f7:e9:b6:70:32:69:3f:49:
                    d8:28:84:99:4d:19:6a:9e:21:c4:8d:b0:d7:91:cb:
                    0c:f2:ec:5c:09:24:c0:72:a2:91:2e:d2:a5:40:5f:
                    41:b0:0b:17:56:08:2d:a5:94:56:df:dd:ad:6a:7a:
                    0d:d8:b2:9e:3a:ba:30:ca:8d:fd:7d:e3:86:f3:44:
                    2f:a8:38:96:93:e1:52:89:0f:45:57:45:16:ac:3b:
                    1a:35:06:9a:d0:a4:ac:e3:37:08:c1:e1:74:9b:26:
                    7c:ec:0b:86:e8:7f:f6:57:37:04:3b:a4:2f:a3:db:
                    53:d4:a1:9e:cb:ea:a4:3f:42:1a:3c:d0:26:e6:c5:
                    26:85:77:d3:15:71:1b:68:ff:92:c8:34:f4:c5:80:
                    7d:5f:49:9a:46:0d:32:09:40:d3:36:ed:b6:8d:cb:
                    42:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:20:5B:91:9B:CA:73:E4:3D:5B:BA:AE:D6:CC:6B:41:55:56:1B:F2
            X509v3 Authority Key Identifier:
                keyid:55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/A19F973C60C011F0A28C7F2CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:0c:7a:31:43:66:ed:db:6f:f7:e4:c9:ad:17:38:6c:fe:d9:
         80:94:67:63:f8:78:a5:f6:9c:25:d4:03:e2:75:d5:db:a3:93:
         b0:98:b3:a7:5a:66:d6:dc:d0:4a:eb:99:70:f4:91:4b:96:7d:
         2e:4e:e8:19:be:ee:84:40:4f:ce:9a:be:c3:1b:e1:6f:17:74:
         1b:7a:45:b2:59:16:6f:ec:23:9f:c3:57:c8:0c:fd:25:e4:20:
         6d:a0:0f:71:02:ba:39:02:e2:5c:69:6a:b1:6f:6d:c4:54:6a:
         ba:fb:d0:15:49:b2:68:eb:5c:ca:6b:77:a1:78:e8:02:34:07:
         cf:88:e6:d9:6c:b3:2a:d6:25:31:93:d1:30:a8:e4:0f:11:88:
         f8:19:3d:89:8e:64:17:f3:dc:b0:bc:11:ff:10:e1:8f:d2:88:
         d0:f6:a1:f9:ca:23:be:89:4a:8d:0f:da:d4:03:e7:84:d2:a5:
         82:60:6a:76:c2:11:d3:3f:6e:c5:df:e3:5a:f0:50:66:3f:e6:
         00:ce:c0:48:94:d9:3a:60:d2:f1:0e:2f:1d:36:e7:ea:f1:9d:
         94:ce:02:4f:5e:85:34:8f:6b:2e:27:7e:8b:83:13:3d:03:af:
         2f:cf:a8:9b:8a:ec:1b:01:1e:f9:d9:5b:6b:b6:1f:9c:e3:dd:
         37:63:24:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:21:51 2026 by rpki-client