Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/198EDB1034E511F1828F838E91833773.roa
File:                     198EDB1034E511F1828F838E91833773.roa (raw, json)
Hash identifier:          vfUkhhZvC+GnQyu1JxTO9mkMqnpFyY7JrCSKN7gLZzM=
Subject key identifier:   C3:B2:AD:2B:F3:77:69:51:F5:AF:12:32:75:0C:44:E0:1A:5A:84:A6
Certificate issuer:       /CN=A91FBC9F/serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF
Certificate serial:       26
Authority key identifier: 9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/198EDB1034E511F1828F838E91833773.roa
Signing time:             Fri 10 Apr 2026 13:56:41 +0000
ROA not before:           Fri 10 Apr 2026 13:56:41 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     140687
IP address blocks:        151.158.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.crl
                          rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBC9F, serialNumber=9A925E868C26AE3CE7E08CED6FC3112F640F2CCF
        Validity
            Not Before: Apr 10 13:56:41 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d90198-021a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:61:21:22:68:86:29:e2:e1:3d:f1:6a:dc:
                    e3:cf:6a:a0:11:ee:d6:9b:c7:e4:e2:e2:96:f5:d1:
                    d7:48:54:68:e8:b4:63:a5:3c:6a:9f:1b:e7:1e:b2:
                    b3:53:0a:7d:af:01:b6:5c:c2:95:21:44:4a:ab:43:
                    48:de:b6:03:0f:01:f8:16:d0:2e:45:15:2d:3f:2c:
                    96:e0:a5:dc:e0:c4:1a:56:7e:6b:a4:7a:94:4e:27:
                    68:1d:4f:d9:fc:69:ec:2a:5f:bb:06:2a:9c:d6:64:
                    ca:54:3a:e0:00:8d:eb:d1:98:c2:3f:a7:2a:55:8b:
                    e9:44:6d:fc:bc:93:35:6d:07:db:86:c2:04:ba:94:
                    04:cd:e8:65:aa:0b:3b:94:d3:e0:20:a4:8d:76:d0:
                    e0:2f:ca:a7:0b:9f:e2:f2:00:6f:1a:1f:46:9e:6f:
                    ea:b7:ee:e1:63:98:1a:06:bf:e8:63:0d:d5:f7:7c:
                    13:3f:d2:71:ff:3a:7f:62:88:85:32:25:c0:c7:5d:
                    28:8f:c6:01:86:25:3e:d6:f8:94:cd:23:34:c3:5d:
                    b8:6b:c7:ed:d7:98:10:c1:28:f7:2e:0d:f7:6a:b8:
                    18:b7:01:fe:c6:0d:6b:d2:b6:a5:d6:29:a8:85:ad:
                    c1:bb:5a:40:6a:28:4d:9e:51:de:52:8b:0c:3b:02:
                    ac:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B2:AD:2B:F3:77:69:51:F5:AF:12:32:75:0C:44:E0:1A:5A:84:A6
            X509v3 Authority Key Identifier:
                keyid:9A:92:5E:86:8C:26:AE:3C:E7:E0:8C:ED:6F:C3:11:2F:64:0F:2C:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/mpJehowmrjzn4Iztb8MRL2QPLM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mpJehowmrjzn4Iztb8MRL2QPLM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/7FD96BF60D8011F1920B3A0E243D8C67/198EDB1034E511F1828F838E91833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:5c:a8:87:ae:9e:48:51:11:5a:d0:1b:aa:4e:3c:d4:5c:35:
         35:bd:93:3e:8e:19:be:31:94:8d:99:3f:63:a6:e0:4c:8c:db:
         96:e3:9a:03:d6:a1:0c:3c:90:1f:a6:cf:a8:76:c9:b3:25:99:
         8a:1d:3d:33:56:32:5b:b7:0b:26:58:a9:aa:ab:59:83:a0:d5:
         2d:7d:6d:2c:7e:74:01:75:1b:a8:f6:3b:ea:a1:92:37:7a:52:
         34:32:f4:b4:0c:a6:30:0d:05:86:a7:bf:ee:8d:df:7e:1f:17:
         fc:b9:84:20:2f:b2:83:f3:a4:ad:ad:20:c7:97:56:50:a8:a7:
         69:45:96:d2:11:b0:01:2a:ee:24:a7:90:a3:3a:84:e3:3e:63:
         98:58:03:78:21:6c:e1:0f:8a:2d:55:35:aa:97:e4:58:28:9b:
         8a:1b:45:c5:af:a5:7a:9f:98:5a:8c:7f:75:0d:3b:0d:05:11:
         2a:31:1d:95:b2:c4:61:9b:02:bc:b1:58:18:5c:8c:c4:fa:11:
         ce:36:c9:5e:27:67:d8:b5:99:73:be:c7:c7:f5:33:5e:44:93:
         52:ae:78:3c:fd:c8:0f:32:d8:3d:32:11:37:63:0f:4b:73:0e:
         b8:2a:d1:45:36:4f:bb:32:53:9d:56:ca:94:a3:1c:67:3c:df:
         bd:d2:00:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:44 2026 by rpki-client