Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/26E31278CA3811EEB0C6A436C4F9AE02.roa
File:                     26E31278CA3811EEB0C6A436C4F9AE02.roa (raw, json)
Hash identifier:          YLouRJayszJ+YXIZjA0nYlRHirFmGMZNUS3tAUGchSU=
Subject key identifier:   BC:CF:8B:5D:0F:F6:EC:58:59:23:20:E7:DF:E5:DD:D6:47:A7:14:E5
Certificate issuer:       /CN=A91A76AD/serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A
Certificate serial:       CA
Authority key identifier: 11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/26E31278CA3811EEB0C6A436C4F9AE02.roa
Signing time:             Thu 13 Feb 2025 07:08:24 +0000
ROA not before:           Thu 13 Feb 2025 07:08:24 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     152448
IP address blocks:        157.15.58.0/23 maxlen: 23
                          157.15.58.0/24 maxlen: 24
                          157.15.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl
                          rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 04:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A76AD, serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A
        Validity
            Not Before: Feb 13 07:08:24 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67ad9a67-a7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1d:24:96:4a:a9:e5:57:0f:25:d3:a9:00:8b:
                    04:e9:33:0a:0c:a6:a9:07:20:f4:63:48:3d:86:83:
                    57:c6:22:8c:b0:10:c7:9c:1d:44:ae:76:1e:22:e7:
                    ef:84:da:da:36:e4:83:1c:f3:02:2c:d5:84:3c:fa:
                    c0:2a:77:5e:5c:55:5e:a0:29:da:8f:55:53:ac:6d:
                    d9:10:8e:15:be:c9:71:6c:7b:3c:7f:32:4e:9f:96:
                    ee:a3:f7:7e:15:b1:4a:05:94:ab:2d:cc:56:39:47:
                    f8:e4:6a:3e:bb:5b:41:18:25:18:7a:9e:84:52:80:
                    5f:9f:4e:57:5e:d0:58:9e:a7:58:4c:1d:a0:b4:01:
                    f4:9a:75:25:50:dc:f4:59:cf:8e:fe:e4:e6:8a:8e:
                    23:83:da:1f:d0:4f:f7:a1:7d:16:b9:f1:40:e1:d9:
                    68:a9:fb:cb:e3:92:69:8d:b6:64:68:f0:0b:d0:bb:
                    9b:d2:67:11:95:f4:7c:06:70:c3:57:04:e4:bc:b3:
                    fb:9d:e5:fb:94:a0:35:7c:35:da:1c:41:22:6b:e9:
                    51:50:c0:2c:a4:b5:a5:19:30:a5:58:b8:38:28:ea:
                    20:59:7b:6a:95:43:ea:49:4a:8b:08:fa:bd:36:3b:
                    f6:cd:40:00:d2:da:a6:a3:80:d1:03:30:84:aa:45:
                    21:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CF:8B:5D:0F:F6:EC:58:59:23:20:E7:DF:E5:DD:D6:47:A7:14:E5
            X509v3 Authority Key Identifier:
                keyid:11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/26E31278CA3811EEB0C6A436C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:4d:b0:e7:13:5b:25:06:ca:eb:42:92:e1:91:a3:56:ba:6f:
         b3:d8:03:b5:61:9c:ce:19:c6:fc:26:cc:39:d3:42:55:de:6c:
         c1:c2:c8:a4:cd:c1:dc:98:c7:67:78:0d:33:63:5e:8e:1d:10:
         52:7d:ac:90:09:db:de:6d:c2:57:b2:a1:c0:6a:17:c9:bb:39:
         29:e9:16:b7:68:3b:01:d9:91:0d:24:be:f0:a9:8e:2a:68:27:
         6d:49:12:87:00:bb:d5:2a:cb:6e:18:32:54:23:d9:e9:58:11:
         06:c9:57:91:f5:61:71:2c:d6:be:c0:1e:fe:04:6c:6f:02:fc:
         eb:fa:ae:33:77:c6:ff:49:a0:5b:e5:a2:fa:36:09:ae:c9:38:
         bd:56:be:09:25:4d:23:63:da:40:f0:97:f3:22:02:c0:a0:65:
         75:67:e5:dc:aa:cd:8c:1f:62:2f:98:0b:c8:a5:e5:ec:62:36:
         02:42:7f:2a:69:39:c3:4b:39:7b:ad:2f:1e:6d:85:6f:15:38:
         22:81:92:9a:7f:94:5f:e0:41:5e:0e:1f:a9:4a:ab:c5:86:c0:
         32:38:3b:68:a7:96:fa:25:e2:ec:1e:9b:ec:a6:0b:c8:3a:3d:
         e5:d8:af:07:11:dc:c6:b4:84:cc:99:c2:4b:2c:ad:ce:74:30:
         38:66:7c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:37:40 2025 by rpki-client