Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa
File:                     32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa (raw, json)
Hash identifier:          yu+q3f/RarO60hYfGM/lYcRRiKIl/UB8fwUek+JSESk=
Subject key identifier:   60:21:82:02:DC:6C:39:34:67:D9:CD:DA:7A:01:41:B8:60:76:1F:8A
Certificate issuer:       /CN=A912BA82/serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3
Certificate serial:       0198
Authority key identifier: BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa
Signing time:             Fri 27 Mar 2026 04:38:47 +0000
ROA not before:           Fri 27 Mar 2026 04:38:47 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152332
IP address blocks:        157.10.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl
                          rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BA82, serialNumber=BBDA2A52B5048F1A8AABBF5C24172601277CB2F3
        Validity
            Not Before: Mar 27 04:38:47 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69c609d6-04ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:94:9f:38:f8:cc:f3:88:0b:e1:70:93:0e:09:
                    7a:6c:1d:00:92:b4:11:07:36:1d:69:98:10:5d:b4:
                    b4:f6:53:3e:44:24:44:ca:bd:a6:01:85:fe:ff:df:
                    20:ba:f0:9b:39:2e:5d:f6:6b:3d:fc:59:d2:ce:5f:
                    67:57:fc:db:a0:de:32:30:22:74:66:74:98:ea:61:
                    e6:b8:04:8a:7d:15:d2:72:29:98:ab:3c:94:9d:a1:
                    a9:db:18:5b:8b:75:8e:b6:b1:d7:7c:28:59:f8:3d:
                    80:78:8c:16:8b:ed:c1:3d:6d:c4:d1:cc:47:2d:58:
                    9c:76:d3:27:56:ba:00:81:08:ae:26:c7:0f:78:4c:
                    00:79:ef:22:b6:8a:e1:85:28:af:d1:00:2d:e3:04:
                    7a:d1:d4:41:bf:35:48:3f:6b:24:2c:d9:65:de:67:
                    ef:e2:ee:0c:3b:03:2c:b9:bc:a4:08:ee:4d:ab:93:
                    13:30:db:ca:86:47:bd:08:67:e6:75:22:36:d5:79:
                    bf:53:1b:d4:4f:d0:b7:c8:d6:a4:33:15:fc:e9:95:
                    21:80:b5:f2:58:23:86:f6:57:59:b2:c5:58:da:5d:
                    47:b6:a6:6a:e8:c2:9f:d0:e1:9c:9b:5c:49:57:78:
                    65:8d:22:84:8c:d9:6e:41:1d:fe:e6:c8:ab:54:cd:
                    f6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:21:82:02:DC:6C:39:34:67:D9:CD:DA:7A:01:41:B8:60:76:1F:8A
            X509v3 Authority Key Identifier:
                keyid:BB:DA:2A:52:B5:04:8F:1A:8A:AB:BF:5C:24:17:26:01:27:7C:B2:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/u9oqUrUEjxqKq79cJBcmASd8svM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u9oqUrUEjxqKq79cJBcmASd8svM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/F26014E8CE5A11EE8C3BD03AC4F9AE02/32F8A3CCEB3311EEA2DF8C7DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:6b:e6:74:7f:ee:cd:b5:90:9d:33:86:69:23:f7:b8:15:dd:
         3f:e5:a9:cc:f2:35:f9:3c:0c:c9:93:45:a8:7b:1d:68:1e:e9:
         46:e8:f0:e0:60:7d:2a:4c:2c:42:b4:43:2b:49:b4:7b:d1:b2:
         41:d7:33:74:78:bf:f6:91:1c:cb:8e:e2:82:39:0c:ce:fe:bd:
         c3:80:ac:92:96:0b:79:6e:28:11:c4:97:57:f5:25:2a:eb:0a:
         9d:ac:da:15:83:64:16:e7:e4:2f:1b:3a:c5:56:2d:a8:73:fe:
         af:49:40:a5:7f:37:5e:9a:18:c3:ad:ce:d9:ae:58:b4:37:f1:
         aa:e2:d8:f1:8a:6e:b3:7b:e6:69:a2:3e:5d:39:8c:86:2a:fe:
         06:07:20:c0:42:df:45:d9:62:81:10:8e:26:98:0b:3e:57:7c:
         d4:36:40:79:4a:db:ff:2b:fb:94:4c:c3:6f:70:5e:97:9b:30:
         ed:bd:78:3f:06:97:fa:a1:0d:8b:9e:0c:6c:45:ea:2c:79:cc:
         59:ce:5b:27:64:84:f1:9c:41:e3:08:bc:5e:af:7c:d2:ba:c7:
         70:6c:6e:94:d9:79:e3:52:28:84:08:ae:5a:95:9b:61:d1:81:
         5f:7e:b4:66:cd:d8:4a:9e:52:b2:91:87:92:fe:2b:4e:be:04:
         b4:c2:f0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:00:14 2026 by rpki-client