Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/B2B006BAE3E911EEB845B268C4F9AE02.roa
File:                     B2B006BAE3E911EEB845B268C4F9AE02.roa (raw, json)
Hash identifier:          xllDJ7wsryQrkSvX97smRm5LJiMbi7ECfICbiD0R3+M=
Subject key identifier:   46:5A:02:DF:C2:15:F2:88:6B:39:1E:8B:E3:C5:6F:AC:6A:D8:58:2A
Certificate issuer:       /CN=A9131711/serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C
Certificate serial:       0190
Authority key identifier: B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/B2B006BAE3E911EEB845B268C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 04:39:49 +0000
ROA not before:           Tue 03 Mar 2026 04:39:49 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     152473
IP address blocks:        157.15.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl
                          rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 04:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131711, serialNumber=B57B207F0E1C1BA873A0793582C7A8134098674C
        Validity
            Not Before: Mar  3 04:39:49 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a66614-72da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7c:55:7a:b7:b4:a5:4a:16:9d:48:5a:c8:29:
                    49:9c:85:57:94:39:0a:08:77:6c:10:6e:79:a9:38:
                    95:5c:77:33:fa:a9:1d:2e:85:0b:9d:70:81:b9:07:
                    58:8c:8a:6b:ed:bd:b1:f9:85:28:36:69:ff:95:5a:
                    1e:29:23:28:23:d0:14:af:10:5e:f8:8b:61:7e:fa:
                    66:f2:c2:b9:79:a8:b7:ca:6b:11:30:62:63:25:4f:
                    01:2f:c4:de:e7:2f:15:65:ee:3d:db:6b:65:e0:5c:
                    50:a4:13:50:a5:aa:d9:66:4a:df:1a:06:4b:39:7d:
                    b9:7f:6c:35:c9:f1:37:fd:db:a3:ec:0f:d2:59:ab:
                    a6:fa:d8:6e:8c:7e:09:6d:fd:e7:2c:34:3b:48:70:
                    69:64:8b:5e:aa:77:90:40:5e:9b:89:a9:36:c2:6c:
                    6e:8e:57:96:f6:0f:05:71:4c:29:f1:13:8f:66:ff:
                    fe:0d:b4:31:40:af:29:b4:d6:d4:99:87:e2:db:a1:
                    c3:e2:d0:b2:99:00:e3:e4:36:a5:31:10:08:d2:b4:
                    99:d5:ea:91:1b:63:66:77:07:b7:c9:f6:4e:a6:a8:
                    38:29:0b:93:94:54:f3:37:ef:7c:24:8c:18:f2:5e:
                    26:fa:c7:6c:57:bd:16:a5:7a:98:d8:c2:ae:de:4d:
                    2b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5A:02:DF:C2:15:F2:88:6B:39:1E:8B:E3:C5:6F:AC:6A:D8:58:2A
            X509v3 Authority Key Identifier:
                keyid:B5:7B:20:7F:0E:1C:1B:A8:73:A0:79:35:82:C7:A8:13:40:98:67:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/tXsgfw4cG6hzoHk1gseoE0CYZ0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tXsgfw4cG6hzoHk1gseoE0CYZ0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/9FDD2DA0C99111EE891BA419C4F9AE02/B2B006BAE3E911EEB845B268C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:24:e6:c5:b3:a6:bc:a4:be:8a:42:50:27:ce:43:e6:e2:95:
         b3:75:91:4c:49:e3:77:76:1b:49:2a:76:86:81:99:46:62:8a:
         2f:06:91:e0:cd:e7:c2:f9:18:15:c7:dc:3d:d9:be:34:26:89:
         01:3a:4f:66:b6:4d:3d:10:02:a2:73:c5:08:65:82:bc:a8:64:
         5a:06:f7:50:33:39:0c:06:52:75:92:8a:c7:32:18:70:58:4d:
         0e:b4:d2:9e:0a:99:81:e2:91:a0:6e:3f:8c:52:c8:6b:8a:89:
         ff:27:8c:18:a0:b7:e8:e0:af:88:52:79:5b:33:59:8a:35:0d:
         66:47:da:cb:10:e1:41:8e:26:2f:69:3d:9e:db:42:47:ee:8a:
         54:39:56:24:94:17:db:1a:f4:79:f8:6f:d9:8e:08:55:61:72:
         88:b7:33:e4:31:b7:38:31:32:6f:68:fd:cf:22:bd:06:5a:1e:
         a5:6a:e3:01:88:e2:97:37:fe:2f:f1:f7:d6:ab:a6:0f:89:5d:
         7a:75:2c:ec:51:6f:e3:4a:7f:c2:ea:82:b1:21:8e:cd:79:73:
         34:2f:61:f6:ff:a0:cc:fe:49:54:c3:9d:e8:fe:e7:98:0b:53:
         f0:16:49:f4:10:f7:b1:b9:67:8f:25:4e:51:58:0b:75:0f:44:
         d9:ff:f8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:47:21 2026 by rpki-client