Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/2546725EA92811F0A138DF72C4F9AE02.roa
File:                     2546725EA92811F0A138DF72C4F9AE02.roa (raw, json)
Hash identifier:          ccOvd6OCJeS5Mo5TD4UA7bVIYTSRvb313FpwtTK7ruw=
Subject key identifier:   EC:14:CC:C1:4D:75:44:A1:9A:7E:0B:75:CC:1C:57:0D:5E:7F:FB:15
Certificate issuer:       /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Certificate serial:       01A0
Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/2546725EA92811F0A138DF72C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 11:28:08 +0000
ROA not before:           Mon 05 Jan 2026 03:22:47 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154256
IP address blocks:        157.10.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
                          rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 03:56:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AF6A, serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
        Validity
            Not Before: Jan  5 03:22:47 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a57448-a06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:12:fb:40:b2:d4:d4:02:20:59:27:ae:46:ab:
                    b1:93:34:46:64:e5:d8:d3:02:fd:5c:5c:ab:cb:b4:
                    b4:55:d9:d0:bf:0f:9e:08:03:04:c3:6e:55:5a:cd:
                    1d:2e:44:e1:67:f2:17:fa:b1:03:10:f8:c4:3e:8a:
                    fc:58:d2:d0:45:f3:c6:1f:32:e8:45:91:0e:2b:db:
                    08:83:04:a3:82:5f:c0:41:b4:ac:42:89:d3:6e:bc:
                    ec:2c:b8:24:c8:de:3a:8f:60:4c:2e:79:83:85:6f:
                    7c:6c:d8:9f:fb:32:22:27:17:a2:df:e3:60:cf:6b:
                    c0:86:03:9a:01:8b:37:38:a2:ea:6c:b1:a0:99:56:
                    b0:56:43:55:08:8a:86:c6:f8:47:cf:a1:e1:7d:58:
                    3e:7b:e1:7e:4f:7d:bb:74:7c:06:fa:a0:7e:fe:00:
                    42:73:0f:f0:93:c4:c7:e6:1b:7a:74:c5:6e:83:0a:
                    86:e0:7f:fe:22:13:48:11:bd:1b:a7:f6:4d:93:77:
                    5a:4c:0d:d2:92:a9:1a:2c:fe:31:90:9c:0c:0f:e9:
                    af:76:9e:2b:34:43:23:2c:e8:df:1e:44:bc:79:62:
                    b8:4b:9e:7f:05:40:04:76:c0:32:ea:2e:4c:84:6e:
                    9a:6f:17:b4:6b:03:41:6c:b4:06:9b:bf:1c:47:19:
                    9d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:14:CC:C1:4D:75:44:A1:9A:7E:0B:75:CC:1C:57:0D:5E:7F:FB:15
            X509v3 Authority Key Identifier:
                keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/2546725EA92811F0A138DF72C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:39:de:67:10:1c:ab:71:55:a3:5d:10:3d:74:5e:63:ce:83:
         22:41:4d:44:8f:57:57:f7:b3:4c:29:b0:1c:ed:ba:d6:80:84:
         a0:83:9f:79:5a:e3:6d:8e:fa:20:49:f8:d0:0a:54:5e:83:a2:
         00:65:66:8f:f3:9e:f7:03:61:76:40:d0:df:4b:1f:c4:e5:f0:
         d3:72:84:b7:d8:f6:b4:40:83:19:53:bc:27:89:36:1c:7b:bd:
         77:f6:f6:43:cd:db:86:67:5b:1e:dc:1b:51:a6:ec:e4:9f:73:
         cf:11:87:ca:b4:d0:b8:a2:d0:ad:d6:68:1f:c6:8a:92:4c:0e:
         03:b9:91:c2:30:88:3a:43:c1:26:6a:66:f1:7f:cc:98:0d:99:
         e3:0e:94:5b:76:cf:d0:c1:8c:22:bf:11:ca:40:29:82:61:fa:
         64:61:49:c6:52:6f:5b:88:d5:8a:0f:8f:e7:68:55:7e:42:f4:
         fb:4c:9a:1e:74:1d:75:e8:c7:a4:85:b0:96:38:00:95:e9:2d:
         41:cb:7c:5a:7b:b5:36:87:0b:d9:79:83:f6:f2:90:14:ea:7f:
         20:13:c5:15:09:1a:9e:12:5b:1d:0d:ff:83:1f:f2:a1:9b:10:
         a0:ef:53:54:d0:54:30:90:5d:8b:09:c8:49:88:12:65:fe:10:
         56:1c:ab:9f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0FGNkExMTAvBgNVBAUTKDRGODQxRTM4MzNFMEFDNkZFMUJFRUVCRDAwMTIzNUQx
NTI4RUNFN0EwHhcNMjYwMTA1MDMyMjQ3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1NzQ0OC1hMDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArhL7QLLU1AIgWSeuRquxkzRGZOXY0wL9XFyry7S0VdnQvw+eCAMEw25VWs0d
LkThZ/IX+rEDEPjEPor8WNLQRfPGHzLoRZEOK9sIgwSjgl/AQbSsQonTbrzsLLgk
yN46j2BMLnmDhW98bNif+zIiJxei3+Ngz2vAhgOaAYs3OKLqbLGgmVawVkNVCIqG
xvhHz6HhfVg+e+F+T327dHwG+qB+/gBCcw/wk8TH5ht6dMVugwqG4H/+IhNIEb0b
p/ZNk3daTA3SkqkaLP4xkJwMD+mvdp4rNEMjLOjfHkS8eWK4S55/BUAEdsAy6i5M
hG6abxe0awNBbLQGm78cRxmdTwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOwUzMFN
dUShmn4LdcwcVw1ef/sVMB8GA1UdIwQYMBaAFE+EHjgz4Kxv4b7uvQASNdFSjs56
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUY2QS84MzdDRDM0NkFF
NDIxMUVFQkY2NERBNjlDNEY5QUUwMi9UNFFlT0RQZ3JHX2h2dTY5QUJJMTBWS096
bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1Q0UWVPRFBnckdfaHZ1NjlBQkkxMFZLT3puby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0FGNkEvODM3Q0QzNDZBRTQyMTFFRUJGNjREQTY5QzRGOUFFMDIvMjU0NjcyNUVB
OTI4MTFGMEExMzhERjcyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAnQpTMA0GCSqGSIb3DQEBCwUAA4IBAQBNOd5nEByrcVWjXRA9dF5j
zoMiQU1Ej1dX97NMKbAc7brWgISgg595WuNtjvogSfjQClReg6IAZWaP8573A2F2
QNDfSx/E5fDTcoS32Pa0QIMZU7wniTYce7139vZDzduGZ1se3BtRpuzkn3PPEYfK
tNC4otCt1mgfxoqSTA4DuZHCMIg6Q8Emambxf8yYDZnjDpRbds/QwYwivxHKQCmC
YfpkYUnGUm9biNWKD4/naFV+QvT7TJoedB116MekhbCWOACV6S1By3xae7U2hwvZ
eYP28pAU6n8gE8UVCRqeElsdDf+DH/KhmxCg71NU0FQwkF2LCchJiBJl/hBWHKuf
-----END CERTIFICATE-----
Generated at Wed Mar 4 09:47:21 2026 by rpki-client