Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/A1456A4CBE6811EEBFF35870C4F9AE02.roa
File:                     A1456A4CBE6811EEBFF35870C4F9AE02.roa (raw, json)
Hash identifier:          snLtGNX/R2DW6Vtfs0FBnEL4/BkZ4v63NpPkeUhXcvc=
Subject key identifier:   12:6D:DB:45:EA:D2:07:A7:AF:F6:C2:DE:2A:A2:56:52:07:96:A9:3B
Certificate issuer:       /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Certificate serial:       01A0
Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/A1456A4CBE6811EEBFF35870C4F9AE02.roa
Signing time:             Fri 03 Apr 2026 04:37:21 +0000
ROA not before:           Fri 03 Apr 2026 04:37:21 +0000
ROA not after:            Sat 01 Aug 2026 00:00:00 +0000
asID:                     152447
IP address blocks:        157.15.52.0/23 maxlen: 23
                          157.15.52.0/24 maxlen: 24
                          157.15.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
                          rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C07A, serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
        Validity
            Not Before: Apr  3 04:37:21 2026 GMT
            Not After : Aug  1 00:00:00 2026 GMT
        Subject: CN=69cf4401-b33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:56:fc:9e:72:e7:2d:3a:02:c1:1e:3a:bd:
                    00:a9:94:74:f1:d2:70:26:8c:e1:8d:b3:2e:bd:bd:
                    97:f0:fc:3d:ea:fe:60:d3:3e:4e:b6:59:d8:45:9b:
                    49:dd:f4:8a:07:27:59:bb:17:d4:81:65:e0:f3:1a:
                    4e:dc:59:bd:ad:6f:5f:06:5d:64:2d:fe:e7:ae:5d:
                    f7:fb:f8:b2:28:38:d9:11:10:2b:b1:58:c3:ee:aa:
                    a7:35:f4:ca:81:3f:15:a2:e6:1f:00:0c:df:c9:a8:
                    1f:18:9a:0c:da:8d:25:2c:04:3d:89:d6:3c:00:b7:
                    3a:59:f9:17:aa:87:92:eb:ec:55:02:38:85:70:59:
                    53:d4:ef:0f:10:24:59:e2:b7:05:96:74:4d:57:0e:
                    bb:c1:43:f3:70:a6:3f:00:f7:eb:35:d9:76:24:1b:
                    07:89:ab:dd:68:35:b2:6b:61:0f:1d:10:81:25:4f:
                    f0:c9:14:51:7d:d9:70:ef:a1:a4:db:69:57:87:2a:
                    38:d5:8b:8e:33:46:0d:00:c5:69:fa:4b:94:70:27:
                    58:02:23:eb:a3:78:bf:59:ae:52:07:40:ec:1b:09:
                    3f:5c:00:28:9a:d0:9f:e3:c0:95:52:99:9d:44:9b:
                    ce:b9:00:cb:96:9d:3e:b8:42:b4:97:af:73:03:2e:
                    cc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6D:DB:45:EA:D2:07:A7:AF:F6:C2:DE:2A:A2:56:52:07:96:A9:3B
            X509v3 Authority Key Identifier:
                keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/A1456A4CBE6811EEBFF35870C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:d9:7a:e4:26:44:a4:3d:c7:e4:01:bc:8a:63:1c:2e:ba:2e:
         03:5f:12:07:c2:7a:b3:10:a6:e1:8e:94:01:05:08:d4:15:13:
         92:4c:32:97:f8:31:e1:c6:49:0f:1a:8b:48:6b:a1:79:d4:8e:
         e7:7b:86:fe:12:a7:19:6b:58:f7:1e:22:eb:2f:fe:60:4c:a6:
         71:9c:3f:98:0d:46:9a:10:36:d4:53:fc:dc:74:df:49:3f:40:
         62:a1:69:95:de:9e:b0:f7:4c:2b:d2:05:ef:01:4f:f8:cd:94:
         cb:62:ab:93:4b:fd:5c:bf:5e:7f:56:f3:f0:a0:ee:f7:5c:50:
         b7:24:e9:9e:f9:3b:4f:da:98:9c:68:b5:2c:ae:74:41:15:ab:
         8f:02:db:ab:72:33:df:e5:cb:f4:9c:13:be:d4:1d:db:f2:74:
         2c:a7:8e:4c:e6:b6:a1:86:b8:a1:d5:b7:15:19:f1:69:d6:8e:
         14:ee:7c:11:a1:c1:9e:2d:b7:00:d6:75:fb:aa:f4:0a:02:79:
         02:d6:ac:c7:d0:d6:dc:ec:97:33:a8:28:02:ff:d6:61:a4:2b:
         b5:48:a2:0d:3a:d7:b5:3e:a4:5f:44:70:91:cd:2d:b1:3b:50:
         58:0b:71:30:81:34:2b:44:12:2d:19:58:d3:ad:2e:bc:b2:cc:
         3a:8a:5e:ca
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0MwN0ExMTAvBgNVBAUTKDEyMThERTc1QjI1ODhCNjYzM0E2QkY4OENEMzg4RjMx
QzQzQUM5QzAwHhcNMjYwNDAzMDQzNzIxWhcNMjYwODAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNmNDQwMS1iMzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxKtW/J5y5y06AsEeOr0AqZR08dJwJozhjbMuvb2X8Pw96v5g0z5OtlnYRZtJ
3fSKBydZuxfUgWXg8xpO3Fm9rW9fBl1kLf7nrl33+/iyKDjZERArsVjD7qqnNfTK
gT8VouYfAAzfyagfGJoM2o0lLAQ9idY8ALc6WfkXqoeS6+xVAjiFcFlT1O8PECRZ
4rcFlnRNVw67wUPzcKY/APfrNdl2JBsHiavdaDWya2EPHRCBJU/wyRRRfdlw76Gk
22lXhyo41YuOM0YNAMVp+kuUcCdYAiPro3i/Wa5SB0DsGwk/XAAomtCf48CVUpmd
RJvOuQDLlp0+uEK0l69zAy7MwQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBJt20Xq
0genr/bC3iqiVlIHlqk7MB8GA1UdIwQYMBaAFBIY3nWyWItmM6a/iM04jzHEOsnA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA3QS9GMTQyNjE0QUJF
NjcxMUVFQjMzQzZENkVDNEY5QUUwMi9FaGplZGJKWWkyWXpwci1JelRpUE1jUTZ5
Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VoamVkYkpZaTJZenByLUl6VGlQTWNRNnljQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0MwN0EvRjE0MjYxNEFCRTY3MTFFRUIzM0M2RDZFQzRGOUFFMDIvQTE0NTZBNENC
RTY4MTFFRUJGRjM1ODcwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnQ80MA0GCSqGSIb3DQEBCwUAA4IBAQA32XrkJkSkPcfkAbyKYxwu
ui4DXxIHwnqzEKbhjpQBBQjUFROSTDKX+DHhxkkPGotIa6F51I7ne4b+EqcZa1j3
HiLrL/5gTKZxnD+YDUaaEDbUU/zcdN9JP0BioWmV3p6w90wr0gXvAU/4zZTLYquT
S/1cv15/VvPwoO73XFC3JOme+TtP2picaLUsrnRBFauPAturcjPf5cv0nBO+1B3b
8nQsp45M5rahhrih1bcVGfFp1o4U7nwRocGeLbcA1nX7qvQKAnkC1qzH0Nbc7Jcz
qCgC/9ZhpCu1SKINOte1PqRfRHCRzS2xO1BYC3EwgTQrRBItGVjTrS68ssw6il7K
-----END CERTIFICATE-----
Generated at Mon Apr 6 12:28:27 2026 by rpki-client