Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/95303322F20511F0873139314A6F56BC.roa
File:                     95303322F20511F0873139314A6F56BC.roa (raw, json)
Hash identifier:          1sNl2GKaplu72shhpID3R2WKIOZVHmc3EWv5WEQWdk0=
Subject key identifier:   98:0B:32:00:37:C3:05:17:ED:3C:9D:D3:0E:7E:D0:8D:92:EE:11:86
Certificate issuer:       /CN=A9151290/serialNumber=BD3CC5FF8428F2DE1C386BF8068D028745806FCE
Certificate serial:       26
Authority key identifier: BD:3C:C5:FF:84:28:F2:DE:1C:38:6B:F8:06:8D:02:87:45:80:6F:CE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/95303322F20511F0873139314A6F56BC.roa
Signing time:             Mon 02 Mar 2026 15:09:39 +0000
ROA not before:           Thu 15 Jan 2026 11:30:24 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     146943
IP address blocks:        192.83.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl
                          rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151290, serialNumber=BD3CC5FF8428F2DE1C386BF8068D028745806FCE
        Validity
            Not Before: Jan 15 11:30:24 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a5a833-b808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:53:17:bf:11:7f:8e:19:7a:ff:f9:10:c4:19:
                    85:90:8f:1b:06:d7:fb:6d:47:35:16:65:09:87:a8:
                    38:10:e3:c7:a2:ee:19:27:06:95:a8:bd:0a:2e:cf:
                    f3:82:18:84:63:2a:c7:48:f5:6e:2b:35:ff:d3:a3:
                    38:6d:17:e9:f7:d6:ee:45:5c:77:8d:16:1a:fd:d2:
                    5a:a8:14:d5:7c:f9:0f:85:c9:25:02:71:35:21:c0:
                    52:16:c3:58:9b:e6:64:52:17:71:56:01:ca:72:da:
                    69:eb:41:55:a7:c1:56:f4:bf:69:ea:a1:d5:b4:8e:
                    45:d9:f5:e0:1f:7c:4d:b3:af:c8:06:eb:95:5c:75:
                    fb:db:7f:f6:7d:a4:d3:cb:62:b0:e0:d6:c9:0b:23:
                    29:d7:ad:8f:5e:20:0a:29:12:c2:a2:d8:73:f3:17:
                    c1:b6:5f:16:19:94:fc:89:47:0e:99:1d:20:3e:b1:
                    7e:45:96:e4:1d:34:73:23:81:24:7a:76:e8:d7:1b:
                    59:fc:01:bb:1b:18:0a:e9:a3:9d:40:5d:53:09:c3:
                    7f:c7:0f:90:32:b8:0c:50:89:7d:ea:f2:03:95:ce:
                    17:1c:b5:16:20:e7:51:ba:c5:b2:bd:7e:03:66:b0:
                    98:38:ae:ca:ce:47:49:28:24:bd:9e:5c:cf:cd:57:
                    0d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0B:32:00:37:C3:05:17:ED:3C:9D:D3:0E:7E:D0:8D:92:EE:11:86
            X509v3 Authority Key Identifier:
                keyid:BD:3C:C5:FF:84:28:F2:DE:1C:38:6B:F8:06:8D:02:87:45:80:6F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/95303322F20511F0873139314A6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.83.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:f5:3f:c9:2e:b7:e7:f2:64:28:a9:0e:de:7b:62:6b:f4:be:
         df:9f:43:cc:3e:67:42:c3:36:e3:ab:c6:ed:4a:8f:87:04:59:
         39:ae:4c:6d:9e:6a:78:37:56:c6:17:66:1c:3b:5b:0b:42:1e:
         ae:b0:5c:ce:b4:a4:f7:b2:f2:bb:d7:7c:46:c6:58:0d:e6:ae:
         06:e4:4f:5a:a3:17:83:23:f9:48:9e:1b:24:b0:a3:ef:50:af:
         58:c0:b9:21:ee:31:89:65:aa:06:1c:e3:70:36:bc:76:2b:fa:
         21:9c:60:7b:40:43:67:0d:86:b5:28:6a:5e:64:3b:11:ce:0c:
         1b:9c:7e:c4:08:5d:65:1a:f0:5e:6d:99:55:c0:79:65:2b:f8:
         8a:9a:eb:c9:11:13:3f:a6:d6:20:25:ae:47:64:43:dc:68:85:
         bc:fe:98:c8:9d:9f:1c:40:19:6b:fb:72:02:41:be:42:d4:24:
         8e:ff:45:7e:41:d4:0b:74:83:f5:43:64:a4:51:24:23:df:e0:
         6d:41:d5:fb:98:05:81:7c:88:4a:b0:66:6f:e8:01:32:80:f8:
         35:3b:0c:12:b1:76:ef:5a:5e:03:27:97:f3:88:3f:19:6a:45:
         94:7d:f6:92:f4:83:87:28:97:0e:b2:d4:34:cd:07:de:76:0f:
         ad:db:14:98
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MTI5MDExMC8GA1UEBRMoQkQzQ0M1RkY4NDI4RjJERTFDMzg2QkY4MDY4RDAyODc0
NTgwNkZDRTAeFw0yNjAxMTUxMTMwMjRaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTVhODMzLWI4MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCfUxe/EX+OGXr/+RDEGYWQjxsG1/ttRzUWZQmHqDgQ48ei7hknBpWovQouz/OC
GIRjKsdI9W4rNf/TozhtF+n31u5FXHeNFhr90lqoFNV8+Q+FySUCcTUhwFIWw1ib
5mRSF3FWAcpy2mnrQVWnwVb0v2nqodW0jkXZ9eAffE2zr8gG65Vcdfvbf/Z9pNPL
YrDg1skLIynXrY9eIAopEsKi2HPzF8G2XxYZlPyJRw6ZHSA+sX5FluQdNHMjgSR6
dujXG1n8AbsbGArpo51AXVMJw3/HD5AyuAxQiX3q8gOVzhcctRYg51G6xbK9fgNm
sJg4rsrOR0koJL2eXM/NVw3DAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUmAsyADfD
BRftPJ3TDn7QjZLuEYYwHwYDVR0jBBgwFoAUvTzF/4Qo8t4cOGv4Bo0Ch0WAb84w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxMjkwLzQ0QUI0OTVBRjIw
NTExRjBCRDI1ODYwNTRBNkY1NkJDL3ZUekZfNFFvOHQ0Y09HdjRCbzBDaDBXQWI4
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvdlR6Rl80UW84dDRjT0d2NEJvMENoMFdBYjg0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTI5MC80NEFCNDk1QUYyMDUxMUYwQkQyNTg2MDU0QTZGNTZCQy85NTMwMzMyMkYy
MDUxMUYwODczMTM5MzE0QTZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADAU50wDQYJKoZIhvcNAQELBQADggEBAF/1P8kut+fyZCipDt57Ymv0
vt+fQ8w+Z0LDNuOrxu1Kj4cEWTmuTG2eang3VsYXZhw7WwtCHq6wXM60pPey8rvX
fEbGWA3mrgbkT1qjF4Mj+UieGySwo+9Qr1jAuSHuMYllqgYc43A2vHYr+iGcYHtA
Q2cNhrUoal5kOxHODBucfsQIXWUa8F5tmVXAeWUr+Iqa68kREz+m1iAlrkdkQ9xo
hbz+mMidnxxAGWv7cgJBvkLUJI7/RX5B1At0g/VDZKRRJCPf4G1B1fuYBYF8iEqw
Zm/oATKA+DU7DBKxdu9aXgMnl/OIPxlqRZR99pL0g4colw6y1DTNB952D63bFJg=
-----END CERTIFICATE-----
Generated at Wed Mar 4 10:08:40 2026 by rpki-client