Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/D8ACA550474011F1AEFA8515C4833773.roa
File:                     D8ACA550474011F1AEFA8515C4833773.roa (raw, json)
Hash identifier:          mTGBJhQVRmtXPjIaMK+NnXwADQJAOPWD6GOuporz7rY=
Subject key identifier:   D1:56:FB:25:34:5F:4F:92:FF:02:9F:70:C9:C5:45:06:09:11:FD:4A
Certificate issuer:       /CN=A9153944/serialNumber=29AFD0AC1222E9EFEF8B028D318F8E64F5136026
Certificate serial:       1C
Authority key identifier: 29:AF:D0:AC:12:22:E9:EF:EF:8B:02:8D:31:8F:8E:64:F5:13:60:26
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/D8ACA550474011F1AEFA8515C4833773.roa
Signing time:             Sat 23 May 2026 06:38:05 +0000
ROA not before:           Sat 23 May 2026 06:38:05 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     150750
IP address blocks:        151.123.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl
                          rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 05:53:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153944, serialNumber=29AFD0AC1222E9EFEF8B028D318F8E64F5136026
        Validity
            Not Before: May 23 06:38:05 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a114b4d-725e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:36:1d:19:52:df:42:31:bf:10:fc:f8:48:43:
                    45:b9:1c:91:ee:5f:f3:0b:93:c7:cc:8f:7e:1c:6b:
                    9f:49:2e:eb:e3:94:0d:56:74:37:70:51:10:47:51:
                    c6:8f:35:ea:74:ef:c8:79:22:83:4f:d0:44:0a:ae:
                    06:bb:4d:06:95:d7:41:c1:3c:f7:e5:97:2d:e6:9a:
                    d8:35:bf:ea:fd:75:3b:23:97:03:41:fb:12:31:d7:
                    27:e9:0c:bf:6f:ea:62:21:79:50:d3:a0:b4:85:38:
                    eb:ba:ec:f9:96:d7:77:8d:ed:a0:86:fb:6e:a5:fe:
                    7a:c0:ed:90:49:cb:45:4d:ef:d8:80:46:f2:79:c3:
                    40:e8:e4:4a:4c:e0:42:d2:61:ca:aa:ec:df:fb:c5:
                    31:c5:46:d8:56:85:61:b7:ac:8a:37:2d:68:8c:a7:
                    88:74:fd:2b:bd:7f:b1:9d:31:a4:72:e6:d1:96:22:
                    d0:cd:1d:8f:4b:fc:fc:b1:58:1e:d3:23:c4:3b:fe:
                    2d:30:88:4c:3d:7d:25:bf:1d:8b:ec:6c:b7:41:1e:
                    d0:27:a9:18:a0:92:95:e5:e7:90:a1:4e:bc:91:bb:
                    6c:34:dd:30:53:fe:90:b6:ce:e3:a6:c7:57:1c:4d:
                    99:de:84:62:7a:33:36:ca:1a:36:a4:7e:19:7d:69:
                    9a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:56:FB:25:34:5F:4F:92:FF:02:9F:70:C9:C5:45:06:09:11:FD:4A
            X509v3 Authority Key Identifier:
                keyid:29:AF:D0:AC:12:22:E9:EF:EF:8B:02:8D:31:8F:8E:64:F5:13:60:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/D8ACA550474011F1AEFA8515C4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.123.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:76:20:7c:e8:b3:8b:37:ea:a6:65:52:33:df:c7:98:35:08:
         7e:bf:15:18:75:83:11:1b:e1:e3:1e:23:8e:74:92:26:6d:4c:
         69:31:93:fc:d1:9f:c3:d7:35:06:6a:95:e6:e2:31:84:40:6f:
         86:65:d4:0e:98:ab:ce:e8:18:c1:7a:5e:4d:9a:3d:9d:62:87:
         28:16:53:b1:48:b0:94:35:c9:0d:b1:99:e7:8f:1f:96:f1:3c:
         19:1b:6c:c0:60:27:67:64:59:f7:34:58:d3:af:78:63:d0:3d:
         cb:36:ef:45:c8:c5:fd:0c:28:3e:e4:34:7e:e5:0e:cc:ef:45:
         fc:2d:8e:06:7c:67:78:2f:8c:1c:b1:d6:b5:c7:89:42:f7:2c:
         b2:e0:d3:04:a7:68:85:8d:c7:56:33:f5:5a:f8:cc:02:b7:73:
         4c:f3:1e:9b:c3:7b:b5:c0:e3:b2:7a:96:6c:93:52:8a:f0:68:
         7c:c2:14:8b:f4:e4:47:3e:9a:ee:9b:f5:f4:2f:cd:02:43:e3:
         c2:4b:99:31:17:60:af:7c:0f:61:9f:42:9b:09:ca:0d:ac:32:
         ce:1c:bb:6a:e4:6d:d9:11:68:79:dc:77:92:0f:0e:f8:45:47:
         0b:a5:bc:6a:ff:3b:81:e1:78:0b:f9:ce:05:d1:e2:2e:ef:c9:
         e8:82:39:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:14:41 2026 by rpki-client