Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/846CC09CFDD011F0A25053256C6F56BC.roa
File:                     846CC09CFDD011F0A25053256C6F56BC.roa (raw, json)
Hash identifier:          k/0R7aGFshi9CdWp5gKnMZp9VGoJooe/RppKiyVZ4vg=
Subject key identifier:   31:F3:6C:CB:13:F4:F8:17:5A:80:BA:F9:64:02:5F:86:47:AD:6B:65
Certificate issuer:       /CN=A915A8C3/serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Certificate serial:       08
Authority key identifier: AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/846CC09CFDD011F0A25053256C6F56BC.roa
Signing time:             Fri 30 Jan 2026 11:40:46 +0000
ROA not before:           Fri 30 Jan 2026 11:40:46 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     140077
IP address blocks:        151.158.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
                          rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:19:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A8C3, serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
        Validity
            Not Before: Jan 30 11:40:46 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697c98be-bfad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:75:96:ca:87:1f:ba:75:51:34:ae:63:2a:32:
                    4d:e3:e7:66:0b:bb:19:ce:6e:ec:1d:ea:80:ca:f9:
                    0b:a7:40:18:0a:f1:29:66:6d:64:49:8e:76:43:fc:
                    fb:ee:1c:d5:17:a0:e5:9f:8d:72:f7:ac:ff:7c:53:
                    02:fd:5c:7c:33:91:83:98:35:7d:ee:c4:33:a3:f3:
                    e4:4b:ad:1e:a8:65:46:16:de:2d:bd:50:f2:f2:1f:
                    2a:2c:47:14:69:a4:f8:ad:09:c3:ba:d5:ff:1a:53:
                    f4:ba:b1:0c:25:18:a5:2c:73:a7:bd:9a:d1:0d:b7:
                    6d:28:6a:53:1a:ec:d2:32:2a:10:bf:5b:22:ce:19:
                    5b:24:e9:52:9f:a2:5f:b4:9c:98:5d:5b:36:0d:a9:
                    53:58:48:33:ea:1e:96:57:ab:36:8d:4d:37:71:4d:
                    66:5d:7d:bc:33:45:6a:94:fe:56:51:71:24:9a:76:
                    44:49:41:64:42:18:d4:03:ff:82:1b:f0:61:57:93:
                    a9:81:15:59:1c:74:af:3f:c5:64:33:c0:32:8c:5d:
                    a3:46:bf:33:34:f0:7a:de:5e:90:7b:63:87:cd:aa:
                    6c:7e:d6:21:ae:6d:c8:3f:64:76:bd:d5:5d:34:5f:
                    b3:a2:35:03:4e:33:19:03:83:5c:52:e0:c7:83:98:
                    21:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F3:6C:CB:13:F4:F8:17:5A:80:BA:F9:64:02:5F:86:47:AD:6B:65
            X509v3 Authority Key Identifier:
                keyid:AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/846CC09CFDD011F0A25053256C6F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:06:48:3a:c8:3b:78:1c:2d:0a:3c:4b:bf:30:2d:b0:f0:2d:
         d4:88:96:09:50:19:a1:f5:b8:08:11:f2:14:99:e8:1c:b1:40:
         25:e8:28:ea:99:15:91:06:c8:26:9c:c0:3b:b2:bf:b9:e6:f3:
         3a:8f:01:4b:c5:4c:25:e7:3d:c5:f7:56:11:d7:a7:98:f1:51:
         e8:d9:44:62:5f:ec:1c:4c:01:9f:dc:b7:45:d3:09:98:ed:7a:
         34:97:53:77:9a:e2:e3:9e:a7:3c:d9:44:7e:d2:7a:42:be:1c:
         1d:59:d5:53:4b:c8:16:91:28:2a:4a:4a:90:82:1f:68:da:6c:
         a0:bc:b2:80:ca:ed:cf:53:54:d3:83:4f:73:a7:59:d8:3e:79:
         b2:8b:93:19:f4:9a:3b:f3:f1:b4:d5:d9:19:48:33:98:c9:f0:
         a7:09:17:52:97:04:e8:81:40:ff:41:30:67:9b:c1:ee:1d:94:
         4e:67:31:b4:99:0c:46:8e:5b:e5:0d:ce:36:03:7c:15:e9:ca:
         c1:53:df:59:d3:b3:cd:82:ab:3f:65:e6:13:a1:62:a3:d2:be:
         a2:b9:ac:bc:92:5b:ce:39:a6:49:fb:ac:f7:ef:4b:d9:b9:48:
         68:56:41:b7:23:4c:bd:da:c2:74:5c:41:98:86:58:b5:c1:9a:
         25:ca:84:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:18:04 2026 by rpki-client