Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FB34/5858FBB299A011F1A4ECD2AD6D11F970/CAF010A299A011F1AA2048B26E11F970.roa
File:                     CAF010A299A011F1AA2048B26E11F970.roa (raw, json)
Hash identifier:          xTpWTUsMY08M79pP5PPT018bZf8zirD3H0QqK9bjJ/U=
Subject key identifier:   15:48:BA:C2:4A:18:23:08:3F:BD:5D:45:AF:A0:99:19:76:E4:08:43
Certificate issuer:       /CN=A915FB34/serialNumber=EA91C0FD7B2D10CAB77FF9822B5BF74C49D73F33
Certificate serial:       02
Authority key identifier: EA:91:C0:FD:7B:2D:10:CA:B7:7F:F9:82:2B:5B:F7:4C:49:D7:3F:33
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6pHA_XstEMq3f_mCK1v3TEnXPzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FB34/5858FBB299A011F1A4ECD2AD6D11F970/CAF010A299A011F1AA2048B26E11F970.roa
Signing time:             Sun 16 Aug 2026 18:32:11 +0000
ROA not before:           Sun 16 Aug 2026 18:32:11 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     154484
IP address blocks:        151.158.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FB34/5858FBB299A011F1A4ECD2AD6D11F970/6pHA_XstEMq3f_mCK1v3TEnXPzM.crl
                          rsync://rpki.apnic.net/member_repository/A915FB34/5858FBB299A011F1A4ECD2AD6D11F970/6pHA_XstEMq3f_mCK1v3TEnXPzM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6pHA_XstEMq3f_mCK1v3TEnXPzM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 09:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FB34, serialNumber=EA91C0FD7B2D10CAB77FF9822B5BF74C49D73F33
        Validity
            Not Before: Aug 16 18:32:11 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a82022a-dddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:19:ea:03:e8:42:f2:cb:b6:9a:57:cd:4a:6b:
                    d3:2b:57:3e:57:9a:7b:53:6d:24:94:a1:83:c9:67:
                    32:29:e2:94:dc:34:c2:fd:d0:41:0a:05:2d:55:00:
                    87:6c:ab:04:96:c8:82:1c:eb:c6:6b:8a:0b:af:3d:
                    52:c9:88:ea:61:32:d1:fc:61:bd:e0:fc:19:9f:de:
                    41:40:6b:1c:ba:b7:7f:ec:4b:17:3c:47:a1:c1:9f:
                    02:02:a1:38:6a:46:f6:de:23:1a:3c:62:18:74:6c:
                    fd:b5:eb:87:6e:cd:8e:e1:54:bb:79:90:56:68:ac:
                    af:c0:c8:e8:85:a7:5c:48:06:7a:f6:6e:77:5b:33:
                    53:f3:4b:90:bc:cf:7d:44:02:72:57:6e:4c:7a:6f:
                    95:72:ba:e2:45:8a:01:07:e2:65:50:ca:1e:59:16:
                    a6:7a:bd:52:7e:aa:76:81:7d:b1:e9:13:bb:f7:b3:
                    0c:a3:16:11:4b:00:55:35:20:ef:6a:ec:34:6a:40:
                    51:43:1b:12:8a:a9:2a:76:f1:00:b1:17:09:f4:85:
                    13:4d:a3:70:61:bf:39:0c:7e:88:b2:64:01:13:7d:
                    e1:60:f4:1e:03:fc:2b:ee:d6:22:78:88:99:c9:91:
                    b5:aa:0e:dc:2e:8c:93:16:48:0b:d0:ef:6d:33:11:
                    e3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:48:BA:C2:4A:18:23:08:3F:BD:5D:45:AF:A0:99:19:76:E4:08:43
            X509v3 Authority Key Identifier:
                keyid:EA:91:C0:FD:7B:2D:10:CA:B7:7F:F9:82:2B:5B:F7:4C:49:D7:3F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FB34/5858FBB299A011F1A4ECD2AD6D11F970/6pHA_XstEMq3f_mCK1v3TEnXPzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6pHA_XstEMq3f_mCK1v3TEnXPzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FB34/5858FBB299A011F1A4ECD2AD6D11F970/CAF010A299A011F1AA2048B26E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:be:46:43:71:f5:cf:fc:8a:eb:01:41:81:f7:80:a2:f5:da:
         a2:67:8e:0f:49:89:99:62:3e:be:ad:a6:4b:7a:1f:7e:cd:1c:
         05:4d:4c:f9:4c:80:b4:e1:b4:39:75:c4:c0:e9:f5:d1:0b:f7:
         36:3c:68:b3:cd:fe:27:94:0d:a5:51:68:19:03:5b:04:67:49:
         2c:b5:cc:3c:24:d8:ca:24:1a:a6:aa:77:f2:a3:3a:d6:de:7b:
         2f:7e:aa:2c:2d:a5:61:10:67:fe:41:80:e3:36:d4:cb:6e:63:
         56:a3:45:78:f1:93:7e:ad:70:2e:aa:d9:35:15:62:1b:8f:c4:
         b8:0b:54:71:19:b1:00:9b:69:68:68:f6:74:10:d6:94:44:78:
         66:e9:3d:ff:b8:8d:c5:fd:14:01:97:be:e3:bd:6a:f7:0a:47:
         a2:93:da:b4:63:1a:3b:e9:f7:41:90:12:5b:2c:f9:53:50:dd:
         c9:2c:4b:1a:b0:ec:d8:4f:d5:9e:88:d2:7e:db:da:f1:9d:32:
         a2:29:e1:5c:bb:11:ad:f4:29:09:66:2d:85:52:a4:ba:27:6c:
         f9:b3:a0:de:a2:9c:68:9a:71:5e:57:53:8a:bd:91:64:a0:03:
         4f:09:65:aa:78:d4:ad:06:4f:b4:b6:14:b4:6c:89:d9:3b:92:
         c7:6f:55:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:58:49 2026 by rpki-client