Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/458AC21A684111EEA6632877C4F9AE02.roa
File:                     458AC21A684111EEA6632877C4F9AE02.roa (raw, json)
Hash identifier:          ZcOPoAMlcJysHiwrollWvtIG++qNRpg0y+gKM/5fjXk=
Subject key identifier:   17:43:59:CE:01:C4:DC:03:6E:F5:54:19:5D:9E:D6:8B:EC:04:E7:F3
Certificate issuer:       /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial:       04B8
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/458AC21A684111EEA6632877C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:29:27 +0000
ROA not before:           Sun 21 Dec 2025 00:21:04 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     137547
IP address blocks:        150.129.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
                          rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Mar 2026 00:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1208 (0x4b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
        Validity
            Not Before: Dec 21 00:21:04 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a48587-5df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bc:7d:6e:e6:d1:19:ad:33:de:b5:b5:80:f5:
                    de:b9:06:30:fb:b8:a0:28:b4:4c:9e:2a:44:7a:61:
                    8e:6d:ef:fb:3d:64:02:a8:e0:e4:89:38:fb:58:c6:
                    ce:56:82:7e:f7:04:45:56:3a:3f:83:2e:25:fb:03:
                    bd:f2:64:01:6b:af:29:95:dc:bd:d1:f0:46:f1:6e:
                    ca:31:6f:97:98:c0:f2:e9:06:88:09:d3:08:46:49:
                    db:be:31:dc:19:a9:b7:c4:fe:ba:24:45:33:f3:00:
                    18:c1:ae:1d:33:ff:80:2d:9e:44:db:81:26:f1:f5:
                    da:87:13:8a:e0:41:64:5c:72:9d:75:1d:56:4c:fd:
                    b0:45:4b:72:10:b1:c9:37:c6:f1:3f:f3:25:88:f1:
                    32:23:0c:bf:71:83:2a:7b:4c:ac:a7:56:7f:21:f4:
                    01:33:59:68:f9:47:fe:ba:e8:26:e9:0c:39:14:bb:
                    13:5e:a3:d8:06:3b:05:39:63:76:c7:8b:0c:35:d4:
                    cb:82:3f:12:98:1b:6e:54:3a:e7:87:69:e4:b0:b5:
                    f3:ae:92:f0:88:99:e1:56:98:9f:53:51:6e:76:84:
                    3b:97:cf:2c:81:bd:06:c5:69:d0:e2:a6:5e:2c:98:
                    7f:1b:a1:64:9b:db:c4:06:3c:d1:ef:e5:5e:1e:3d:
                    46:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:43:59:CE:01:C4:DC:03:6E:F5:54:19:5D:9E:D6:8B:EC:04:E7:F3
            X509v3 Authority Key Identifier:
                keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/458AC21A684111EEA6632877C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.129.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:42:c1:50:c6:d3:38:6d:f3:40:e0:db:17:2a:5f:f8:62:51:
         df:91:b2:20:9d:6d:10:88:ee:66:84:10:9a:74:31:e3:bb:fd:
         f8:7d:d3:0d:98:a8:00:a7:7a:e9:39:0d:2c:69:01:5e:77:dc:
         be:54:ac:77:4d:48:34:4f:77:93:5d:ec:2e:2b:95:61:be:5a:
         ed:db:11:27:55:23:ab:ef:df:b6:6c:f8:12:d3:9b:78:2d:fb:
         b3:5c:b1:88:c2:05:0e:a4:45:7e:b6:45:a0:23:41:7d:ab:c6:
         96:59:19:9e:82:ba:bd:43:27:55:7a:34:dc:24:7a:b6:0f:cb:
         ad:6a:53:d0:38:0b:fe:f3:3e:cd:1c:2d:47:80:c0:f3:b8:ce:
         d9:6d:28:5d:eb:14:35:79:0e:00:0f:94:28:68:f7:c1:ab:b8:
         fa:e7:67:77:88:67:fb:9e:09:0c:be:cd:70:0d:ff:30:bf:16:
         07:22:a3:88:23:ee:88:9b:08:7b:b6:38:1c:fd:a9:50:bd:f9:
         47:26:82:66:fe:16:43:62:18:d2:77:38:37:68:81:71:b4:f5:
         c3:3e:97:16:52:cf:a4:09:25:29:97:ad:1e:02:c9:2e:16:74:
         23:84:bb:ad:c0:84:8d:ec:de:9f:f5:a8:87:85:4a:23:1f:66:
         f3:24:52:b9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1MzEwRTY5QkZE
MjYwQUE5NzgwHhcNMjUxMjIxMDAyMTA0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODU4Ny01ZGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA07x9bubRGa0z3rW1gPXeuQYw+7igKLRMnipEemGObe/7PWQCqODkiTj7WMbO
VoJ+9wRFVjo/gy4l+wO98mQBa68pldy90fBG8W7KMW+XmMDy6QaICdMIRknbvjHc
Gam3xP66JEUz8wAYwa4dM/+ALZ5E24Em8fXahxOK4EFkXHKddR1WTP2wRUtyELHJ
N8bxP/MliPEyIwy/cYMqe0ysp1Z/IfQBM1lo+Uf+uugm6Qw5FLsTXqPYBjsFOWN2
x4sMNdTLgj8SmBtuVDrnh2nksLXzrpLwiJnhVpifU1FudoQ7l88sgb0GxWnQ4qZe
LJh/G6Fkm9vEBjzR7+VeHj1GtQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBdDWc4B
xNwDbvVUGV2e1ovsBOfzMB8GA1UdIwQYMBaAFChTvaFjjFmahMMJUxDmm/0mCql4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU3Qi84REE3MjY0MEMx
RkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVdacUV3d2xURU9hYl9TWUtx
WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tGTzlvV09NV1pxRXd3bFRFT2FiX1NZS3FYZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjU1N0IvOERBNzI2NDBDMUZBMTFFQ0IzMEVFMjFBQzRGOUFFMDIvNDU4QUMyMUE2
ODQxMTFFRUE2NjMyODc3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAloHaMA0GCSqGSIb3DQEBCwUAA4IBAQA1QsFQxtM4bfNA4NsXKl/4
YlHfkbIgnW0QiO5mhBCadDHju/34fdMNmKgAp3rpOQ0saQFed9y+VKx3TUg0T3eT
XewuK5Vhvlrt2xEnVSOr79+2bPgS05t4LfuzXLGIwgUOpEV+tkWgI0F9q8aWWRme
grq9QydVejTcJHq2D8utalPQOAv+8z7NHC1HgMDzuM7ZbShd6xQ1eQ4AD5QoaPfB
q7j652d3iGf7ngkMvs1wDf8wvxYHIqOII+6Imwh7tjgc/alQvflHJoJm/hZDYhjS
dzg3aIFxtPXDPpcWUs+kCSUpl60eAskuFnQjhLutwISN7N6f9aiHhUojH2bzJFK5
-----END CERTIFICATE-----
Generated at Wed Mar 11 12:50:16 2026 by rpki-client