Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/6224AEA6D37C11F09FF59A7EC4F9AE02.roa
File:                     6224AEA6D37C11F09FF59A7EC4F9AE02.roa (raw, json)
Hash identifier:          mvoKJkhqLJs88vNwaZxxBqpztSpPlgPZzc3DkyZCzUo=
Subject key identifier:   C1:86:54:52:0C:56:59:D3:52:7C:18:C3:AC:BA:F1:D9:EF:19:E7:39
Certificate issuer:       /CN=A9169A9C/serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB
Certificate serial:       0197
Authority key identifier: F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/6224AEA6D37C11F09FF59A7EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:21:46 +0000
ROA not before:           Sat 03 Jan 2026 02:21:43 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     151633
IP address blocks:        157.15.50.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl
                          rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 03:09:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169A9C, serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB
        Validity
            Not Before: Jan  3 02:21:43 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a43d6a-0f31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c9:c3:f2:c1:8c:a6:0a:00:f1:2a:93:f8:d3:
                    40:65:f5:59:9d:34:56:6d:9a:5a:00:a6:cb:90:f8:
                    1a:61:c4:99:3e:92:a1:8f:7e:46:23:e5:8c:e5:74:
                    f8:bc:a9:a9:b2:b6:4c:c4:67:96:64:94:63:1a:bb:
                    09:5d:02:40:39:b0:9b:ad:42:90:f7:a2:de:8d:bc:
                    52:1f:ea:f6:89:24:d9:a9:8d:2d:9f:38:3a:fa:ae:
                    1b:47:6b:a8:92:b7:78:7f:5c:54:fc:95:3d:86:96:
                    ed:17:81:5f:93:c5:43:0d:fe:40:8e:a7:23:5a:b3:
                    42:c1:1e:dc:e8:df:61:b3:39:8e:97:34:c1:86:89:
                    f3:a6:cb:e5:66:b6:68:45:9d:c9:85:e6:5c:67:15:
                    6b:e6:a9:f5:41:c0:e5:09:0c:09:b3:b2:d6:67:e6:
                    25:0e:c5:d5:95:e9:c7:39:f5:24:4d:71:e2:29:0e:
                    fa:7a:48:86:60:3e:5c:ec:0a:0a:ff:1a:22:28:3b:
                    19:92:76:14:2b:ec:00:74:74:bc:ae:a1:00:b5:5a:
                    3e:1d:b0:83:6e:eb:f9:11:0a:df:8b:1a:51:e1:74:
                    46:08:80:a9:37:3a:41:58:a0:42:e1:26:73:16:a9:
                    b7:b7:70:26:24:a6:86:04:9d:11:71:6b:13:38:ae:
                    38:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:86:54:52:0C:56:59:D3:52:7C:18:C3:AC:BA:F1:D9:EF:19:E7:39
            X509v3 Authority Key Identifier:
                keyid:F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/6224AEA6D37C11F09FF59A7EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:25:a6:59:5e:08:d6:26:af:51:91:72:25:19:13:2a:fd:ef:
         ae:d6:28:c2:42:ee:30:04:b6:0e:68:8b:a3:62:ac:2e:97:db:
         8d:f2:41:50:39:06:9b:a2:b9:51:a4:1c:74:7a:31:dd:6a:cf:
         01:a0:8f:34:b2:f9:78:a4:86:c4:78:da:88:c9:db:5c:64:9a:
         6d:04:3b:fe:e2:ec:b8:42:00:63:a8:5f:c5:fb:7c:f0:05:ea:
         ff:15:6d:6a:5d:b4:75:c7:38:4a:24:0f:76:5d:9f:c2:54:13:
         4d:99:35:99:66:56:66:26:21:97:77:17:02:af:6f:fc:84:8d:
         ec:c4:aa:ab:62:9d:84:b9:09:51:fe:cc:04:4f:1b:41:90:5d:
         ff:6b:0a:4f:5d:46:89:5a:f1:1b:c6:02:1c:2d:29:6c:e3:c0:
         09:3d:a5:a8:dd:2a:ce:41:22:31:08:6e:64:9d:3e:3d:e3:85:
         2c:12:41:a8:bf:69:a8:66:dd:12:9f:33:c6:46:5a:51:8a:28:
         56:c9:ae:de:fa:fd:87:18:aa:a2:25:8b:cc:0c:da:b5:67:46:
         68:47:9f:86:88:95:1e:20:05:15:8f:3f:d9:94:01:01:86:48:
         bd:e4:15:48:9c:c3:17:b2:e1:b3:98:af:80:48:98:65:ff:40:
         70:d7:01:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:03 2026 by rpki-client