Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/AD724872B78711EEA4D26186C4F9AE02.roa
File:                     AD724872B78711EEA4D26186C4F9AE02.roa (raw, json)
Hash identifier:          3Tl/ggNwedBlMkQ6UMkEptTJ/4kvMc6pO0LNkGCSXXg=
Subject key identifier:   2B:08:5F:39:7E:60:DA:37:50:7D:87:DA:61:9E:48:53:28:91:4A:9F
Certificate issuer:       /CN=A917275D/serialNumber=BB0F35BE8B21FB723FBCD71B017B9574237EDC84
Certificate serial:       0194
Authority key identifier: BB:0F:35:BE:8B:21:FB:72:3F:BC:D7:1B:01:7B:95:74:23:7E:DC:84
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uw81vosh-3I_vNcbAXuVdCN-3IQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/AD724872B78711EEA4D26186C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:29:30 +0000
ROA not before:           Fri 09 May 2025 01:14:15 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     149771
IP address blocks:        157.10.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/uw81vosh-3I_vNcbAXuVdCN-3IQ.crl
                          rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/uw81vosh-3I_vNcbAXuVdCN-3IQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uw81vosh-3I_vNcbAXuVdCN-3IQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 00:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917275D, serialNumber=BB0F35BE8B21FB723FBCD71B017B9574237EDC84
        Validity
            Not Before: May  9 01:14:15 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a582aa-5ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:88:2d:bd:43:0a:1a:73:15:85:95:72:20:
                    fe:5e:5e:21:2a:e9:97:54:7b:73:0d:fb:e8:0e:f4:
                    91:93:95:d8:fb:e9:11:f6:5f:16:5b:f8:ee:69:a3:
                    ac:0a:4f:ea:2e:5e:f8:23:79:21:c4:7d:93:b5:72:
                    18:30:3e:b2:2a:a8:12:0d:99:9c:61:ac:4a:ee:31:
                    e1:e0:aa:07:dd:0c:e3:9c:66:48:5b:07:dd:4c:f9:
                    05:ad:ad:86:cb:71:f3:cd:24:58:3e:e0:60:cc:14:
                    1a:87:78:57:1c:1b:94:29:cb:2b:e6:eb:c1:9c:1b:
                    fe:55:b8:6f:ec:7e:68:83:ef:e0:b6:79:5e:5d:49:
                    0b:31:73:e8:26:07:c8:a6:44:74:e8:ab:c8:58:09:
                    dd:99:98:d8:12:c3:ad:ea:ed:53:07:c4:7d:88:9f:
                    aa:25:43:7a:c6:c5:64:04:89:57:0b:2b:10:bd:06:
                    c7:92:bc:31:39:d1:0a:4d:0c:25:a2:25:c3:52:f7:
                    fa:f9:16:52:01:1f:50:25:07:db:39:de:a6:d7:04:
                    e9:d1:7c:77:3d:0d:17:43:17:46:51:ef:2d:d9:59:
                    de:1f:76:d2:61:56:3c:2d:96:af:5e:0f:b0:8c:bc:
                    89:12:4f:2c:b5:3f:e1:cf:5c:f7:d0:89:0f:cb:1c:
                    20:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:08:5F:39:7E:60:DA:37:50:7D:87:DA:61:9E:48:53:28:91:4A:9F
            X509v3 Authority Key Identifier:
                keyid:BB:0F:35:BE:8B:21:FB:72:3F:BC:D7:1B:01:7B:95:74:23:7E:DC:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/uw81vosh-3I_vNcbAXuVdCN-3IQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uw81vosh-3I_vNcbAXuVdCN-3IQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/AD724872B78711EEA4D26186C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:8d:2d:b3:e4:14:24:18:d4:df:a2:29:72:34:f4:65:a1:62:
         ba:21:e4:bc:32:d6:7a:9d:dd:1a:d8:21:33:38:63:c4:c6:bb:
         8e:85:e9:0e:45:87:43:40:a3:e0:94:96:dc:20:00:52:cc:bc:
         6e:44:77:41:ad:48:fc:26:a3:85:1a:70:ce:cd:a7:0b:df:15:
         a5:dc:4d:6e:f7:99:97:d0:66:08:e3:f8:1e:13:ee:56:8c:0f:
         6f:af:82:9e:7a:d2:57:61:29:5b:56:78:71:22:ef:c6:ff:65:
         59:37:6c:46:f7:cb:ec:fb:6a:ed:dc:ff:18:c3:06:51:32:a6:
         35:04:d1:1b:e4:c4:a3:ba:4a:a3:4c:d2:a1:c0:01:33:c1:78:
         16:af:07:c2:bd:b9:aa:23:fb:04:11:44:5b:e5:48:e2:58:e4:
         2b:d9:2f:3d:f6:b9:c7:02:a6:6b:c0:67:1e:64:77:25:b6:86:
         18:59:81:67:6f:16:07:4e:c5:45:2c:cb:19:df:d8:f2:a7:c0:
         56:9d:08:f9:fb:36:c6:b3:8e:da:62:1a:aa:32:f2:e4:5d:38:
         c0:86:05:43:57:28:c4:68:c7:7d:a4:70:95:ee:00:b6:49:4b:
         11:3b:28:52:c9:7c:60:fa:99:a2:50:c7:d5:37:9b:5f:7c:35:
         2f:da:2b:d1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzI3NUQxMTAvBgNVBAUTKEJCMEYzNUJFOEIyMUZCNzIzRkJDRDcxQjAxN0I5NTc0
MjM3RURDODQwHhcNMjUwNTA5MDExNDE1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1ODJhYS01YWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAspSILb1DChpzFYWVciD+Xl4hKumXVHtzDfvoDvSRk5XY++kR9l8WW/juaaOs
Ck/qLl74I3khxH2TtXIYMD6yKqgSDZmcYaxK7jHh4KoH3QzjnGZIWwfdTPkFra2G
y3HzzSRYPuBgzBQah3hXHBuUKcsr5uvBnBv+Vbhv7H5og+/gtnleXUkLMXPoJgfI
pkR06KvIWAndmZjYEsOt6u1TB8R9iJ+qJUN6xsVkBIlXCysQvQbHkrwxOdEKTQwl
oiXDUvf6+RZSAR9QJQfbOd6m1wTp0Xx3PQ0XQxdGUe8t2VneH3bSYVY8LZavXg+w
jLyJEk8stT/hz1z30IkPyxwgMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCsIXzl+
YNo3UH2H2mGeSFMokUqfMB8GA1UdIwQYMBaAFLsPNb6LIftyP7zXGwF7lXQjftyE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjc1RC8wMTlCOTZCNEI2
NkMxMUVFQTBEODhEMzNDNEY5QUUwMi91dzgxdm9zaC0zSV92TmNiQVh1VmRDTi0z
SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3V3ODF2b3NoLTNJX3ZOY2JBWHVWZENOLTNJUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzI3NUQvMDE5Qjk2QjRCNjZDMTFFRUEwRDg4RDMzQzRGOUFFMDIvQUQ3MjQ4NzJC
Nzg3MTFFRUE0RDI2MTg2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAnQrlMA0GCSqGSIb3DQEBCwUAA4IBAQCDjS2z5BQkGNTfoilyNPRl
oWK6IeS8MtZ6nd0a2CEzOGPExruOhekORYdDQKPglJbcIABSzLxuRHdBrUj8JqOF
GnDOzacL3xWl3E1u95mX0GYI4/geE+5WjA9vr4KeetJXYSlbVnhxIu/G/2VZN2xG
98vs+2rt3P8YwwZRMqY1BNEb5MSjukqjTNKhwAEzwXgWrwfCvbmqI/sEEURb5Uji
WOQr2S899rnHAqZrwGceZHcltoYYWYFnbxYHTsVFLMsZ39jyp8BWnQj5+zbGs47a
YhqqMvLkXTjAhgVDVyjEaMd9pHCV7gC2SUsROyhSyXxg+pmiUMfVN5tffDUv2ivR
-----END CERTIFICATE-----
Generated at Wed Mar 4 09:50:13 2026 by rpki-client