Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/AD724872B78711EEA4D26186C4F9AE02.roa
File:                     AD724872B78711EEA4D26186C4F9AE02.roa (raw, json)
Hash identifier:          Z7U/2GhACqj56V+8lyqfWPY9FJ0HQthnr3sOX9AKnd8=
Subject key identifier:   26:2D:A8:56:27:F0:93:A5:89:87:DE:17:1B:46:96:B6:2F:DA:07:B2
Certificate issuer:       /CN=A917275D/serialNumber=BB0F35BE8B21FB723FBCD71B017B9574237EDC84
Certificate serial:       0207
Authority key identifier: BB:0F:35:BE:8B:21:FB:72:3F:BC:D7:1B:01:7B:95:74:23:7E:DC:84
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uw81vosh-3I_vNcbAXuVdCN-3IQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/AD724872B78711EEA4D26186C4F9AE02.roa
Signing time:             Thu 01 Oct 2026 00:48:43 +0000
ROA not before:           Thu 01 Oct 2026 00:48:43 +0000
ROA not after:            Sat 30 Jan 2027 00:00:00 +0000
asID:                     149771
IP address blocks:        157.10.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/uw81vosh-3I_vNcbAXuVdCN-3IQ.crl
                          rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/uw81vosh-3I_vNcbAXuVdCN-3IQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uw81vosh-3I_vNcbAXuVdCN-3IQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 00:16:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917275D, serialNumber=BB0F35BE8B21FB723FBCD71B017B9574237EDC84
        Validity
            Not Before: Oct  1 00:48:43 2026 GMT
            Not After : Jan 30 00:00:00 2027 GMT
        Subject: CN=6abdadeb-bed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8c:4f:64:eb:bd:b9:a5:d3:ca:6f:d2:b0:85:
                    33:00:e2:9e:c8:51:9f:7b:87:9f:b3:62:89:60:e9:
                    df:a6:67:24:3f:e6:bd:f3:59:d0:18:29:6f:21:e2:
                    cb:d6:8c:fc:94:cf:b8:62:98:f0:bb:11:37:69:45:
                    91:f2:7c:78:5c:45:9e:e4:f4:41:e5:f0:9e:df:86:
                    a6:ce:d5:4b:1e:50:4a:aa:89:53:42:6b:2b:2b:49:
                    16:21:9d:05:bc:f0:18:e8:e5:e3:96:b7:5e:19:85:
                    42:d9:ef:f5:1a:a1:fc:58:53:b1:96:dc:28:3e:c9:
                    0c:cc:1d:ef:26:c6:ea:e6:84:b7:83:cc:f4:53:b0:
                    22:73:ca:33:ea:e0:ea:ff:42:7d:d9:82:ad:50:85:
                    0a:44:79:0f:1f:88:e2:0f:43:9e:56:fd:3d:5c:e7:
                    6e:7d:37:7a:41:de:c0:ed:5e:5d:b2:3d:e4:63:99:
                    5a:15:7b:da:44:e2:97:d4:6c:7a:78:47:a9:4e:97:
                    39:ce:64:c4:d3:ed:d3:c5:2b:bb:5a:1d:62:fd:f8:
                    0b:eb:53:f3:3a:a0:d2:4c:86:80:94:c0:ec:1f:6d:
                    aa:2e:45:87:74:05:16:09:80:6a:7e:77:cc:ab:57:
                    08:42:63:84:1e:62:9f:88:fe:37:16:6c:cd:25:8b:
                    25:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2D:A8:56:27:F0:93:A5:89:87:DE:17:1B:46:96:B6:2F:DA:07:B2
            X509v3 Authority Key Identifier:
                keyid:BB:0F:35:BE:8B:21:FB:72:3F:BC:D7:1B:01:7B:95:74:23:7E:DC:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/uw81vosh-3I_vNcbAXuVdCN-3IQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uw81vosh-3I_vNcbAXuVdCN-3IQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/019B96B4B66C11EEA0D88D33C4F9AE02/AD724872B78711EEA4D26186C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:71:da:d2:1b:b4:d5:d0:ee:9e:bd:63:0c:b2:64:b6:55:4c:
         da:3e:6f:d8:89:6d:b6:14:75:43:47:2d:22:49:47:e5:b9:79:
         e5:ce:84:d4:74:9d:d8:98:a1:20:4b:32:cc:85:c8:01:14:33:
         5a:06:2c:b3:18:e0:11:d6:b3:aa:c8:21:87:d1:0a:67:d2:0f:
         b2:62:91:9a:71:df:4a:72:56:23:6c:f3:ff:36:15:f3:c5:ea:
         fe:2c:83:ce:8d:07:f9:b5:14:f6:f6:95:46:c7:19:6c:6e:3c:
         36:79:d4:cb:1c:51:d5:6b:9d:8b:58:27:7a:a3:ed:32:30:86:
         15:79:23:66:13:29:57:09:d8:0e:f7:93:cd:2d:0d:12:ed:6b:
         79:44:3d:1c:78:99:5b:b4:e9:ad:35:a3:82:45:79:6c:6b:ab:
         15:f6:49:82:aa:89:1c:b5:06:f9:a7:31:32:0c:64:95:81:91:
         72:15:76:5a:4d:08:5d:10:95:ec:d0:05:ed:47:b4:25:6f:2c:
         43:95:1a:fb:a3:d8:44:1e:af:65:89:ed:41:f9:7a:88:fe:97:
         26:2c:3b:84:9e:c1:11:2c:de:00:78:ea:7a:38:c4:3e:d9:19:
         9f:19:70:ea:95:70:17:17:23:e9:4d:70:00:7b:ce:ba:00:60:
         c4:cd:f4:73
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzI3NUQxMTAvBgNVBAUTKEJCMEYzNUJFOEIyMUZCNzIzRkJDRDcxQjAxN0I5NTc0
MjM3RURDODQwHhcNMjYxMDAxMDA0ODQzWhcNMjcwMTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJkYWRlYi1iZWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvIxPZOu9uaXTym/SsIUzAOKeyFGfe4efs2KJYOnfpmckP+a981nQGClvIeLL
1oz8lM+4YpjwuxE3aUWR8nx4XEWe5PRB5fCe34amztVLHlBKqolTQmsrK0kWIZ0F
vPAY6OXjlrdeGYVC2e/1GqH8WFOxltwoPskMzB3vJsbq5oS3g8z0U7Aic8oz6uDq
/0J92YKtUIUKRHkPH4jiD0OeVv09XOdufTd6Qd7A7V5dsj3kY5laFXvaROKX1Gx6
eEepTpc5zmTE0+3TxSu7Wh1i/fgL61PzOqDSTIaAlMDsH22qLkWHdAUWCYBqfnfM
q1cIQmOEHmKfiP43FmzNJYsl+wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCYtqFYn
8JOliYfeFxtGlrYv2geyMB8GA1UdIwQYMBaAFLsPNb6LIftyP7zXGwF7lXQjftyE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjc1RC8wMTlCOTZCNEI2
NkMxMUVFQTBEODhEMzNDNEY5QUUwMi91dzgxdm9zaC0zSV92TmNiQVh1VmRDTi0z
SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3V3ODF2b3NoLTNJX3ZOY2JBWHVWZENOLTNJUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzI3NUQvMDE5Qjk2QjRCNjZDMTFFRUEwRDg4RDMzQzRGOUFFMDIvQUQ3MjQ4NzJC
Nzg3MTFFRUE0RDI2MTg2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAnQrlMA0GCSqGSIb3DQEBCwUAA4IBAQC3cdrSG7TV0O6evWMMsmS2
VUzaPm/YiW22FHVDRy0iSUfluXnlzoTUdJ3YmKEgSzLMhcgBFDNaBiyzGOAR1rOq
yCGH0Qpn0g+yYpGacd9KclYjbPP/NhXzxer+LIPOjQf5tRT29pVGxxlsbjw2edTL
HFHVa52LWCd6o+0yMIYVeSNmEylXCdgO95PNLQ0S7Wt5RD0ceJlbtOmtNaOCRXls
a6sV9kmCqokctQb5pzEyDGSVgZFyFXZaTQhdEJXs0AXtR7QlbyxDlRr7o9hEHq9l
ie1B+XqI/pcmLDuEnsERLN4AeOp6OMQ+2RmfGXDqlXAXFyPpTXAAe866AGDEzfRz
-----END CERTIFICATE-----
Generated at Mon Oct 19 19:46:19 2026 by rpki-client