Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/38D7A57E02B311F1B5A042A33E3D8C67.roa
File:                     38D7A57E02B311F1B5A042A33E3D8C67.roa (raw, json)
Hash identifier:          TB0gLypezyvhSYXKuhRx9hDReeYJv2R0PPBMOqgwTZc=
Subject key identifier:   62:14:C4:A0:FD:AF:50:79:67:EA:48:2D:8D:8A:9D:6B:92:BA:99:18
Certificate issuer:       /CN=A9181803/serialNumber=96C94F635CC781E859774A11AF73628B60A656CF
Certificate serial:       04
Authority key identifier: 96:C9:4F:63:5C:C7:81:E8:59:77:4A:11:AF:73:62:8B:60:A6:56:CF
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/38D7A57E02B311F1B5A042A33E3D8C67.roa
Signing time:             Thu 05 Feb 2026 16:56:38 +0000
ROA not before:           Thu 05 Feb 2026 16:56:38 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     151965
IP address blocks:        151.158.136.0/23 maxlen: 23
                          151.158.136.0/24 maxlen: 24
                          151.158.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.crl
                          rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 07:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181803, serialNumber=96C94F635CC781E859774A11AF73628B60A656CF
        Validity
            Not Before: Feb  5 16:56:38 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6984cbc5-6276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:97:fb:94:1b:14:cc:7d:ad:47:0b:e8:91:0d:
                    49:f6:f4:5f:a4:ad:52:50:59:1f:89:ce:c7:31:2a:
                    72:db:7c:02:61:46:f9:56:f1:d3:07:49:43:d2:56:
                    18:93:29:b6:05:1d:f5:77:1b:c3:39:21:2f:90:1a:
                    c4:e5:f1:1f:b4:86:c6:f7:0b:8f:12:17:b4:6b:91:
                    ce:54:64:59:51:4d:8f:35:d0:fa:b1:5d:57:9d:cf:
                    f2:56:b8:ad:85:78:fd:89:9f:4c:54:57:ed:56:7f:
                    c6:a6:1b:37:44:5d:dc:41:ab:e4:33:d1:36:b1:ad:
                    a7:f5:d3:7e:b2:d8:26:f9:d0:e1:4b:c3:5c:3b:aa:
                    ad:a8:f7:66:79:8e:62:c4:6e:80:7d:e1:60:31:f0:
                    76:45:1f:68:c7:3f:17:b6:a2:c1:9d:2e:b5:63:36:
                    e4:3c:59:48:ba:c6:ab:bf:0b:89:96:5c:0e:ae:92:
                    7d:b2:16:b2:46:e8:b6:b2:81:f7:21:96:fe:f3:dc:
                    73:8d:40:ac:0d:f1:da:88:f7:f4:85:ca:f6:55:0a:
                    fa:e3:9e:9a:08:d3:e1:19:8f:f9:17:bf:e9:64:67:
                    2b:d6:05:c2:29:27:92:09:1e:0d:d2:d3:8d:8e:ec:
                    a0:09:89:00:45:cd:b4:13:9a:f0:a1:f8:8d:ac:49:
                    2c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:14:C4:A0:FD:AF:50:79:67:EA:48:2D:8D:8A:9D:6B:92:BA:99:18
            X509v3 Authority Key Identifier:
                keyid:96:C9:4F:63:5C:C7:81:E8:59:77:4A:11:AF:73:62:8B:60:A6:56:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/lslPY1zHgehZd0oRr3Nii2CmVs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lslPY1zHgehZd0oRr3Nii2CmVs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181803/E3863BDA02B211F1BEFAC7A13E3D8C67/38D7A57E02B311F1B5A042A33E3D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:94:43:3f:35:ac:92:1c:0f:f1:5f:c6:2f:b8:16:d7:86:ed:
         ba:16:fa:ad:be:1b:58:30:03:43:6b:07:0e:6d:9d:37:af:d5:
         f2:6e:56:d8:7d:0d:33:e3:64:5d:9d:d9:d7:d3:af:f8:28:07:
         a9:d1:28:af:fc:36:0a:68:8a:e7:9d:a5:2c:e3:44:11:e8:5a:
         88:d6:99:93:3b:20:3d:b6:a9:4c:86:e8:70:99:9c:a3:b8:2a:
         25:ec:bb:3e:03:c2:dc:05:2c:07:01:83:93:e5:a7:7a:b0:f2:
         35:96:8d:ae:93:16:09:20:a4:8f:25:6d:7c:7b:7d:36:23:82:
         cb:2e:20:7e:be:93:06:c0:7f:b9:0d:93:b2:f6:4d:b4:38:6a:
         82:3e:92:9e:1b:04:fc:82:b5:f0:dd:0d:16:9e:80:53:3e:64:
         8f:d5:44:11:fb:36:bf:5d:5d:4f:b7:b6:6b:0e:1b:54:f3:2f:
         88:d9:19:04:c0:07:cb:06:4d:4f:14:05:61:71:08:a6:8b:79:
         ca:4e:79:ca:29:94:00:b2:13:bf:12:c8:49:5b:c4:b9:81:d8:
         b8:92:26:b9:ef:df:d7:22:00:dc:5a:8c:2d:56:4e:92:8f:75:
         bf:a0:9a:44:47:e1:7e:7d:57:df:08:04:53:f2:31:91:54:d5:
         70:27:3a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:33:10 2026 by rpki-client