Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/69E5BC382CD811F1ACDE793A9A833773.roa
File:                     69E5BC382CD811F1ACDE793A9A833773.roa (raw, json)
Hash identifier:          smF654Hi+ihZBGyEmAdAxIkMQXLLQzXqzXf/0N/B6sI=
Subject key identifier:   11:FB:72:B2:43:4B:B4:AA:7F:79:46:E9:AD:56:48:CE:81:F0:E3:02
Certificate issuer:       /CN=A9187347/serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E
Certificate serial:       1F
Authority key identifier: D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/69E5BC382CD811F1ACDE793A9A833773.roa
Signing time:             Tue 31 Mar 2026 08:06:13 +0000
ROA not before:           Tue 31 Mar 2026 08:06:13 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     38562
IP address blocks:        151.158.100.0/24 maxlen: 24
                          151.158.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl
                          rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187347, serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E
        Validity
            Not Before: Mar 31 08:06:13 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69cb8075-963c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ab:2c:5d:81:5c:76:e9:d8:23:1a:88:31:6d:
                    30:fc:ee:d5:b6:db:f1:80:5a:fb:7d:44:ae:1e:8d:
                    d5:f6:7d:07:35:48:20:e1:da:a0:c2:39:92:c0:c3:
                    d5:31:b0:97:b4:c4:17:a3:a4:40:cf:4b:c5:ae:e9:
                    84:7d:f8:33:97:5e:a1:91:01:d1:d9:98:e4:e7:65:
                    e1:43:5e:c3:df:3d:06:80:b1:33:93:df:c1:0e:4d:
                    f9:fd:9c:d9:ef:d2:4e:7a:e3:9f:22:82:88:d4:61:
                    3a:91:f0:5a:e0:60:b4:9a:8e:de:e5:18:79:21:21:
                    e9:28:fc:66:56:5a:e3:05:c3:11:6f:30:3b:43:3e:
                    4e:ea:9d:73:f1:7e:79:c3:13:b6:98:bf:be:7d:d1:
                    a7:76:3c:81:f5:f3:86:42:3a:ba:3b:44:fb:10:e7:
                    a4:19:40:13:b6:b7:ca:0f:cf:6e:99:ec:53:d1:51:
                    60:14:0a:fb:18:01:7f:6c:42:31:c5:8b:dc:b4:51:
                    ea:ba:91:75:7d:a4:7a:68:9b:4f:bb:33:85:0c:1a:
                    39:9e:cc:d2:8a:6b:90:55:3e:60:6f:0b:80:27:9e:
                    47:70:5a:80:f9:96:a8:bc:96:67:84:14:99:fa:ec:
                    4b:4e:c4:27:15:06:82:61:b3:0e:59:ac:41:95:36:
                    25:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FB:72:B2:43:4B:B4:AA:7F:79:46:E9:AD:56:48:CE:81:F0:E3:02
            X509v3 Authority Key Identifier:
                keyid:D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/69E5BC382CD811F1ACDE793A9A833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:33:40:47:58:bf:0b:c1:14:79:95:c4:c7:6d:e8:cc:44:47:
         19:41:08:8b:25:f1:b1:76:07:2f:bb:a4:75:ce:6c:0d:ba:fb:
         12:44:c1:38:82:00:76:e8:87:3d:a5:5f:52:e8:36:b8:b5:65:
         24:2f:c6:e6:09:91:0d:2c:de:a1:69:73:48:e4:13:1f:ce:1a:
         bf:94:51:11:ac:f6:cf:6e:4d:4f:56:a9:52:ed:f4:41:0a:f5:
         71:9e:aa:cb:4c:20:4c:70:cf:61:5a:23:18:2c:fe:5c:42:4b:
         4b:1b:71:0e:f7:18:94:6b:f9:51:97:3b:23:bc:ae:aa:93:de:
         f0:5b:79:a8:e9:bd:1e:be:aa:05:1b:04:c3:e0:08:c3:63:2c:
         d9:cc:c8:22:31:62:fe:a7:c9:e3:8a:ad:75:37:b8:ca:34:26:
         7c:9f:bd:a2:9a:07:63:7a:93:36:5c:d9:93:be:d3:8b:45:06:
         c2:20:d2:51:01:59:a3:cc:fb:c7:c9:dd:80:8c:e4:00:4b:3c:
         43:e3:7d:42:ec:8c:7b:1a:0a:14:d6:b0:a3:1a:69:7d:57:e5:
         3f:47:e0:3e:f5:0c:65:18:82:d2:31:0e:ae:9a:96:58:c6:55:
         81:01:57:36:d9:4e:38:c4:a7:17:4c:02:13:b5:9c:06:68:d8:
         11:83:27:b8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 6 12:22:18 2026 by rpki-client