Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/41F47786ECC611EEA533BC59C4F9AE02.roa
File:                     41F47786ECC611EEA533BC59C4F9AE02.roa (raw, json)
Hash identifier:          KwcLXlOwpwvH5sucpkzxIGHuHkLiipTGzFDtXipUBq4=
Subject key identifier:   13:09:76:C3:A8:3B:08:95:68:9C:39:2A:11:1C:83:CB:66:F9:B1:CC
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F23
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/41F47786ECC611EEA533BC59C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:23:38 +0000
ROA not before:           Sun 31 May 2026 16:23:38 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     151730
IP address blocks:        157.15.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12067 (0x2f23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:23:38 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c608a-5577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a4:a5:13:ad:ff:95:9e:e3:28:0b:0e:b7:96:
                    c9:39:d2:fa:b4:8b:78:03:45:01:dc:88:37:b6:ca:
                    51:51:1e:c1:42:f4:3f:93:7c:e0:29:03:1f:d6:07:
                    48:98:2e:d8:d8:79:fe:42:f9:80:1e:11:ef:f4:17:
                    2b:bd:e4:db:0d:6b:eb:c9:af:de:2f:0e:9a:1c:ef:
                    9d:eb:21:aa:2e:24:6d:33:2e:db:14:97:d1:a1:88:
                    98:d8:43:ca:f1:c1:14:1a:2e:e1:1e:e1:03:92:80:
                    e5:72:85:04:f3:35:a2:e0:b9:ab:d9:ab:33:ac:7f:
                    39:30:9c:4f:8f:67:9e:fc:ec:e7:f8:18:a9:58:12:
                    bc:39:88:a6:00:61:ff:20:1e:92:6f:6b:31:6e:56:
                    dd:44:cd:7b:b4:6d:ac:a8:dc:15:d8:2b:d7:94:83:
                    09:33:f1:38:e5:e0:8c:8b:dc:ec:b7:51:a5:d9:1b:
                    c7:76:1d:b3:25:62:e1:34:29:d0:cf:34:f3:80:03:
                    66:7f:56:b2:86:3e:b6:1c:2b:ec:9c:16:7e:6b:77:
                    b2:3f:bc:51:f3:14:82:ec:41:d8:51:97:91:b6:e9:
                    d4:47:58:9e:5c:e2:83:8b:64:8b:a5:fb:74:9d:86:
                    a5:83:34:5d:88:4f:26:57:8f:e3:d9:60:1f:49:e3:
                    77:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:09:76:C3:A8:3B:08:95:68:9C:39:2A:11:1C:83:CB:66:F9:B1:CC
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/41F47786ECC611EEA533BC59C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:30:49:60:1f:b7:ba:bb:05:fc:f7:5a:dc:dc:ee:9a:a2:71:
         76:34:24:7a:57:2f:ea:3c:a8:76:f5:28:6e:c1:75:bc:ca:f1:
         b4:cf:8b:06:e0:c4:5e:54:02:b2:28:d1:75:4e:38:ba:da:25:
         46:e9:7c:5f:de:fe:d5:a7:3b:dd:eb:a3:e0:4f:b6:27:2d:25:
         5e:67:37:62:67:9b:37:fd:af:7b:12:17:2d:bc:ff:7b:cb:6e:
         ab:ec:3f:8f:93:9a:b1:21:3d:7a:d7:0f:17:c8:41:e6:e5:8b:
         40:b1:92:ce:e1:79:2d:af:14:51:84:3b:2e:49:08:f7:59:03:
         1f:38:a1:50:b9:ea:fc:1c:b6:cb:55:db:9c:a0:51:7b:3b:cc:
         cb:b2:bb:ae:16:48:75:38:28:cb:99:24:00:af:73:7e:7d:a2:
         61:b0:1a:c0:c2:61:8a:9d:9e:fe:7d:e5:7c:48:66:d8:2a:b8:
         01:57:e4:bf:8c:11:66:d2:b8:af:70:76:ca:8f:75:ee:1e:0a:
         16:38:4c:37:fe:15:1b:a7:0b:e9:65:fa:66:5f:8a:24:9a:6c:
         90:2f:79:fb:65:ad:fb:70:51:85:53:11:10:f8:f2:3b:4c:03:
         9e:2c:04:74:05:1b:05:7e:d8:5e:b4:6f:a3:bd:28:1d:3e:24:
         69:6e:23:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:51 2026 by rpki-client