Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/41F47786ECC611EEA533BC59C4F9AE02.roa
File:                     41F47786ECC611EEA533BC59C4F9AE02.roa (raw, json)
Hash identifier:          A1rwykm2TSA2aVtKMKRw4MWqHUzznPHoonwrkx1dZPQ=
Subject key identifier:   D2:8C:62:07:08:5D:31:3B:6A:C4:74:A9:6E:E8:73:E8:34:03:F7:10
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       314D
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/41F47786ECC611EEA533BC59C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:21:22 +0000
ROA not before:           Mon 06 Jul 2026 16:21:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151730
IP address blocks:        157.15.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12621 (0x314d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:21:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd601-2794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ff:5c:fb:28:e7:f6:79:69:96:57:48:38:70:
                    72:40:a3:c1:2e:77:38:b1:cf:de:f5:d9:16:cf:7a:
                    7b:74:cc:75:57:20:59:c0:d0:ba:5e:44:21:07:b7:
                    74:df:0e:de:c1:7d:13:3f:17:b7:0d:94:3e:69:20:
                    47:0d:7b:87:7b:b8:cf:98:1e:f0:10:6a:d0:f7:51:
                    ec:64:04:41:c2:f6:2a:b3:3b:95:40:36:f4:1a:d2:
                    84:5e:ad:9d:05:e7:83:19:2a:02:40:b8:d5:d8:de:
                    43:fa:39:78:93:3c:df:8a:f8:1b:ce:dd:f1:49:a3:
                    75:f6:da:39:30:0d:84:7d:51:0b:26:58:20:aa:5c:
                    a9:2a:56:b4:cd:75:dc:18:d8:6a:06:14:13:b5:9a:
                    1b:37:c1:d9:92:9a:59:10:19:45:51:c4:26:a0:07:
                    4a:b3:0c:fd:dd:d3:fb:33:35:bc:d7:e8:bb:57:c6:
                    a8:ad:c6:5d:eb:5c:f8:61:98:ae:4c:e1:84:3e:13:
                    5b:58:6a:f3:0b:f8:5a:81:b0:f5:8f:3f:3f:ce:c5:
                    c3:42:5d:ab:00:67:6f:51:e1:4d:60:42:bb:7d:62:
                    b0:c0:a0:5f:80:48:d4:5a:50:d2:24:26:6f:17:07:
                    f8:bf:4d:f0:b1:a8:8d:31:19:a0:82:55:5a:c5:90:
                    ff:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8C:62:07:08:5D:31:3B:6A:C4:74:A9:6E:E8:73:E8:34:03:F7:10
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/41F47786ECC611EEA533BC59C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:69:74:78:56:31:cd:47:83:cd:14:e0:84:a0:c1:f9:1e:c6:
         65:b3:d7:24:35:4f:2d:57:89:11:6a:5b:37:71:fd:0f:5c:3c:
         95:5e:49:e6:10:b7:a7:33:f0:72:ae:08:80:6a:a1:4b:fb:a9:
         60:7e:41:57:3b:b9:8e:4b:90:72:e4:12:e3:93:5a:70:eb:bd:
         1d:10:8b:f1:06:51:c6:33:31:9e:5b:3f:f6:c3:7f:fc:ef:08:
         98:8d:6b:37:bd:c2:07:a7:fb:b6:6b:0d:6f:42:5c:bc:83:2b:
         39:4f:c6:d5:b5:17:28:ad:a0:eb:6d:89:a1:1c:85:b6:7c:d7:
         af:8f:61:a7:f4:12:48:89:64:28:bf:31:aa:73:49:a8:5e:8b:
         ef:1d:12:5a:25:b2:63:cc:c9:5b:95:2d:42:14:66:5a:be:34:
         43:e0:64:21:e4:3e:83:9c:ab:e1:1d:da:fd:6e:92:5c:91:65:
         52:32:7d:c6:c9:ab:9e:5d:28:4c:c8:16:3c:69:26:95:fc:1c:
         09:8d:6d:2e:55:4f:d8:0a:a2:6b:f6:c4:61:01:e5:13:a1:58:
         0d:c4:ba:34:6d:e2:9f:71:29:b1:36:01:e4:d3:d4:2c:89:e4:
         8f:3c:53:ad:57:c4:17:a5:ef:6c:e8:8a:73:10:10:2f:f2:d5:
         b7:aa:1f:59
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICMU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNzA2MTYyMTIyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZDYwMS0yNzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi/9c+yjn9nlplldIOHByQKPBLnc4sc/e9dkWz3p7dMx1VyBZwNC6XkQhB7d0
3w7ewX0TPxe3DZQ+aSBHDXuHe7jPmB7wEGrQ91HsZARBwvYqszuVQDb0GtKEXq2d
BeeDGSoCQLjV2N5D+jl4kzzfivgbzt3xSaN19to5MA2EfVELJlggqlypKla0zXXc
GNhqBhQTtZobN8HZkppZEBlFUcQmoAdKswz93dP7MzW81+i7V8aorcZd61z4YZiu
TOGEPhNbWGrzC/hagbD1jz8/zsXDQl2rAGdvUeFNYEK7fWKwwKBfgEjUWlDSJCZv
Fwf4v03wsaiNMRmgglVaxZD/UQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNKMYgcI
XTE7asR0qW7oc+g0A/cQMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNDFGNDc3ODZF
Q0M2MTFFRUE1MzNCQzU5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAnQ8RMA0GCSqGSIb3DQEBCwUAA4IBAQAjaXR4VjHNR4PNFOCEoMH5
HsZls9ckNU8tV4kRals3cf0PXDyVXknmELenM/ByrgiAaqFL+6lgfkFXO7mOS5By
5BLjk1pw670dEIvxBlHGMzGeWz/2w3/87wiYjWs3vcIHp/u2aw1vQly8gys5T8bV
tRcoraDrbYmhHIW2fNevj2Gn9BJIiWQovzGqc0moXovvHRJaJbJjzMlblS1CFGZa
vjRD4GQh5D6DnKvhHdr9bpJckWVSMn3GyaueXShMyBY8aSaV/BwJjW0uVU/YCqJr
9sRhAeUToVgNxLo0beKfcSmxNgHk09QsieSPPFOtV8QXpe9s6IpzEBAv8tW3qh9Z
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:56 2026 by rpki-client