Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/15B06ACE01B211F1A8498BCA6C6F56BC.roa
File:                     15B06ACE01B211F1A8498BCA6C6F56BC.roa (raw, json)
Hash identifier:          E5m51G+fZEQtkgSZouRPixEEEOpioqbWesNFrLhFSo4=
Subject key identifier:   4F:B5:6E:B2:D7:E2:10:07:1A:96:92:7C:E1:AB:57:C9:77:32:73:8C
Certificate issuer:       /CN=A91A560A/serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD
Certificate serial:       3901
Authority key identifier: 86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/15B06ACE01B211F1A8498BCA6C6F56BC.roa
Signing time:             Fri 02 Oct 2026 15:38:33 +0000
ROA not before:           Fri 02 Oct 2026 15:38:33 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     63735
IP address blocks:        151.158.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 04:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14593 (0x3901)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD
        Validity
            Not Before: Oct  2 15:38:33 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcff9-2aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1a:12:7d:f4:2e:03:e2:58:39:18:0f:ed:6e:
                    d3:c7:6d:49:59:87:f9:0e:b8:85:b8:8c:ff:6d:80:
                    ca:83:e5:fe:3d:22:cc:e8:6f:7f:81:93:3b:fd:62:
                    ad:9a:a3:1a:34:4b:35:7b:a3:82:21:b3:39:22:c3:
                    e4:cf:48:3e:df:2c:8b:b8:cb:0e:b1:93:da:df:de:
                    12:48:73:ea:4d:66:fb:ba:e8:1b:00:2f:55:fd:59:
                    73:04:61:af:ba:79:d7:e0:02:47:26:35:ae:79:1a:
                    d9:23:11:57:6f:1f:07:5b:bd:fb:84:19:86:4d:db:
                    d1:2b:59:c2:93:c8:d1:84:ca:28:34:7b:4b:d2:46:
                    f3:f0:c5:5f:53:df:f1:23:ed:f1:65:a6:e5:fe:72:
                    bd:d7:fc:b8:03:5e:f8:57:86:78:2b:2b:74:fe:bb:
                    71:cd:a7:9e:70:31:c6:d7:18:69:30:1b:59:9f:ea:
                    04:cc:92:a4:a2:a2:3d:35:a7:71:e8:9f:29:ee:30:
                    14:3d:42:06:ed:5a:f6:d0:37:10:ea:d6:7b:e1:e6:
                    cd:c5:e9:39:e8:62:fd:17:78:6b:7e:38:6f:22:c5:
                    78:53:e4:3b:76:a2:52:2b:b9:39:33:b3:95:65:9a:
                    c6:10:fb:ec:9c:8c:fc:0c:5d:0d:6f:da:13:13:7e:
                    b3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B5:6E:B2:D7:E2:10:07:1A:96:92:7C:E1:AB:57:C9:77:32:73:8C
            X509v3 Authority Key Identifier:
                keyid:86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/15B06ACE01B211F1A8498BCA6C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:db:e1:a4:62:8c:5b:fe:3e:8d:14:d3:44:40:70:74:83:ab:
         8b:18:31:86:a1:b5:ec:11:8b:2d:e7:17:bd:64:24:5c:59:fe:
         0e:83:b4:c5:0b:e6:e2:60:d1:fe:17:12:8b:54:99:83:d2:bf:
         39:07:c0:44:6e:67:8a:ad:ad:df:2a:fb:44:41:ad:2e:f7:6a:
         e2:07:ee:43:b1:00:ad:f2:13:6f:a2:99:0e:1a:19:25:c9:0f:
         0c:20:04:67:53:b6:59:5c:21:a3:08:88:3a:d3:5d:0e:2f:80:
         8a:a4:5e:b5:5a:30:9a:ed:45:eb:a1:25:6c:74:e7:98:45:ad:
         87:a4:2c:33:1b:1c:1b:a5:92:5c:81:39:e9:69:c8:48:2a:78:
         3d:ce:d5:6b:cf:48:49:ff:a7:b3:e5:63:8f:9c:90:6f:0d:b3:
         ef:e9:00:77:10:c3:6d:e2:d6:e0:c6:07:62:7d:62:ad:41:e4:
         6a:23:50:d7:33:86:62:39:1d:3d:43:e8:d9:9a:84:f4:e9:26:
         af:67:f8:d9:72:ec:64:79:b3:73:78:fb:26:89:94:29:bc:2f:
         76:e4:b5:60:81:a4:a7:07:43:92:e7:f2:b7:7e:37:2c:50:38:
         d3:c8:14:be:a5:83:43:3e:e6:34:42:d7:e1:aa:32:99:f0:86:
         33:cb:7f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:22:48 2026 by rpki-client