Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/15B06ACE01B211F1A8498BCA6C6F56BC.roa
File:                     15B06ACE01B211F1A8498BCA6C6F56BC.roa (raw, json)
Hash identifier:          5xNdDoLkpm/cKB7fxSHaoDjqTsi17ChXNYz70KIoKrA=
Subject key identifier:   D3:0F:91:F3:F2:83:84:9E:52:81:5E:19:F3:F6:94:E4:82:57:89:F9
Certificate issuer:       /CN=A91A560A/serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD
Certificate serial:       381C
Authority key identifier: 86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/15B06ACE01B211F1A8498BCA6C6F56BC.roa
Signing time:             Mon 02 Mar 2026 23:21:04 +0000
ROA not before:           Wed 04 Feb 2026 10:13:00 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     63735
IP address blocks:        151.158.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14364 (0x381c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD
        Validity
            Not Before: Feb  4 10:13:00 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61b60-7b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:be:a8:55:6d:78:f3:b1:ef:8b:58:22:eb:c6:
                    14:6b:b7:b8:01:23:bc:e6:bb:3f:80:f3:a5:82:d6:
                    f9:99:1d:19:31:88:30:d4:ce:38:31:a1:79:2e:6d:
                    a0:f9:a8:be:c6:29:a3:db:ce:c2:be:b3:7b:3a:af:
                    da:25:36:62:17:5f:ad:55:5d:be:0c:61:d5:e1:28:
                    35:c9:b1:77:08:cd:b6:2c:7b:5d:3c:2c:69:4e:81:
                    c7:50:99:c3:60:e8:44:77:11:dd:1a:2d:8f:ea:27:
                    61:59:16:db:7e:cb:fa:c3:8a:74:35:f3:8f:f1:dd:
                    c3:25:72:58:a1:0c:cc:85:7d:bd:e3:d5:0f:fb:0a:
                    a3:b1:52:c1:48:8f:8e:ea:f0:d7:91:5b:67:47:bf:
                    30:83:e5:bb:19:ff:47:ed:b3:65:a3:76:a5:eb:22:
                    5c:7c:36:f4:a4:cf:a9:7f:32:ed:78:23:84:44:5a:
                    57:aa:09:ea:9b:52:30:31:52:2c:65:14:9a:9f:05:
                    56:08:8b:d2:ee:cc:9b:72:b8:aa:42:c4:45:c5:2b:
                    d9:2d:a9:55:94:4c:82:45:ef:b4:79:87:57:88:f2:
                    bc:0b:5c:f7:b2:aa:27:ed:77:3c:75:11:54:f1:24:
                    61:f4:e7:c3:b9:4b:61:17:9b:83:90:96:ae:b2:71:
                    b2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0F:91:F3:F2:83:84:9E:52:81:5E:19:F3:F6:94:E4:82:57:89:F9
            X509v3 Authority Key Identifier:
                keyid:86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/15B06ACE01B211F1A8498BCA6C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:e5:ae:06:e5:94:ca:e2:2d:61:49:b4:db:8b:01:6e:62:c9:
         ce:84:57:6a:08:57:71:c0:7a:57:d4:ad:62:7c:22:0f:b9:27:
         dd:99:72:0c:5b:89:b5:a8:65:79:98:5c:0f:19:ca:14:e9:6f:
         50:6e:4c:78:5e:93:6d:0d:71:88:06:74:67:1f:b1:c7:4a:57:
         94:88:9f:c2:57:d3:d3:fa:34:c9:f5:71:69:c8:c0:7c:48:31:
         bc:d2:a1:45:37:80:39:e1:5a:b5:2b:54:89:64:3a:12:a6:55:
         32:88:b0:52:27:57:e5:b1:13:0d:e1:bc:03:16:7b:81:92:9f:
         83:ac:c0:91:44:be:8a:1c:7d:bc:45:a1:20:a8:b1:20:ff:b3:
         7d:2d:41:fe:48:bb:a4:af:e0:7d:f6:23:ec:5d:59:fc:16:ab:
         d5:f4:17:6d:aa:3a:54:7f:e5:98:45:40:0f:ea:96:4c:64:66:
         d8:a5:72:83:59:79:70:78:b3:7e:3a:f4:42:1d:7c:47:3d:b7:
         42:60:55:70:0b:58:3a:5e:cd:1d:1b:a1:e9:76:46:30:c5:55:
         4e:33:42:69:c2:96:cf:80:24:40:53:2c:9b:dd:75:14:e3:af:
         f1:97:83:0b:e9:9b:11:95:2a:3e:2a:11:95:b6:ce:34:a3:ee:
         78:a4:9f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 16:08:22 2026 by rpki-client