Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/08A46B6A1B5111F18293DF0B253D8C67.roa
File:                     08A46B6A1B5111F18293DF0B253D8C67.roa (raw, json)
Hash identifier:          TF6EFrOkoOfXprH347Zxdrds6n86GSJg1BTmg1x6OAs=
Subject key identifier:   CD:EB:A2:03:1C:7B:C1:89:71:A8:C1:29:C0:8A:56:E7:46:EE:4C:51
Certificate issuer:       /CN=A91AE7C5/serialNumber=DF71F62A86301AC6D3ACA409832CC3A9D99C9A11
Certificate serial:       1A
Authority key identifier: DF:71:F6:2A:86:30:1A:C6:D3:AC:A4:09:83:2C:C3:A9:D9:9C:9A:11
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/08A46B6A1B5111F18293DF0B253D8C67.roa
Signing time:             Tue 21 Apr 2026 13:41:14 +0000
ROA not before:           Tue 21 Apr 2026 13:41:14 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140959
IP address blocks:        151.158.191.0/24 maxlen: 24
                          151.158.191.4/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.crl
                          rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 13:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE7C5, serialNumber=DF71F62A86301AC6D3ACA409832CC3A9D99C9A11
        Validity
            Not Before: Apr 21 13:41:14 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69e77e7a-8925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:23:7d:18:cf:d9:21:68:df:77:7d:b0:a3:c3:
                    b7:42:dd:99:5e:86:b6:4e:3c:5d:11:4a:f6:d9:d1:
                    01:83:14:f5:a7:63:02:96:b9:e0:23:15:0f:15:cd:
                    10:8e:bf:55:36:64:26:e9:32:65:e1:3d:f5:9b:b4:
                    17:3f:d0:34:8d:22:8f:a5:7f:e4:4c:d6:6a:93:85:
                    88:a5:a8:b1:6c:d9:33:12:33:b8:c4:2e:a5:8d:a3:
                    78:2f:1b:a9:df:ee:0b:27:75:5a:f2:77:5b:80:21:
                    dc:e5:23:7a:e7:aa:53:c9:15:ae:bc:0d:9b:56:4e:
                    5b:b3:95:ea:70:1b:3b:3f:ff:4f:37:46:f6:09:ef:
                    22:a2:24:98:cf:13:39:a6:db:25:3d:16:6c:b7:d8:
                    1b:a1:ed:36:7a:0f:37:60:da:3e:ad:03:98:b8:69:
                    76:d3:06:5e:5d:d7:3e:2e:15:21:37:cb:bf:13:48:
                    a0:9b:b6:47:d9:9f:4d:8b:e0:0a:30:74:a1:92:c8:
                    42:ec:94:44:2f:50:f3:15:48:f9:15:e7:a4:4b:02:
                    10:1d:5d:71:d7:aa:cc:05:1b:14:55:7a:f4:3f:0a:
                    4a:22:cb:36:e8:a2:f2:fe:33:57:0c:96:49:a2:35:
                    4a:24:7e:97:1c:fd:da:41:b5:ce:f9:3e:af:1d:a1:
                    cc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:EB:A2:03:1C:7B:C1:89:71:A8:C1:29:C0:8A:56:E7:46:EE:4C:51
            X509v3 Authority Key Identifier:
                keyid:DF:71:F6:2A:86:30:1A:C6:D3:AC:A4:09:83:2C:C3:A9:D9:9C:9A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/08A46B6A1B5111F18293DF0B253D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:89:24:0f:c3:5b:b8:be:69:e5:23:7f:12:95:18:42:a3:b6:
         03:c7:d7:87:72:99:b5:e2:ea:4b:92:ad:ba:ad:51:8b:b5:4d:
         d6:4f:8f:bd:9e:97:95:ba:7a:31:46:b4:ad:7d:8a:46:c6:c6:
         54:e2:35:ad:5f:e8:16:a4:66:3f:8b:88:54:1d:43:50:3b:4a:
         af:da:dd:42:3b:77:40:5d:46:d6:28:af:00:68:b9:ef:05:e2:
         52:b0:b9:ce:81:20:57:45:29:45:00:d2:d0:db:ac:3b:a5:31:
         19:14:6a:31:ed:6c:76:1c:76:4d:bc:57:f0:5d:3b:7c:3a:fb:
         98:47:be:69:b1:a4:19:68:48:e3:8c:1f:d0:76:45:f4:a5:e5:
         45:d4:83:18:5a:9e:4e:66:9c:43:6f:d3:77:e0:6f:42:cf:b5:
         c6:bb:d0:1a:58:e6:7b:ad:87:2b:23:6e:87:0d:d8:6c:af:3b:
         be:ee:6d:b3:d7:03:e1:21:6c:f5:7b:3c:a9:01:06:d0:29:ec:
         06:77:32:ca:67:3f:86:43:50:c8:09:2f:ec:dd:68:19:07:02:
         25:bb:d7:a4:bc:bd:b2:74:e8:26:ac:ed:f5:3a:95:0c:2c:68:
         d4:47:44:e9:1c:17:3a:4c:30:af:f4:7d:36:70:ec:80:8c:81:
         a8:82:15:89
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 21 22:52:36 2026 by rpki-client