Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/00B077D6187D11F19A5CAFE7383D8C67.roa
File:                     00B077D6187D11F19A5CAFE7383D8C67.roa (raw, json)
Hash identifier:          mW9wCzHROG2faL3zV7IIUqQz5qp+XENd/4NuYNOgCwo=
Subject key identifier:   FD:70:33:5A:84:98:5F:57:59:68:BD:FF:A4:B0:EB:BD:18:09:8E:8E
Certificate issuer:       /CN=A91BFDE1/serialNumber=72B549E03FF750A53979D00DCB1DA644BB52ACAC
Certificate serial:       08
Authority key identifier: 72:B5:49:E0:3F:F7:50:A5:39:79:D0:0D:CB:1D:A6:44:BB:52:AC:AC
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/00B077D6187D11F19A5CAFE7383D8C67.roa
Signing time:             Thu 05 Mar 2026 10:20:59 +0000
ROA not before:           Thu 05 Mar 2026 10:20:59 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     154516
IP address blocks:        151.158.198.0/24 maxlen: 24
                          151.158.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.crl
                          rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 08:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFDE1, serialNumber=72B549E03FF750A53979D00DCB1DA644BB52ACAC
        Validity
            Not Before: Mar  5 10:20:59 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a9590b-ac49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:1b:65:b0:f1:29:0e:f6:5e:73:dd:2e:61:
                    f8:2d:a8:a8:4c:b0:e7:ad:77:21:37:6c:be:53:16:
                    56:f3:0e:0f:6d:78:8d:6c:ca:6e:81:ce:10:5d:be:
                    fb:7b:f5:e6:e8:a0:dd:09:45:be:f5:fc:11:df:c6:
                    3e:13:60:37:7c:f4:04:0b:8c:50:ca:93:0e:4d:ca:
                    68:15:eb:83:76:91:06:92:a4:01:bc:db:64:67:ea:
                    4a:cd:88:21:48:39:ab:c0:bf:d7:47:23:ad:38:d6:
                    5b:2b:53:9f:03:e6:21:7d:f7:fe:7f:38:50:ad:29:
                    d4:9b:2a:2c:aa:41:5b:9b:70:b4:a4:4c:70:8e:69:
                    fb:ff:55:ab:75:e6:1d:eb:87:16:38:51:aa:d5:1a:
                    75:ef:d5:53:b0:d8:63:80:8a:a7:5d:c3:35:b9:8e:
                    b6:c4:da:fc:4a:68:ec:33:c6:02:fa:19:fc:79:2a:
                    41:01:1c:3c:57:85:66:f9:11:74:6b:c5:5e:83:f2:
                    1e:78:20:f4:a0:2e:71:e3:88:87:fe:41:47:d0:64:
                    ae:b1:5b:1c:89:45:c7:4a:64:e2:d2:b8:22:4f:e5:
                    7d:41:22:ba:09:39:71:b6:20:75:52:04:6f:78:d1:
                    be:81:d2:84:33:b0:df:0a:b9:72:b7:b9:ce:8f:6f:
                    33:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:70:33:5A:84:98:5F:57:59:68:BD:FF:A4:B0:EB:BD:18:09:8E:8E
            X509v3 Authority Key Identifier:
                keyid:72:B5:49:E0:3F:F7:50:A5:39:79:D0:0D:CB:1D:A6:44:BB:52:AC:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/00B077D6187D11F19A5CAFE7383D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:d9:cc:a9:cd:92:92:df:69:03:48:0f:75:06:9f:2b:96:82:
         2f:de:d9:61:17:c8:f4:68:7b:f2:aa:82:50:63:29:05:7c:25:
         82:e4:4f:43:f1:cd:2b:b9:c6:66:36:fb:db:6d:63:81:d2:bb:
         e7:31:a7:31:14:6d:7b:01:82:29:68:3e:b9:58:fc:f3:64:b0:
         94:6f:e9:ed:6f:8e:c4:c8:1c:28:08:60:a3:d3:f9:74:9f:78:
         08:fb:f2:50:e1:e5:29:69:ab:d0:e5:fd:b7:ad:fc:28:b5:bf:
         bd:8e:19:2f:4c:78:92:dc:36:94:89:f0:97:95:de:d6:dc:a3:
         5f:ff:f1:e6:f7:be:c0:57:5d:f9:27:2c:29:0d:89:ed:f8:ef:
         f3:64:a5:1e:3f:6b:c5:04:54:e4:ca:c0:61:60:b2:07:6c:28:
         c7:32:8b:a4:78:a3:bf:6d:e0:3f:d7:c9:bc:5c:df:3d:b2:56:
         d6:b0:c6:cb:91:c9:56:45:c0:3f:29:91:42:8a:b4:de:da:ac:
         2f:0f:91:a5:67:b1:67:de:12:b1:fa:ac:f5:85:ca:7e:9e:6d:
         48:6d:29:48:51:16:8d:97:5b:d8:9f:c6:a9:53:21:c5:4c:9b:
         65:24:7e:c3:f7:ba:73:94:24:e0:91:3b:1c:9e:fe:10:9a:c2:
         8b:50:c6:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 7 16:08:24 2026 by rpki-client