Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/A2516E42DE4511EF8C37E320C4F9AE02.roa
File:                     A2516E42DE4511EF8C37E320C4F9AE02.roa (raw, json)
Hash identifier:          xo/EJ3CaHdIPdWdGQ1WzSAADuENiwShLJFxclFWUKsM=
Subject key identifier:   4F:0C:96:1A:B5:0B:FD:29:29:26:82:4A:D2:EF:B9:B6:FE:AE:34:F6
Certificate issuer:       /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
Certificate serial:       01C8
Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/A2516E42DE4511EF8C37E320C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:07:24 +0000
ROA not before:           Fri 27 Feb 2026 04:23:21 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152462
IP address blocks:        157.15.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl
                          rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 03:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5
        Validity
            Not Before: Feb 27 04:23:21 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a43a0c-2fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a2:b0:23:3f:2c:db:b6:8c:4a:b8:3c:f1:53:
                    60:cf:09:97:c6:a7:38:c6:8a:a4:74:4c:2a:5e:aa:
                    9e:c2:9e:33:8a:30:8f:a1:21:40:7a:be:7f:26:04:
                    ad:54:00:0e:2c:f4:4b:ee:ee:67:54:3a:ff:97:83:
                    d9:b9:d9:b9:e0:eb:d5:ea:62:36:6f:4f:37:e6:16:
                    43:02:08:b4:c4:27:3f:a5:15:d4:cd:00:ef:41:ae:
                    3b:a7:5e:cf:ee:76:18:b2:bc:f8:aa:e2:47:bb:97:
                    a1:f5:8e:f6:4a:0a:27:5b:8a:74:55:ad:35:86:f2:
                    9d:69:7d:4e:2c:89:bb:95:cc:81:d5:eb:80:ce:f2:
                    e2:24:20:43:67:b0:f0:9a:be:8f:64:d5:9d:76:6d:
                    65:14:49:04:20:61:66:ff:72:be:94:7a:fb:29:89:
                    8d:2a:d3:a2:3b:3c:a7:8a:be:01:32:ea:0c:5c:20:
                    cc:a6:f4:17:d1:ef:94:4a:a5:a3:e1:72:3f:2a:d1:
                    4d:df:cc:5f:22:f1:c9:01:14:b5:52:3f:54:c7:10:
                    db:8f:2a:05:60:8b:a2:f2:a2:0d:1c:98:00:60:8a:
                    4e:0e:90:7c:4c:d2:45:3a:eb:23:d7:da:e1:31:c5:
                    a3:41:16:89:00:1d:2d:a0:b5:7d:e5:3a:8b:70:a4:
                    9c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0C:96:1A:B5:0B:FD:29:29:26:82:4A:D2:EF:B9:B6:FE:AE:34:F6
            X509v3 Authority Key Identifier:
                keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/A2516E42DE4511EF8C37E320C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:14:ef:fe:83:9a:9d:80:be:c1:3c:3b:aa:8c:88:de:ae:9c:
         a3:c3:61:25:45:c4:61:56:6b:a4:f1:d6:ff:ce:6e:32:5d:4a:
         a4:d6:c7:a5:d7:24:3a:1b:f7:18:38:20:96:ec:6a:8e:87:67:
         d8:45:42:16:3d:8c:f5:a5:79:a3:f4:15:89:de:ea:f7:10:31:
         24:47:d2:27:9b:ca:4b:22:1e:f4:33:c4:f2:d1:ee:e0:a2:73:
         3f:25:dc:d8:fe:7a:05:26:5d:45:28:31:d7:84:49:a2:46:d0:
         0f:07:38:dc:5d:25:d1:83:82:2e:c1:93:6b:a2:29:79:0c:40:
         eb:36:ce:01:e1:23:27:16:7a:e4:63:b0:71:37:20:c0:6d:87:
         2c:71:11:35:9b:45:78:3e:5b:e1:02:9b:a2:5c:26:cf:f3:3c:
         3f:e5:b0:19:02:56:99:f0:3e:c9:94:f9:e3:1e:cf:40:a5:ed:
         e2:42:40:4e:ba:c6:a8:0c:32:6f:90:36:f8:a7:df:2d:d3:52:
         24:b2:53:dd:ef:d4:5e:22:f4:5b:86:00:8e:76:42:24:cd:ef:
         dc:a7:a4:bf:34:c3:a3:f7:6c:05:a4:bc:b8:86:db:40:06:a4:
         53:f1:58:86:85:9f:f2:08:54:7e:aa:41:1d:0f:7a:64:b3:d7:
         90:b6:47:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:30:27 2026 by rpki-client