Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/09E42D1E921B11EF829E0041C4F9AE02.roa
File:                     09E42D1E921B11EF829E0041C4F9AE02.roa (raw, json)
Hash identifier:          SDwSi/u1Twlfmf5SHraNC99SEJgc829wXFAGy78aUeI=
Subject key identifier:   BA:B5:E7:06:16:E2:50:38:71:A9:F8:43:91:D6:70:41:40:36:F0:2D
Certificate issuer:       /CN=A91C6CAF/serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9
Certificate serial:       0191
Authority key identifier: 9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/09E42D1E921B11EF829E0041C4F9AE02.roa
Signing time:             Tue 27 Jan 2026 03:23:09 +0000
ROA not before:           Tue 27 Jan 2026 03:23:09 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     152334
IP address blocks:        157.10.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl
                          rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 03:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6CAF, serialNumber=9F02DA3AB5FB45317507C48021CE0A8B937255C9
        Validity
            Not Before: Jan 27 03:23:09 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69782f9d-2eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6a:da:d9:1c:e6:f9:4d:2f:a9:00:1a:e4:64:
                    43:be:04:06:e5:02:f5:5a:3e:d3:ce:8e:dc:36:26:
                    38:85:2e:27:1a:09:5d:23:9d:63:00:d7:c6:de:b7:
                    e0:11:21:a5:93:7a:12:68:6f:64:ec:f8:90:1e:11:
                    bd:14:19:30:89:35:52:89:e2:87:98:c1:63:e6:63:
                    88:ad:aa:a3:2d:e0:82:fb:35:96:b5:68:33:00:ba:
                    3a:1c:e4:f2:0f:ae:32:f1:4c:fc:12:3e:3e:83:ed:
                    5e:ee:e1:ce:c3:b7:6c:af:27:fb:65:de:5a:07:db:
                    8a:14:9d:15:a6:89:24:aa:bb:2f:9a:33:c7:d3:7a:
                    33:27:4e:96:91:59:2b:30:2a:9a:1b:0f:3e:31:ae:
                    47:e1:fe:06:d6:48:74:f2:4e:eb:69:7c:9b:fe:8d:
                    9e:bd:07:b7:8e:11:e6:dc:d9:2c:a3:10:9d:55:56:
                    d1:e3:cb:ec:24:a9:dc:32:df:cb:7a:89:83:7a:00:
                    35:ef:87:22:f9:5f:94:62:eb:1b:ab:3a:84:fd:a4:
                    ca:cf:fb:87:f4:81:fd:d2:44:2d:99:58:4c:86:a3:
                    96:75:18:8b:69:2f:cd:84:72:06:26:10:a2:00:3b:
                    4f:35:fe:60:5b:62:71:ef:68:70:17:7e:e5:52:f0:
                    ce:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B5:E7:06:16:E2:50:38:71:A9:F8:43:91:D6:70:41:40:36:F0:2D
            X509v3 Authority Key Identifier:
                keyid:9F:02:DA:3A:B5:FB:45:31:75:07:C4:80:21:CE:0A:8B:93:72:55:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/nwLaOrX7RTF1B8SAIc4Ki5NyVck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nwLaOrX7RTF1B8SAIc4Ki5NyVck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6CAF/F3E0FAE4B6F411EEAC203810C4F9AE02/09E42D1E921B11EF829E0041C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:8b:f4:76:22:a6:be:56:99:0f:c3:5a:66:17:0f:c0:c9:9e:
         26:42:69:be:7b:30:8e:e8:ce:86:99:77:40:c0:7a:93:ee:9c:
         cc:ad:dd:ea:06:eb:46:3e:af:9c:c6:eb:4a:fb:f2:48:25:0c:
         13:4e:e1:8e:e7:f6:5b:09:ff:fe:ca:80:44:e8:76:e0:91:da:
         61:3b:cd:e3:8f:99:c4:e3:6e:d8:46:be:6a:58:51:e4:58:ea:
         a2:a8:86:50:9a:7f:0d:8f:38:20:45:9f:bf:c7:f9:13:55:9b:
         6c:a5:72:2c:88:eb:e5:5c:0a:a0:de:fa:14:98:a6:5a:3e:ff:
         48:d9:00:41:af:fd:e8:42:32:c4:0e:a5:8d:4c:60:c9:5e:b6:
         4e:27:67:2d:29:12:7c:83:e7:9d:f5:7c:64:8f:82:9c:bf:86:
         d3:da:d5:3a:8e:aa:85:a3:0b:6d:3c:10:34:ae:11:3f:21:b4:
         9e:e3:49:d4:52:ce:61:b3:86:79:10:81:69:ee:52:bd:3c:68:
         19:ee:1e:83:aa:58:26:ae:58:24:27:0b:97:b5:38:19:2f:b4:
         8c:c3:11:5e:47:8f:5d:05:27:b7:58:75:7e:00:d7:ef:1a:11:
         56:1e:4f:f3:69:26:b5:ce:5e:2c:ac:c2:40:ba:c4:06:94:83:
         49:ac:0a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:35:30 2026 by rpki-client