Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/50AC9032C9E711F1A80DA5333C11F970.roa
File:                     50AC9032C9E711F1A80DA5333C11F970.roa (raw, json)
Hash identifier:          nGQ9BkXkDE16rHKidH2ESbQX6DqBjmUB5cX6HUL/W8I=
Subject key identifier:   25:C4:FF:63:CE:86:CB:1B:40:25:0C:F6:C9:81:89:1D:0E:D9:DE:27
Certificate issuer:       /CN=A91DA5F7/serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270
Certificate serial:       96
Authority key identifier: 98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/50AC9032C9E711F1A80DA5333C11F970.roa
Signing time:             Sat 17 Oct 2026 04:57:56 +0000
ROA not before:           Sat 17 Oct 2026 04:57:56 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     142210
IP address blocks:        151.158.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl
                          rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 08:04:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA5F7, serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270
        Validity
            Not Before: Oct 17 04:57:56 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6ad30053-c680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:38:6f:ea:a8:c4:12:d7:87:bc:2e:f9:b8:43:
                    45:54:22:18:2e:8f:0e:84:7f:ba:b9:82:2b:b7:0a:
                    17:bd:bf:77:95:e6:58:3e:c7:63:ad:ae:e6:cf:26:
                    d2:21:78:38:c3:ac:31:3c:4f:25:ec:33:6e:ea:58:
                    bb:5a:87:f5:e5:52:4c:98:5f:5f:31:6f:59:5b:1b:
                    5b:bc:48:7d:14:2c:bd:57:11:57:c3:4c:fc:2b:e1:
                    6e:63:a0:8e:20:f0:e3:e0:83:d9:04:c3:a2:10:ca:
                    cc:fd:89:19:12:f6:43:c2:eb:07:0f:1d:3d:5f:40:
                    cd:23:c8:5d:0d:1c:c5:1d:92:83:dd:bb:5c:fc:ea:
                    eb:e8:bb:e0:c3:3b:fb:6f:61:f9:fa:a9:d6:e0:63:
                    08:7a:3f:f6:af:6a:18:52:9c:e7:07:be:36:12:5e:
                    e7:3d:a4:3c:5c:03:35:19:df:65:1f:a4:af:1b:e5:
                    7d:08:d3:74:28:8e:3d:8a:69:4c:74:77:8b:bb:f2:
                    1e:83:c8:ce:53:b6:37:5b:0a:b0:51:90:ed:1d:05:
                    d7:95:2d:fe:4d:bc:a9:2f:71:7f:8b:72:f5:2c:b7:
                    78:91:36:09:44:20:f0:6e:57:81:04:61:c7:f1:69:
                    dc:19:0d:66:f3:2f:07:a3:ba:47:46:d9:17:ff:97:
                    77:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C4:FF:63:CE:86:CB:1B:40:25:0C:F6:C9:81:89:1D:0E:D9:DE:27
            X509v3 Authority Key Identifier:
                keyid:98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/50AC9032C9E711F1A80DA5333C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:63:23:0f:d4:10:03:d9:d1:38:88:da:de:19:1a:b1:a5:91:
         fb:65:35:06:15:86:b6:4d:08:aa:df:9e:61:2f:04:24:e2:9b:
         0d:46:71:9f:0f:1f:33:6b:95:b7:ea:7c:5a:b5:10:d9:7b:a7:
         84:a5:fd:05:bb:d4:b8:0a:6f:0c:0e:f1:bc:81:a3:1b:6d:18:
         c8:a2:ac:64:c8:d7:dc:f2:d4:5d:84:2d:ba:51:0f:a4:ad:5d:
         08:f9:f0:16:49:eb:4b:61:f9:4a:fe:83:ee:36:23:a5:d7:c0:
         d5:c2:4b:8c:6b:a1:87:cd:5f:92:a8:21:93:49:b0:ee:b9:1f:
         2d:82:2e:99:ad:b7:06:f0:14:69:0a:58:34:97:3d:98:d2:61:
         88:23:bc:fb:04:f9:e6:29:0e:6c:b8:d6:2e:1e:5e:d1:56:46:
         6a:10:c7:25:b5:a9:8c:92:26:77:63:c2:e7:d4:a4:e4:a1:85:
         49:e8:79:8a:17:25:cc:0a:e4:08:32:29:ee:db:b1:41:cc:ee:
         af:0b:a9:d6:37:51:35:e8:10:af:2f:2d:23:15:eb:2f:60:0d:
         72:c9:ed:7f:31:15:2e:cb:17:ef:5d:a7:65:b5:98:14:85:ba:
         2f:fa:2d:f0:9a:ce:f9:1e:f5:e2:c8:11:b7:6b:c8:35:e8:13:
         de:74:6a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:53:22 2026 by rpki-client