Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8E018B30D05611F0A517D12AC4F9AE02.roa
File:                     8E018B30D05611F0A517D12AC4F9AE02.roa (raw, json)
Hash identifier:          3o4eLQQgCuvbHfOInmt6QiD6MsZZKAjvEcfPJXshL+g=
Subject key identifier:   4E:A8:43:D3:F6:F7:1C:7A:B4:3E:72:A7:D5:F8:6E:D2:EC:70:6B:91
Certificate issuer:       /CN=A91100B2/serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Certificate serial:       93
Authority key identifier: BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8E018B30D05611F0A517D12AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:42:30 +0000
ROA not before:           Thu 04 Dec 2025 03:37:29 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     3491
IP address blocks:        79.109.232.0/22 maxlen: 22
                          79.109.232.0/24 maxlen: 24
                          79.109.233.0/24 maxlen: 24
                          79.109.234.0/24 maxlen: 24
                          79.109.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
                          rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91100B2, serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
        Validity
            Not Before: Dec  4 03:37:29 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a48896-2289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fb:30:2d:82:69:e1:d3:0c:69:02:74:77:18:
                    2d:b9:68:25:f1:51:03:6c:dd:01:eb:3f:c1:0b:47:
                    35:44:48:5f:62:b4:a5:3c:30:0b:8d:a5:4f:f0:a3:
                    4f:76:34:01:41:5d:8a:06:cb:65:09:6a:8b:a6:73:
                    72:5d:7d:f8:fa:63:5d:e3:5e:2c:32:fd:9b:ca:bc:
                    3a:69:dd:bc:fc:c4:a0:1e:28:fa:40:a2:cb:82:cc:
                    b0:4d:4f:60:29:32:19:b2:a7:36:0a:42:b0:4b:27:
                    80:1e:a0:1e:0b:b6:74:0f:22:c2:ba:ae:4d:53:20:
                    03:03:d7:73:9a:a3:5a:f5:bf:c1:92:ae:54:30:43:
                    88:e4:67:1f:b7:0b:c7:a5:2b:ff:31:47:81:f4:65:
                    22:f1:8b:6f:c8:16:9e:21:7a:d5:12:c0:ca:0b:bc:
                    ed:ee:e8:f1:b8:e2:34:6e:3f:35:0a:b6:28:c0:ac:
                    e3:c5:74:8d:d5:61:c9:de:65:9c:0c:64:f5:57:a7:
                    57:d6:39:75:7d:8c:69:52:d2:31:18:5b:cd:d2:af:
                    52:d4:08:17:9e:70:54:17:c4:62:99:f5:74:ee:c3:
                    a2:24:e9:bf:24:d9:ea:94:91:ff:0b:44:d4:76:f5:
                    8d:6f:28:d7:3c:80:5c:8d:ae:40:b3:8b:a5:fb:30:
                    43:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A8:43:D3:F6:F7:1C:7A:B4:3E:72:A7:D5:F8:6E:D2:EC:70:6B:91
            X509v3 Authority Key Identifier:
                keyid:BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8E018B30D05611F0A517D12AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.109.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:70:10:15:16:b5:a6:cc:3a:74:e8:53:4a:1b:22:4a:3a:00:
         9e:e2:c3:b4:8b:ed:0d:3e:ff:35:2e:33:37:31:95:f1:26:9e:
         d0:4f:2f:4e:f7:27:6a:63:f0:18:fe:7f:e0:62:34:67:5d:67:
         a7:5b:78:18:9a:94:98:56:55:f2:84:9e:25:0f:d7:b2:f9:25:
         fd:23:75:c9:f1:d2:b2:59:27:f5:e5:57:22:e7:b0:20:ef:04:
         23:77:0b:a7:b4:b2:61:55:bd:3c:fa:13:65:3e:da:b0:ac:79:
         56:d1:72:a6:42:58:4b:12:5a:52:be:fd:ee:da:1c:be:1b:08:
         25:a7:ec:e8:1d:c0:01:56:13:dc:25:74:e9:01:f6:ec:b6:a7:
         f4:05:1a:36:e8:b1:07:39:24:49:83:e5:33:fb:ab:86:94:3c:
         19:80:ae:69:10:64:a7:87:dc:bb:a2:04:29:2b:b2:11:ac:f5:
         f9:97:73:9b:52:0b:51:da:a6:67:63:c5:c9:3a:86:f5:eb:a8:
         98:46:16:b4:c3:86:e6:ca:82:9c:49:30:bd:e3:eb:e4:33:02:
         07:b1:cd:f7:64:74:1a:f6:cd:8b:8d:66:63:c2:dc:4d:93:0f:
         6e:5f:e6:07:52:bf:aa:54:ca:cf:76:44:fa:d7:0b:92:88:cb:
         5f:8a:57:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:08 2026 by rpki-client