Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/C7990BE8AFF411F0B040B258C4F9AE02.roa
File:                     C7990BE8AFF411F0B040B258C4F9AE02.roa (raw, json)
Hash identifier:          Wq3EKlnp72r4x00pZr4LkZ0amG0X3r7k+6EpCz110VM=
Subject key identifier:   0B:25:47:64:60:C7:DF:D0:4A:C0:D8:44:27:0E:08:EB:DF:F6:93:90
Certificate issuer:       /CN=A91100B2/serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Certificate serial:       1E
Authority key identifier: BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/C7990BE8AFF411F0B040B258C4F9AE02.roa
Signing time:             Thu 23 Oct 2025 09:44:30 +0000
ROA not before:           Thu 23 Oct 2025 09:44:30 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138542
IP address blocks:        79.109.232.0/21 maxlen: 21
                          79.109.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
                          rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 19:45:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91100B2, serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
        Validity
            Not Before: Oct 23 09:44:30 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68f9f8fe-72a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:34:fe:68:f4:ac:34:a7:ae:17:7e:be:77:8d:
                    40:da:74:d3:c8:41:88:95:7f:96:33:94:78:1d:14:
                    5e:fa:55:49:d9:dd:90:6c:00:10:17:e6:1d:4a:b9:
                    05:c2:17:c2:8a:48:f6:9f:e7:be:84:71:28:19:f3:
                    6c:9c:b1:aa:86:52:89:38:19:8f:b0:64:29:83:79:
                    4d:2d:9b:0d:39:87:ff:ae:7a:c9:7e:35:23:89:64:
                    83:56:db:0e:d1:32:c7:06:ba:66:36:3f:6e:9b:41:
                    f8:3c:aa:a2:74:ee:e9:2a:dc:ef:70:29:a8:b9:35:
                    fe:d0:10:55:b8:7b:fa:cf:fd:ec:f0:3a:ae:24:68:
                    89:43:84:96:43:04:e3:4e:b2:6a:ab:12:47:db:b1:
                    7d:21:a7:5c:db:0b:10:f3:25:c6:31:e4:bf:f8:45:
                    fe:ba:37:5e:4b:c5:42:e3:00:81:8f:84:62:33:aa:
                    0c:30:97:1e:1e:73:b4:72:5e:3a:08:0f:95:94:ae:
                    96:d0:e9:c6:5b:da:22:1e:d4:86:51:76:9f:79:2b:
                    95:28:cf:bf:46:49:69:ef:41:8e:7e:08:52:a0:3a:
                    20:3e:bc:7f:86:16:ce:0e:f5:06:b2:7a:ca:58:ae:
                    81:d7:d8:d1:49:d4:5c:a5:2e:cd:6b:56:79:b8:04:
                    7c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:25:47:64:60:C7:DF:D0:4A:C0:D8:44:27:0E:08:EB:DF:F6:93:90
            X509v3 Authority Key Identifier:
                keyid:BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/C7990BE8AFF411F0B040B258C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.109.232.0-79.109.247.255

    Signature Algorithm: sha256WithRSAEncryption
         ca:6b:fc:1d:67:96:1b:a6:7f:00:93:65:6f:fb:55:16:5c:2a:
         8a:d0:e0:de:91:2a:48:41:5c:f5:42:cf:dc:0a:4e:ea:77:a7:
         77:61:a4:f3:e2:04:f0:35:0a:0c:f8:25:ae:2c:35:be:48:d8:
         73:28:99:2d:ef:d4:ab:c7:04:06:10:e4:67:4d:71:48:45:08:
         b9:8a:9c:b2:89:35:ec:85:48:36:6c:39:5f:ac:c2:45:28:f8:
         a9:0a:f2:c1:7a:15:5f:fe:a8:ca:75:08:ac:84:b9:00:27:25:
         6a:3d:38:22:03:56:a0:6e:47:cb:d7:fe:2e:44:89:83:f1:a5:
         e3:18:5b:76:5f:11:28:d9:c3:b4:43:d3:bb:15:83:02:fb:f6:
         db:43:0a:f2:aa:19:f7:ba:38:85:cd:2e:59:37:c6:af:2e:38:
         b7:17:86:4e:d8:ab:b2:38:47:52:9e:02:1f:67:1b:82:d1:b2:
         d7:9f:a6:8d:e3:1f:31:a4:11:55:e8:82:1b:fb:d6:e3:1b:b0:
         67:b5:31:72:7e:f2:ae:cd:d2:45:8b:d0:c9:35:2b:1d:13:21:
         7c:86:b4:11:0b:92:65:a1:a4:f2:2f:a3:49:db:82:54:51:80:
         40:e0:3d:1f:3e:b5:1b:a7:90:be:0c:21:90:4b:48:30:1c:09:
         34:0c:5f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:33:15 2025 by rpki-client