Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/9D232386DA5A11F08EBD209195D3641D.roa
File:                     9D232386DA5A11F08EBD209195D3641D.roa (raw, json)
Hash identifier:          QOzthGopxBzd3k4toAQMU4imXtsyINBxu6ucmSP2zFQ=
Subject key identifier:   64:11:50:42:1E:9D:99:E3:DC:3B:3E:44:89:76:26:FB:0E:E8:DA:7F
Certificate issuer:       /CN=A91519CC/serialNumber=1B3683525944774388853090D1005BB51552246D
Certificate serial:       35
Authority key identifier: 1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/9D232386DA5A11F08EBD209195D3641D.roa
Signing time:             Mon 02 Mar 2026 13:42:09 +0000
ROA not before:           Tue 16 Dec 2025 08:38:37 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154434
IP address blocks:        144.79.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl
                          rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91519CC, serialNumber=1B3683525944774388853090D1005BB51552246D
        Validity
            Not Before: Dec 16 08:38:37 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a593b1-acb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a4:8d:3e:cc:5e:a7:aa:29:74:34:af:ab:79:
                    19:02:f3:c7:9f:f7:7e:dc:09:cf:5c:04:e5:55:b4:
                    16:06:3e:95:3d:c1:96:49:4e:36:61:1f:df:4b:c1:
                    11:e2:de:37:58:d2:97:9e:52:8f:40:e2:74:16:28:
                    e9:aa:58:38:2b:70:be:b8:e6:d9:a1:f8:a4:d5:a8:
                    3f:df:d5:d8:ac:2a:5f:02:f0:b4:d4:78:ec:e9:71:
                    7e:c2:e0:6a:f7:fa:dd:c1:f0:8d:90:ee:58:25:d9:
                    44:e2:6d:b7:2e:93:c8:a6:15:f4:1e:01:f7:32:be:
                    d2:95:21:6f:76:ca:64:d7:6b:ae:cb:92:ee:65:19:
                    dc:6d:dd:e1:25:4c:fc:d3:d1:1d:6e:23:5c:d4:cf:
                    3b:b2:10:c0:74:f5:ec:d5:89:a3:22:92:9f:ed:de:
                    d7:de:d3:45:c3:72:c9:d9:16:4b:be:af:6e:db:9c:
                    30:61:26:33:f0:3a:55:58:df:16:c1:4e:bd:e4:f5:
                    60:b8:3b:68:73:0d:a0:f4:79:5c:d4:f6:74:a0:a2:
                    ba:12:e5:49:03:21:7c:57:f6:70:83:b3:1e:4b:93:
                    33:2e:8e:d0:26:27:1b:c3:29:02:d5:89:e3:e3:e9:
                    99:0c:a3:b3:28:e9:ed:b3:99:be:fe:a6:78:06:ad:
                    9d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:11:50:42:1E:9D:99:E3:DC:3B:3E:44:89:76:26:FB:0E:E8:DA:7F
            X509v3 Authority Key Identifier:
                keyid:1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/9D232386DA5A11F08EBD209195D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:dc:d2:9f:75:99:14:13:d5:81:13:be:0e:32:c0:f8:1a:7a:
         0a:b4:3a:41:42:37:dd:d5:5c:06:8a:fb:aa:4f:90:c4:5e:33:
         26:63:10:e1:9e:c6:60:6f:d8:76:fa:52:eb:d7:ee:0a:48:6d:
         49:f9:9a:8d:6b:94:ee:81:22:0b:74:ce:15:ec:7a:67:c1:27:
         94:85:8e:0c:03:b4:07:86:bb:83:af:52:97:5f:95:38:90:5f:
         2f:b7:64:2f:27:e5:85:9a:6a:35:59:a3:9d:e6:af:b8:05:21:
         98:22:9d:7b:c7:cf:df:c7:c5:9d:b9:bd:0e:b5:33:bf:9a:23:
         2c:3c:35:e6:92:77:a5:58:b7:47:ef:5e:ee:c0:ab:4a:bb:2a:
         b5:af:e8:d3:a6:59:63:7c:09:fd:8c:06:6e:25:2a:07:cb:ad:
         0c:69:4f:2f:41:b8:47:d9:50:dd:9c:4f:07:c4:0b:88:2c:9b:
         98:29:ed:c7:b4:91:98:7c:7c:44:f2:68:b0:e3:47:44:67:06:
         01:6f:85:5a:a7:4c:09:75:16:0a:22:1e:6f:f3:51:79:a3:2e:
         d4:8c:20:ca:ca:08:a6:37:18:a7:3f:c7:01:e9:8b:51:98:4b:
         37:d5:c5:06:a6:1b:52:07:16:a1:94:d3:9b:32:a5:09:8e:9f:
         a0:de:b6:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:41 2026 by rpki-client