Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/95F5B186AA8A11F1B3B3CE7F6C11F970.roa
File:                     95F5B186AA8A11F1B3B3CE7F6C11F970.roa (raw, json)
Hash identifier:          CoTZ02xGIC5KTyTt7JjWnct1rV+9ZXxo1qq4eTQdz4Y=
Subject key identifier:   12:91:B1:62:90:3D:D8:68:F2:F2:46:52:94:43:09:5B:FC:73:14:1F
Certificate issuer:       /CN=A91556B2/serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088
Certificate serial:       0D
Authority key identifier: DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/95F5B186AA8A11F1B3B3CE7F6C11F970.roa
Signing time:             Mon 07 Sep 2026 07:08:19 +0000
ROA not before:           Mon 07 Sep 2026 07:08:19 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     138542
IP address blocks:        79.109.0.0/24 maxlen: 24
                          79.109.2.0/23 maxlen: 23
                          79.109.7.0/24 maxlen: 24
                          79.109.8.0/21 maxlen: 21
                          79.109.16.0/20 maxlen: 20
                          79.109.32.0/19 maxlen: 19
                          79.109.64.0/18 maxlen: 18
                          79.109.128.0/18 maxlen: 18
                          79.109.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl
                          rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 09:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91556B2, serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088
        Validity
            Not Before: Sep  7 07:08:19 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9e62e2-a614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:36:30:10:09:76:78:5c:a4:b3:29:b1:4a:
                    4f:86:40:b2:81:e7:83:9c:08:67:42:74:f9:60:67:
                    e8:fb:50:0d:1f:eb:60:ce:53:dd:be:9f:be:44:7b:
                    ce:b5:2d:24:be:1b:3f:1d:e9:1e:35:59:3d:cd:2c:
                    74:ee:c3:8b:59:7f:2e:95:39:25:c9:f6:4f:b2:da:
                    43:b2:a2:dc:7e:d6:f5:66:99:aa:a2:52:6e:ec:19:
                    9e:0a:02:74:6d:92:e6:f4:4a:b0:30:75:23:47:73:
                    13:22:72:d8:6d:4e:70:e7:f1:d5:e3:54:b0:e6:30:
                    68:c6:81:a3:55:66:f7:54:95:05:96:4c:cb:43:3f:
                    0f:d1:85:3c:63:7a:0c:07:4f:d2:05:02:31:c3:c9:
                    43:d1:bb:14:f2:57:ac:50:8c:a1:db:54:fa:68:0e:
                    90:af:19:ff:6c:10:dc:21:cd:50:df:2e:ea:0b:1a:
                    12:73:8e:1b:18:74:72:ef:49:24:4b:b4:b0:06:1d:
                    9d:f4:37:f8:a1:da:73:81:3f:ff:8f:ee:a7:94:bd:
                    5e:93:07:cf:5c:2b:3d:74:58:93:17:c7:07:cc:b5:
                    97:d1:da:d9:91:ed:a7:96:23:48:e1:e4:0e:94:2b:
                    cb:7b:21:9e:8a:dc:cf:63:44:a1:6f:82:b2:03:97:
                    ec:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:91:B1:62:90:3D:D8:68:F2:F2:46:52:94:43:09:5B:FC:73:14:1F
            X509v3 Authority Key Identifier:
                keyid:DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/95F5B186AA8A11F1B3B3CE7F6C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.109.0.0/24
                  79.109.2.0/23
                  79.109.7.0-79.109.223.255

    Signature Algorithm: sha256WithRSAEncryption
         76:36:ad:50:13:86:90:02:29:0a:74:33:1a:84:48:9a:9d:e5:
         fe:76:f3:03:8a:ed:41:ec:84:d5:33:56:d8:ee:d1:3c:15:2b:
         28:12:f2:43:f6:5d:69:88:de:a6:1e:70:ea:eb:e9:13:9c:10:
         f6:cc:1d:33:4b:8b:11:e1:fb:da:bb:0b:3a:ac:26:c1:0c:1d:
         2e:9b:33:0f:95:03:46:3d:e3:35:db:d3:b5:52:0e:07:cf:3f:
         af:9a:6f:e2:7e:95:65:cf:0a:18:e1:41:f6:14:98:ab:cd:0a:
         f6:52:84:b4:62:01:4f:93:8b:c8:3d:c9:11:83:89:3c:94:e1:
         ee:37:b4:b8:2e:49:7c:48:64:51:32:8a:46:15:ca:61:1f:80:
         6f:45:42:70:1c:fa:99:23:52:7d:68:92:3d:73:89:99:6a:b2:
         b0:f1:07:e9:d6:15:60:4c:9f:7c:cf:01:b3:04:8a:35:d5:1e:
         b6:e8:ca:37:5c:cc:15:bd:86:13:21:1e:10:af:31:5c:4d:c9:
         3f:a8:f0:20:ed:94:44:eb:b3:4a:bc:0d:3e:8c:12:8a:fa:c9:
         95:32:6a:c1:85:ed:fe:8f:f6:99:2a:e3:1e:a4:68:62:01:38:
         06:1b:a7:e0:fe:83:20:03:e8:ab:df:c4:d0:f6:f0:31:b0:2c:
         0f:1c:12:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:37:17 2026 by rpki-client