Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/E464CB9AAA8A11F1B24D5C986C11F970.roa
File:                     E464CB9AAA8A11F1B24D5C986C11F970.roa (raw, json)
Hash identifier:          dSmM9F1Tii7cBNcXMxoJVKWIXyxlBSdM3xcQ+7TeVfQ=
Subject key identifier:   33:07:85:1B:60:35:B9:D6:43:7F:17:E5:5C:08:B1:5B:E5:D9:4F:2C
Certificate issuer:       /CN=A91556B2/serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088
Certificate serial:       0A
Authority key identifier: DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/E464CB9AAA8A11F1B24D5C986C11F970.roa
Signing time:             Mon 07 Sep 2026 07:08:14 +0000
ROA not before:           Mon 07 Sep 2026 07:08:14 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     140570
IP address blocks:        79.109.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl
                          rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 09:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91556B2, serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088
        Validity
            Not Before: Sep  7 07:08:14 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9e62de-0328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:15:91:98:b5:66:4d:06:31:d0:c9:10:c7:a3:
                    aa:8c:e5:d1:5d:40:cc:74:53:1c:08:1b:0f:7e:27:
                    dc:4e:9c:09:9e:61:03:1b:92:9d:7b:51:bd:cb:7c:
                    b2:6e:e8:f2:d4:1a:f1:5d:4d:96:7e:40:b1:57:a0:
                    44:45:8a:6c:d0:47:54:0c:10:61:7d:c7:24:fa:d0:
                    96:fc:59:16:f9:d6:15:c1:42:81:9a:45:cc:ca:94:
                    39:0e:d7:f7:70:33:36:49:c3:0a:2a:4d:b7:50:31:
                    1e:14:9b:26:00:8b:5e:7c:f2:75:cd:53:14:96:8b:
                    ed:55:94:a8:8b:74:d9:88:23:c1:0b:33:9e:dd:12:
                    0e:5c:31:e6:1f:1e:7b:bd:65:98:62:f9:d1:f4:8c:
                    d9:83:1e:9d:b8:e9:af:9b:46:7f:ae:ed:f8:f8:ea:
                    7d:e9:73:c4:ab:e0:d5:51:28:34:99:74:05:d5:91:
                    f7:ef:30:b7:f4:bc:9d:c0:36:c5:aa:01:8c:13:29:
                    65:de:76:48:42:ce:bd:71:36:a3:58:73:50:1a:cf:
                    40:a0:fb:0d:bf:a1:ba:ce:9d:c0:33:61:4d:6f:c0:
                    57:74:74:2b:fd:26:fe:de:32:07:a1:4b:88:46:23:
                    12:c4:58:9d:b3:0b:f5:66:e2:5d:a5:94:7e:30:50:
                    a3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:07:85:1B:60:35:B9:D6:43:7F:17:E5:5C:08:B1:5B:E5:D9:4F:2C
            X509v3 Authority Key Identifier:
                keyid:DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/E464CB9AAA8A11F1B24D5C986C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.109.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:e3:a2:cc:58:17:68:7a:29:69:d3:1b:e5:8a:bc:7e:f5:90:
         ec:ba:23:da:3e:4b:14:ef:27:d7:18:8c:0e:76:2c:1a:15:4c:
         27:53:0f:89:18:45:be:af:50:44:90:84:8d:15:9f:d3:5d:f3:
         da:f5:dc:35:73:0a:02:d6:c2:65:56:13:dc:6c:18:d9:1b:38:
         e2:c4:51:78:28:07:2b:3a:33:55:6d:f0:1d:d0:9c:7b:ed:15:
         d1:45:a9:d1:71:10:87:fc:7e:56:3f:44:dd:b7:bb:16:1f:87:
         33:b8:f1:40:42:9f:fe:33:d5:c8:29:8f:a0:ea:3b:0b:90:f8:
         5d:0e:4f:63:9b:e1:18:b6:8b:2e:2a:6b:18:54:4f:07:ce:76:
         10:cf:ef:45:b6:c8:48:87:68:a2:df:bf:e8:94:8c:c5:e0:11:
         6b:3a:0e:e6:80:6e:41:9e:64:58:23:53:ff:81:50:ab:cc:9f:
         aa:e2:10:ad:a0:e5:24:e3:56:d7:28:58:6d:4b:45:c4:ad:4c:
         df:d8:34:06:82:9e:73:dc:10:b1:25:9f:d8:fe:68:5a:cf:95:
         a7:35:c6:5d:10:a8:29:b5:7e:a6:57:b7:cc:5a:8b:8f:f0:bb:
         87:d7:c0:d2:bc:75:d4:0e:41:5c:8c:5d:d8:6a:7c:fc:be:01:
         8d:e0:8a:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:08:12 2026 by rpki-client