Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/1B16F1A0ADB511EBB5CFE734C4F9AE02.roa
File:                     1B16F1A0ADB511EBB5CFE734C4F9AE02.roa (raw, json)
Hash identifier:          VCL+P+tlT04cGlwm1f1o27ry1Et64gaCgM2IBSbvp04=
Subject key identifier:   10:23:BF:58:1D:B4:B8:F5:91:89:59:B6:13:45:F0:AA:8D:33:3D:4E
Certificate issuer:       /CN=A91AB74D/serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75
Certificate serial:       06CC
Authority key identifier: 3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/1B16F1A0ADB511EBB5CFE734C4F9AE02.roa
Signing time:             Thu 14 May 2026 22:28:46 +0000
ROA not before:           Thu 14 May 2026 22:28:46 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     142110
IP address blocks:        143.92.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl
                          rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1740 (0x6cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB74D, serialNumber=3AF09D28CA487A9326631A6BE9BD9BDBAA18DA75
        Validity
            Not Before: May 14 22:28:46 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a064c9e-0e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4d:f9:fe:9e:32:81:86:7c:9b:cb:f5:d5:59:
                    97:13:67:52:ee:c9:ed:41:ff:99:9e:40:f1:63:f3:
                    ed:33:09:fa:e2:50:93:37:d4:65:15:83:62:5a:ee:
                    a8:c7:07:b9:0b:28:fb:29:14:09:ba:17:aa:c5:bd:
                    a4:2a:a9:19:4f:0d:55:af:ea:3b:b4:53:c1:09:e1:
                    75:b7:2e:58:7d:1a:a8:b0:a9:69:06:b7:9c:cd:94:
                    25:13:40:8a:69:c2:74:8f:c7:81:cd:55:cb:6f:05:
                    50:bc:20:59:2f:02:37:d7:33:fe:4b:c3:45:37:f3:
                    b6:7d:60:7f:b0:a8:10:38:ce:77:28:b7:97:a6:ce:
                    f3:64:ec:76:3e:f4:a6:f8:6b:16:e5:06:d9:84:9f:
                    cf:3e:d0:b6:82:86:bc:fb:85:02:84:00:bb:d1:47:
                    c8:e1:44:2b:54:e2:69:b5:68:9f:72:fc:f3:1a:e1:
                    20:82:99:b6:3c:7b:77:d7:14:ed:f5:cb:67:a7:46:
                    c9:16:67:26:5d:cc:c8:b7:98:ea:c9:57:9a:83:e0:
                    54:93:97:ee:01:d3:cd:ac:29:e3:4a:74:84:ec:ff:
                    92:c1:e1:af:ac:b0:ea:cc:d1:f5:9b:f1:d2:c5:73:
                    00:a6:58:e8:cf:87:2b:88:64:0f:43:e8:b5:bc:36:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:23:BF:58:1D:B4:B8:F5:91:89:59:B6:13:45:F0:AA:8D:33:3D:4E
            X509v3 Authority Key Identifier:
                keyid:3A:F0:9D:28:CA:48:7A:93:26:63:1A:6B:E9:BD:9B:DB:AA:18:DA:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/OvCdKMpIepMmYxpr6b2b26oY2nU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OvCdKMpIepMmYxpr6b2b26oY2nU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB74D/D359568CA8DC11EB979DA50EC4F9AE02/1B16F1A0ADB511EBB5CFE734C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.92.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:76:9b:a8:ca:fa:e5:35:f0:56:dd:99:f1:0a:64:1c:d4:7f:
         b9:f8:66:78:c9:eb:94:e9:c6:7d:18:ef:93:38:f2:88:3b:66:
         0d:ab:a2:30:07:68:43:4b:b4:e0:21:4b:2f:67:50:46:cb:a5:
         90:cb:d9:87:a3:fa:8f:02:2d:ba:35:7b:e8:ce:96:6a:4d:20:
         fd:78:7c:af:61:2a:a3:6f:58:b1:01:79:40:fc:5b:75:12:76:
         80:0e:65:34:7b:e1:f6:a7:23:b5:8e:53:30:ed:c8:66:de:8f:
         25:8e:9f:7b:97:3b:2f:f3:55:f0:db:89:e5:d2:d5:69:0b:5e:
         ac:51:00:83:43:57:db:ef:c8:c5:a3:70:89:a2:e0:19:3d:bc:
         b1:9e:34:4b:5e:91:a2:3b:4b:13:f1:4d:1f:97:c5:db:3c:b8:
         23:60:4f:02:64:44:67:1f:39:e0:b1:7f:99:df:d1:4a:46:4b:
         f8:92:4f:61:35:57:9e:5f:b8:c9:e3:2f:b0:fa:28:95:38:e1:
         72:e4:c1:c3:0e:1c:df:55:ff:91:ae:16:ff:ec:99:98:90:1e:
         5a:78:c3:5c:3b:81:af:4d:94:c8:63:2a:cd:c6:68:00:fb:27:
         a2:63:e2:97:b9:b5:b5:b2:b8:f9:44:d8:85:93:7b:b6:25:9a:
         46:4c:e3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:44:03 2026 by rpki-client