Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/39044E9E58B311F084F3982DC4F9AE02.roa
File:                     39044E9E58B311F084F3982DC4F9AE02.roa (raw, json)
Hash identifier:          oj8oghJ9Y6bqzBuYhxmjs+BUoyd94rS36kWzLfbq8Ak=
Subject key identifier:   51:A9:65:66:80:FC:73:3F:96:9C:C4:85:65:5D:75:BF:80:A3:08:46
Certificate issuer:       /CN=A91B3455/serialNumber=D63B86E3CFC95563EFE7CAF0751D9840264ADA56
Certificate serial:       7E
Authority key identifier: D6:3B:86:E3:CF:C9:55:63:EF:E7:CA:F0:75:1D:98:40:26:4A:DA:56
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/39044E9E58B311F084F3982DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:55:19 +0000
ROA not before:           Fri 04 Jul 2025 08:45:23 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     13821
IP address blocks:        165.101.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.crl
                          rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 12:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3455, serialNumber=D63B86E3CFC95563EFE7CAF0751D9840264ADA56
        Validity
            Not Before: Jul  4 08:45:23 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a588b7-a05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d9:1a:93:9f:f4:86:f8:12:c4:1a:81:c7:92:
                    84:a7:74:b9:b1:bb:41:15:7e:73:df:3f:de:02:e0:
                    d6:ae:fb:9d:c6:18:25:2b:ce:97:11:e5:f0:b0:bc:
                    2d:d8:bf:3d:e5:ca:d9:7b:77:08:56:5b:c5:fd:65:
                    b7:27:a6:8a:8a:5f:71:2f:02:ce:69:98:ce:44:46:
                    28:6f:11:c1:f5:e2:b3:64:9e:3a:df:05:ee:e3:e5:
                    fe:43:15:74:02:18:62:00:98:03:c4:cf:75:4b:54:
                    c5:86:6b:84:49:02:2b:db:71:d1:91:38:e2:a6:ac:
                    ae:bb:a3:dd:1d:59:82:8b:1e:8a:96:ce:39:44:e5:
                    9a:54:f2:f4:ae:ff:65:3e:5e:ce:69:e2:05:54:e1:
                    4f:8d:29:30:e9:95:9e:56:79:e7:2f:2c:21:4e:ec:
                    7f:6f:71:54:7f:73:33:c3:a0:cb:b2:0a:8b:ab:67:
                    fd:87:33:4b:75:83:55:00:ee:7c:65:97:25:4a:e8:
                    e3:0b:41:c6:29:5d:b9:25:0b:42:c6:d4:4c:1a:7c:
                    58:c8:9e:b8:2c:39:dc:b0:41:4b:56:1e:40:e0:7a:
                    64:a8:84:f6:63:eb:11:b4:56:b3:38:22:76:4c:0c:
                    9e:18:12:16:83:c1:c8:0b:f9:dc:fa:e2:f4:d5:d8:
                    c6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A9:65:66:80:FC:73:3F:96:9C:C4:85:65:5D:75:BF:80:A3:08:46
            X509v3 Authority Key Identifier:
                keyid:D6:3B:86:E3:CF:C9:55:63:EF:E7:CA:F0:75:1D:98:40:26:4A:DA:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/39044E9E58B311F084F3982DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:45:45:37:b2:bc:47:49:2b:fe:4e:a4:96:ca:69:53:b2:01:
         fc:50:01:a6:8a:5e:6c:93:e1:a0:04:2e:04:c1:62:d7:15:02:
         1d:9e:ed:99:91:f7:15:28:fb:d7:d0:98:3e:3e:6a:9f:0e:95:
         0e:2e:dc:7c:95:9a:3b:2d:1b:33:70:6d:cd:46:9d:b3:4d:ad:
         2e:49:e2:4f:8a:54:4b:44:82:34:26:50:1a:24:07:0e:56:da:
         d0:88:a0:23:4d:8a:a1:cf:5c:28:e5:71:67:9c:a5:87:45:a3:
         00:91:f4:ef:cc:65:f1:6a:b4:21:02:dd:a0:36:67:24:8c:77:
         21:5a:53:e6:50:d7:8c:fa:2b:37:cb:f6:41:c9:75:34:ad:55:
         42:a4:3b:e2:6c:45:1f:90:99:89:57:e1:96:92:ab:e8:8a:1f:
         ad:e3:6f:b2:fc:eb:32:33:13:dc:4b:34:ae:91:55:05:83:54:
         a0:7b:df:ae:56:45:30:f5:67:8d:c7:b8:e4:2d:3d:ff:9c:75:
         b9:af:8a:aa:e2:ec:ab:83:43:64:77:e3:30:b5:c1:8d:49:21:
         99:de:13:ea:c8:b9:ea:54:33:e8:92:5b:06:d3:0f:cc:be:32:
         54:41:f3:25:6d:a8:31:b0:d7:16:73:e6:0a:d1:14:e1:cb:c3:
         05:d0:60:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:04 2026 by rpki-client