Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/79734D6AB9EB11F095C2C735C4F9AE02.roa
File:                     79734D6AB9EB11F095C2C735C4F9AE02.roa (raw, json)
Hash identifier:          1fKhxfq/TrlnYFDoICW1zCAYtSl3cbSlKcSl1u+qus8=
Subject key identifier:   92:B4:C7:09:33:F8:FE:58:D5:50:50:E0:23:4D:90:F0:BB:F8:B4:65
Certificate issuer:       /CN=A91BFE76/serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
Certificate serial:       42
Authority key identifier: BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/79734D6AB9EB11F095C2C735C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:09:14 +0000
ROA not before:           Wed 05 Nov 2025 02:02:25 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     154279
IP address blocks:        138.252.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl
                          rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE76, serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
        Validity
            Not Before: Nov  5 02:02:25 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a3d80a-d9dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f7:aa:c8:ee:8b:b7:3e:5e:e8:96:c6:8a:fa:
                    83:78:e1:e7:12:c0:f6:18:91:f7:ef:a9:7b:49:9c:
                    05:a6:d7:57:9e:95:88:06:c0:1c:7c:0c:70:b5:a5:
                    0b:38:44:c3:10:c1:86:34:19:77:19:e1:b9:c5:17:
                    ca:2f:c2:ee:18:2d:92:e2:b9:c0:3f:b0:b0:b1:ea:
                    13:86:8b:29:7a:d4:93:32:34:69:df:08:3d:c9:1d:
                    71:fa:44:9c:7d:bd:40:d5:84:4c:16:01:12:ad:22:
                    d1:4b:ea:07:36:56:49:96:9d:b8:70:1d:17:77:40:
                    d9:49:16:a2:5e:8e:b6:f0:d9:fa:32:cd:99:2e:7e:
                    49:11:29:a6:96:9f:ab:cf:0c:3a:d5:5c:b8:0e:e6:
                    64:2e:11:61:1b:64:cd:62:44:40:85:9f:cd:cf:bb:
                    2b:1f:8e:db:a1:8b:9c:4d:42:6b:b4:03:8f:ec:c0:
                    93:30:fb:60:30:fa:b3:8b:ea:95:12:ac:97:15:96:
                    a0:cd:68:dd:1e:31:99:82:de:d7:2a:17:b5:4b:bb:
                    73:69:65:d6:44:b2:1c:09:48:c1:77:98:f2:e5:3d:
                    35:cc:05:bd:ee:48:ca:c7:c1:ac:ad:a2:1f:40:90:
                    09:f5:6a:4e:3d:81:39:35:5d:0a:9a:63:69:dc:99:
                    ce:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B4:C7:09:33:F8:FE:58:D5:50:50:E0:23:4D:90:F0:BB:F8:B4:65
            X509v3 Authority Key Identifier:
                keyid:BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/79734D6AB9EB11F095C2C735C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:1d:4a:bf:8b:ff:12:0f:e4:55:9f:b2:dc:21:dd:70:c8:7c:
         25:b3:74:3e:c1:0c:c6:f6:7b:31:06:fd:4f:f8:c4:43:e4:fa:
         36:f2:ec:1b:88:c3:3b:c9:c2:aa:8a:3e:d5:1f:17:56:31:90:
         30:93:dd:33:1d:a5:69:6a:fd:b9:f9:28:bb:c0:d8:46:db:92:
         fd:91:c1:82:65:b8:74:f2:22:34:1d:5f:94:37:b0:2f:f9:37:
         6c:81:40:2a:c6:c8:b3:1c:fd:58:cf:78:1c:d6:e3:5e:d2:d5:
         e0:5e:80:df:bc:be:01:e4:fc:f7:bc:28:a8:35:00:d2:f1:36:
         3d:25:fc:6c:dc:51:95:87:34:74:d8:82:28:51:09:44:f4:6e:
         5d:20:7b:04:80:2f:3e:e5:ac:34:ec:b4:bc:90:92:bc:19:e8:
         ec:46:b9:e8:d9:b2:a5:6b:ed:27:97:60:4f:f3:27:eb:38:2e:
         87:87:21:d2:92:5e:e7:2b:c2:3c:ca:9c:db:14:b5:79:da:76:
         68:01:e7:a7:51:3c:3f:06:14:92:d4:35:4a:af:fe:17:94:27:
         67:2d:96:39:10:cd:3d:13:0e:87:0f:75:b3:12:0f:b6:a5:f5:
         3c:49:3c:b8:26:0c:14:27:27:17:00:1b:73:b3:81:fd:65:7c:
         4a:4a:dd:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:06 2026 by rpki-client