Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/79734D6AB9EB11F095C2C735C4F9AE02.roa
File:                     79734D6AB9EB11F095C2C735C4F9AE02.roa (raw, json)
Hash identifier:          CYXzP8o6swk/peEjdB2z3uAC7jwSVj36GUM/F+voWoY=
Subject key identifier:   5E:B8:59:4D:1F:3C:3C:59:AA:BA:FA:68:62:2E:A9:62:7F:96:77:F0
Certificate issuer:       /CN=A91BFE76/serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
Certificate serial:       B5
Authority key identifier: BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/79734D6AB9EB11F095C2C735C4F9AE02.roa
Signing time:             Sat 19 Sep 2026 07:56:43 +0000
ROA not before:           Sat 19 Sep 2026 07:56:43 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     154279
IP address blocks:        138.252.8.0/23 maxlen: 23
                          138.252.8.0/24 maxlen: 24
                          138.252.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl
                          rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE76, serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
        Validity
            Not Before: Sep 19 07:56:43 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6aae403a-8d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fb:98:1a:90:0a:de:77:56:fe:50:07:87:40:
                    e3:75:89:a2:2e:96:e8:7d:db:6a:b5:ca:30:86:66:
                    89:36:06:35:e5:2b:b9:ca:97:58:4f:6d:52:c4:f6:
                    43:56:bf:bd:d0:1f:68:3a:e8:fd:e6:fb:d6:6d:19:
                    2f:4b:23:da:9b:9b:c2:6f:89:d8:4a:8f:0e:0e:01:
                    7b:ff:dc:59:ed:f5:ec:89:50:dd:6c:4a:38:8f:71:
                    4a:2a:b5:da:b0:b8:d6:3a:f1:d6:2e:c0:0a:51:75:
                    98:b8:70:78:ab:cd:b9:d0:8f:f6:0d:50:73:7b:e3:
                    93:41:a8:ab:08:d0:c5:fb:34:4c:47:65:dd:7d:2f:
                    d4:b9:d7:6f:14:84:dc:c3:fb:7d:8d:29:a2:6d:a1:
                    db:e8:48:5c:dd:5f:3b:f2:1c:91:6c:59:ee:4d:ac:
                    ca:4a:88:f5:c8:8a:8d:84:80:72:d5:97:e5:a1:03:
                    3d:fd:f6:48:44:9d:80:c1:f8:ed:ad:1f:e8:f1:1d:
                    2a:e4:84:a6:0d:2d:39:5c:85:4c:69:65:7b:70:dc:
                    b1:69:83:37:5f:f7:b0:f0:a8:64:eb:9b:24:7d:a0:
                    9a:26:db:96:e0:8f:31:d8:4d:d1:0e:cd:bb:95:0e:
                    a5:e0:db:ee:9b:9c:d0:30:c2:aa:66:14:73:a9:cc:
                    dc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B8:59:4D:1F:3C:3C:59:AA:BA:FA:68:62:2E:A9:62:7F:96:77:F0
            X509v3 Authority Key Identifier:
                keyid:BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/79734D6AB9EB11F095C2C735C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:4b:8f:58:5e:21:e6:86:f5:e2:9f:11:f4:5c:a8:01:11:3f:
         0b:93:4e:30:42:7c:bd:4c:10:1b:0f:ab:66:33:79:ad:01:1f:
         20:a9:84:cb:ca:a7:d3:c7:ac:53:af:62:aa:48:be:ce:15:37:
         de:c5:64:9c:bc:b8:df:b5:10:3a:9d:13:1c:e4:8f:c4:b4:19:
         8e:a6:f3:0f:a2:8e:55:8f:5a:d7:49:54:f5:bb:ce:37:71:8b:
         be:2b:0d:6e:3d:87:3b:8d:7b:df:a2:99:43:0b:b8:6d:5d:6f:
         8f:90:c4:72:fd:b2:72:26:b6:21:d5:04:2b:79:89:e5:6b:13:
         07:aa:fe:72:4d:a8:32:42:f7:0a:22:e7:31:27:92:b7:76:00:
         ee:2f:a0:5d:16:05:ed:94:38:33:17:0f:cb:8e:b2:b9:f1:b8:
         84:38:28:d0:57:65:c7:48:fd:09:5e:c8:c6:a9:49:da:b9:0c:
         ca:d8:62:d8:42:e2:1e:e9:7a:a6:46:bf:fe:10:2d:be:55:ee:
         07:9a:a0:a7:1d:bc:fb:1d:1d:ee:96:b0:79:5a:57:90:80:9a:
         97:17:09:d3:39:c5:a7:71:49:e5:a2:05:73:5f:1f:c9:8c:84:
         8c:80:6c:f5:8f:e5:73:e1:ad:96:4c:7b:86:90:39:b0:58:e8:
         2f:89:45:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:51:01 2026 by rpki-client