Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/04594232DEA011EE91181415C4F9AE02.roa
File:                     04594232DEA011EE91181415C4F9AE02.roa (raw, json)
Hash identifier:          c8YRBXzB3c5ZciuZ47whRGlvNacQEORBuyS+ujABTZk=
Subject key identifier:   E9:3B:38:6F:CF:AC:44:93:0E:44:F9:CB:23:D6:2C:62:73:7A:64:B9
Certificate issuer:       /CN=A91C7B15/serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584
Certificate serial:       0275
Authority key identifier: 58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/04594232DEA011EE91181415C4F9AE02.roa
Signing time:             Tue 14 Apr 2026 17:21:03 +0000
ROA not before:           Tue 14 Apr 2026 17:21:03 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     37988
IP address blocks:        195.114.14.0/23 maxlen: 23
                          195.114.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:46:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B15, serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584
        Validity
            Not Before: Apr 14 17:21:03 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69de777f-1218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ba:11:06:20:aa:f3:46:58:c4:9c:63:fc:dd:
                    7e:c9:5e:ca:d3:02:76:a2:d8:1b:d8:12:94:a2:43:
                    c6:13:e0:a9:61:b1:55:fc:a4:2e:bb:7d:e7:41:bf:
                    87:f8:11:80:2d:72:a8:44:b3:69:f2:25:a7:21:91:
                    72:f7:c0:0a:e5:7d:bd:d1:59:96:39:25:d0:9e:be:
                    33:13:c3:a0:4c:79:2b:46:0a:8b:c8:ba:4f:e2:5f:
                    92:51:ae:3d:8d:b4:dd:e9:1b:14:1b:07:ef:24:1d:
                    72:7f:01:e2:54:25:34:92:ee:e7:9c:6e:a1:81:89:
                    73:bf:de:d2:10:20:61:ca:18:52:34:7a:7f:8b:9e:
                    be:96:1d:4b:2a:44:4f:c5:25:e8:42:03:85:b3:14:
                    ed:5f:d7:23:9a:67:f9:b5:10:3c:39:a4:ab:75:3a:
                    3d:a5:10:24:10:98:76:d4:d8:4f:12:ca:89:da:47:
                    c6:d9:ef:56:68:4f:0b:a2:b3:23:f8:1f:21:6b:7b:
                    ef:47:37:45:21:a7:2f:98:51:d4:ad:8a:a0:2b:ad:
                    87:38:b7:33:3a:c3:1c:f2:0d:99:21:8a:0e:da:0b:
                    80:d8:aa:3b:9b:eb:00:cc:bf:0a:27:1b:71:02:4a:
                    10:cc:bd:c7:0f:5f:d4:ae:aa:75:4e:49:12:88:58:
                    f6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3B:38:6F:CF:AC:44:93:0E:44:F9:CB:23:D6:2C:62:73:7A:64:B9
            X509v3 Authority Key Identifier:
                keyid:58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/04594232DEA011EE91181415C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.114.14.0/23
                  195.114.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:c8:45:51:87:70:f5:b0:43:7b:b9:f8:09:e9:a3:1f:28:fa:
         17:a2:4f:0b:ae:8f:58:e1:d7:15:a2:f3:72:5e:23:0e:50:67:
         1b:c7:0f:8d:4b:14:c6:f8:4a:ed:36:e0:9a:3d:69:3e:fc:86:
         21:ca:16:7f:f7:f4:5e:de:31:2c:24:76:e2:9e:bc:d9:07:20:
         fb:b9:3c:27:18:01:9a:77:e9:b1:06:d9:a8:4c:8f:7f:29:29:
         0b:ce:dc:3d:10:af:85:57:3e:26:e2:b4:38:25:75:18:ce:e9:
         74:02:69:7f:e6:63:3c:43:fb:b6:36:eb:d4:a4:56:31:c5:1c:
         ca:81:ce:18:b5:77:c9:02:68:d3:92:52:59:cd:93:06:61:c0:
         5f:5f:5c:af:e3:d7:c0:50:97:23:6b:71:7a:c5:45:93:b7:ed:
         6b:fb:b4:27:80:9b:a9:36:86:09:52:dc:ce:fb:0c:26:f0:13:
         6b:d6:70:d3:9d:9c:7b:d7:e6:09:13:2f:86:88:65:e3:76:b9:
         45:e9:13:ea:c5:3d:c0:5b:a1:7d:91:8c:7d:d7:b7:b6:2a:3a:
         0e:d7:ca:1d:05:04:84:64:ec:ba:58:ef:c0:5b:7c:e5:e0:f6:
         72:55:2b:b8:3f:26:06:71:55:9a:62:50:46:10:3c:69:be:a9:
         e3:cf:83:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:37:02 2026 by rpki-client