Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/72F76026790A11EE88F94A29C4F9AE02.roa
File:                     72F76026790A11EE88F94A29C4F9AE02.roa (raw, json)
Hash identifier:          We3atJEneJvpfEkFe24Lzcs6jwHtdo/dyS5y6FQoVH8=
Subject key identifier:   4A:28:96:FA:53:2B:03:84:F8:25:15:B1:86:57:B8:BA:27:D4:1E:2F
Certificate issuer:       /CN=A91D6DBD/serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595
Certificate serial:       01C5
Authority key identifier: 27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/72F76026790A11EE88F94A29C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:01:07 +0000
ROA not before:           Thu 05 Jun 2025 04:32:53 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     9792
IP address blocks:        192.65.182.0/24 maxlen: 24
                          192.160.169.0/24 maxlen: 24
                          192.160.170.0/24 maxlen: 24
                          198.22.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl
                          rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:15:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6DBD, serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595
        Validity
            Not Before: Jun  5 04:32:53 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a41c73-c57a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:32:ac:a8:fc:e5:1e:89:4d:85:d0:c7:76:
                    9a:0c:21:d5:b4:bb:0d:c1:23:55:38:63:f6:5f:dc:
                    f4:d3:c9:07:38:e8:bf:24:63:dd:84:95:3d:d2:82:
                    2a:a2:35:c2:fc:8e:99:cf:41:61:7a:53:5e:84:9a:
                    5b:6c:77:02:3e:7b:1b:d4:a6:1b:d7:51:e0:59:6a:
                    59:f0:88:b5:ac:a5:ab:b9:83:ff:f2:ed:3d:63:42:
                    bf:05:5a:51:80:ff:cf:fe:7f:ee:98:31:fd:fd:78:
                    b9:48:bc:5a:6c:1d:51:f5:26:3f:11:52:6e:48:85:
                    8e:9a:ef:5c:39:97:e0:5a:fb:59:ab:c3:51:89:60:
                    22:a0:c2:61:59:1d:d7:d6:41:ba:c3:85:c0:87:9e:
                    76:dc:92:77:0b:e5:0a:03:d6:2d:99:12:5b:32:df:
                    00:9e:1b:76:ac:2b:ce:c7:9f:c8:ba:c1:7c:13:00:
                    c8:49:b5:8a:04:ae:02:08:0f:98:3d:6d:91:8d:c9:
                    1d:c6:03:44:a8:9e:cf:6e:a2:e5:07:fc:2b:72:cd:
                    0d:b8:c2:74:c1:06:39:af:72:4c:7f:dc:e9:66:8e:
                    d7:38:f6:9c:c9:83:e1:bc:ee:6d:ed:28:9b:bb:97:
                    35:66:d6:ca:84:e0:74:62:32:c1:01:d2:94:fe:32:
                    fb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:28:96:FA:53:2B:03:84:F8:25:15:B1:86:57:B8:BA:27:D4:1E:2F
            X509v3 Authority Key Identifier:
                keyid:27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/72F76026790A11EE88F94A29C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.65.182.0/24
                  192.160.169.0-192.160.170.255
                  198.22.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:8b:63:0c:d6:e4:bb:f7:aa:4a:11:56:b0:09:7e:4e:4c:6e:
         f8:b9:02:8d:5c:fd:00:ba:dc:9b:c5:20:c4:05:28:42:7b:6a:
         84:a1:63:34:36:e2:c4:f6:2f:6b:bc:2f:9b:f8:31:c4:c8:4e:
         68:26:d7:9b:a1:ce:7f:18:34:23:86:be:6a:2f:ef:f0:99:ff:
         9d:d9:9d:df:0b:6e:d6:d4:5c:1a:d9:c0:5a:58:73:c2:ee:e4:
         d7:19:29:da:ed:28:41:1f:9f:90:32:e4:0f:93:64:aa:43:98:
         c6:e5:fa:59:36:07:be:44:b0:34:9c:65:9e:38:29:af:a5:51:
         74:44:77:fd:2b:9e:e1:00:f1:14:4f:da:d6:30:cc:a8:b8:3d:
         6b:05:08:de:b9:4c:19:a2:b9:ba:34:5a:ee:f2:e0:c8:94:d6:
         71:0f:8d:76:3a:03:43:18:c8:54:3b:d2:06:e3:63:7c:39:6f:
         ba:75:a6:b6:fb:f3:0b:82:d9:0f:5f:4a:4f:18:57:bf:b4:5a:
         9e:d8:7d:80:2c:e7:13:a7:5a:ed:28:2a:52:81:24:d4:58:e5:
         5d:9a:f2:46:48:af:30:cf:4d:8e:7c:ae:0c:4e:84:68:21:02:
         eb:37:4c:81:20:0e:82:e5:b1:87:14:7d:27:96:1c:3a:6c:05:
         3e:8c:eb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:03 2026 by rpki-client