Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/CFE87CFEE74911EE9E36BA2AC4F9AE02.roa
File:                     CFE87CFEE74911EE9E36BA2AC4F9AE02.roa (raw, json)
Hash identifier:          T+9eZucYuIbcTkKwIw8LA6osZSTEz7bmZE02liyk2E0=
Subject key identifier:   EB:0C:13:EC:EE:25:81:CA:2B:45:0D:63:F8:5C:4D:7A:BA:2D:D2:F1
Certificate issuer:       /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
Certificate serial:       01FE
Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/CFE87CFEE74911EE9E36BA2AC4F9AE02.roa
Signing time:             Wed 05 Aug 2026 05:53:41 +0000
ROA not before:           Wed 05 Aug 2026 05:53:41 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     135315
IP address blocks:        159.73.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl
                          rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 510 (0x1fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D73BB, serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
        Validity
            Not Before: Aug  5 05:53:41 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a72cfe5-bb33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:52:9f:ff:48:aa:c2:39:2d:07:5c:a3:ab:87:
                    c9:ad:a3:ce:b7:fe:b3:8d:51:e9:af:08:e8:bf:94:
                    1d:8f:33:34:6c:ae:f0:0f:1c:b7:f2:a0:03:dd:5b:
                    91:4a:38:ed:8f:79:46:79:87:08:d9:69:cf:6d:18:
                    59:f0:bc:96:fe:03:b6:af:ea:2e:ea:8d:68:05:6c:
                    e5:97:b1:3b:df:9f:c1:7a:e5:f6:f8:0e:88:7f:80:
                    6f:b6:6c:80:08:aa:d6:2a:95:a3:6f:d6:87:80:8d:
                    e7:c1:be:c7:1a:d6:02:49:6d:c6:83:16:72:8b:c0:
                    aa:1a:a5:9c:f5:dd:1c:59:bb:93:d8:52:e5:5e:6b:
                    29:5c:08:53:8d:93:32:26:cb:04:95:49:66:95:bf:
                    05:1c:05:df:c3:c6:cd:3d:e8:e0:fc:df:c0:a8:5b:
                    b6:f8:6d:d7:2d:a0:77:cf:21:29:f6:06:73:f1:49:
                    3f:a2:77:ce:54:ab:7b:32:b8:45:ea:c1:15:5c:16:
                    62:59:9f:d7:e5:a1:40:b6:a6:87:e3:91:b1:97:87:
                    23:3c:d9:62:fa:11:b5:c3:9c:6e:5c:af:7f:ed:1d:
                    d3:f4:ed:13:a0:e8:c0:e8:62:7f:63:c7:2c:2c:3d:
                    86:c2:14:ec:95:23:f4:98:97:37:93:40:64:50:f2:
                    cd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0C:13:EC:EE:25:81:CA:2B:45:0D:63:F8:5C:4D:7A:BA:2D:D2:F1
            X509v3 Authority Key Identifier:
                keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/CFE87CFEE74911EE9E36BA2AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c6:54:47:b5:a8:de:b9:fb:49:c2:6e:e5:b3:8b:e8:0f:c5:15:
         57:8f:98:fb:54:02:8b:8f:9d:92:e9:d1:95:df:17:80:40:a7:
         73:42:87:9a:0c:c3:26:d4:3c:4b:19:59:89:e2:9f:08:00:37:
         1d:50:8a:ec:43:73:6c:92:32:90:33:59:a2:fd:e1:1a:73:99:
         b0:6b:d2:a4:82:c4:fc:0b:ed:58:62:71:10:23:bb:72:46:fa:
         94:bc:83:49:7c:73:61:ba:9f:aa:c0:55:b6:15:4c:73:ce:c7:
         5c:5e:b1:77:02:00:79:8b:b4:68:94:9e:b6:36:d8:0e:b4:de:
         c1:e2:88:4a:ff:44:ef:4c:c2:55:06:f4:3e:9e:49:a0:ed:7c:
         28:bd:c3:ac:f7:cc:80:59:8d:24:55:0f:a4:4a:94:3d:97:58:
         05:e3:b3:0e:ac:09:18:40:73:20:6d:1b:0f:1c:b5:30:2e:92:
         26:e2:af:1d:c4:74:8b:69:5f:99:96:1a:c7:b4:68:fd:00:1a:
         5c:61:14:ce:cd:4a:bc:60:c0:67:2c:97:b9:8a:37:e8:3e:9a:
         62:6a:2e:78:8b:05:c6:42:57:e3:54:d5:50:7f:7b:67:02:e9:
         e4:7f:af:f9:de:4e:14:0a:e3:ae:b2:4b:b0:ba:33:ea:13:32:
         11:41:c3:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 27 16:26:14 2026 by rpki-client