Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/15F2CAD0D0AD11F08058D727C4F9AE02.roa
File:                     15F2CAD0D0AD11F08058D727C4F9AE02.roa (raw, json)
Hash identifier:          vrl0lYNHs37wtxPcg7yovGdeUO7eOyJKB+w1BJ+7/tM=
Subject key identifier:   6C:93:B6:88:B1:BC:54:13:E7:A4:9F:C5:D7:7E:AF:44:DD:1E:17:0F
Certificate issuer:       /CN=A91D7578/serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5
Certificate serial:       025F
Authority key identifier: 9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/15F2CAD0D0AD11F08058D727C4F9AE02.roa
Signing time:             Mon 08 Jun 2026 09:47:48 +0000
ROA not before:           Mon 08 Jun 2026 09:47:48 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     134143
IP address blocks:        45.74.128.0/20 maxlen: 24
                          157.85.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl
                          rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7578, serialNumber=9FE00C19CE0B8F96ECF89A357F7D1AF558F96FF5
        Validity
            Not Before: Jun  8 09:47:48 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a268fc4-c454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a4:87:b1:a2:eb:f7:04:1d:ac:7b:38:99:97:
                    66:18:29:58:9e:ca:60:5a:7f:2a:36:a6:dd:c6:50:
                    93:b9:01:36:8d:35:37:f4:cd:26:f1:1c:3c:83:65:
                    dd:8d:98:ed:1f:98:18:ee:d3:24:7f:50:0e:07:08:
                    46:53:1e:3b:d0:33:34:81:2f:9d:6f:7b:0e:dd:13:
                    54:30:e3:ed:a5:fa:84:2f:7a:55:76:22:38:c7:28:
                    63:0c:e7:67:2e:d4:bf:0f:cc:ad:da:26:d8:54:63:
                    7b:3e:87:69:d3:97:4a:bc:b7:ac:7f:d3:99:5f:40:
                    48:fb:c1:36:65:b1:c5:9d:fd:b7:2a:66:df:73:67:
                    0d:63:f2:85:55:a5:72:a2:81:d3:41:61:85:d3:3a:
                    2a:3b:42:7f:cb:70:ae:68:ab:7c:f9:8e:0a:ad:ec:
                    d6:c5:80:26:67:76:46:4e:6d:54:b9:e1:54:4a:99:
                    6d:83:47:80:de:d4:0a:06:ee:18:84:dc:c6:66:39:
                    0b:1d:1d:22:1f:54:bc:aa:2c:58:6c:3a:64:49:95:
                    e1:ed:03:eb:b9:99:a9:b8:85:bd:52:40:51:7f:b5:
                    0f:c3:67:8d:41:77:5b:64:9e:cc:ee:25:75:07:95:
                    59:02:e6:d8:53:72:db:c2:f8:e7:79:48:53:e7:99:
                    b0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:93:B6:88:B1:BC:54:13:E7:A4:9F:C5:D7:7E:AF:44:DD:1E:17:0F
            X509v3 Authority Key Identifier:
                keyid:9F:E0:0C:19:CE:0B:8F:96:EC:F8:9A:35:7F:7D:1A:F5:58:F9:6F:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n-AMGc4Lj5bs-Jo1f30a9Vj5b_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/670058B4DFF811ED95153D31C4F9AE02/15F2CAD0D0AD11F08058D727C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.128.0/20
                  157.85.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:72:d2:6b:00:89:12:e3:24:6a:62:88:db:bb:62:90:88:69:
         de:0d:9c:ae:6e:39:e7:6d:9f:a3:a2:00:14:e4:f9:ce:a0:48:
         ec:44:d9:fe:95:34:a0:36:ff:5a:a4:b1:b2:20:de:c3:5c:5d:
         e4:81:cc:11:5d:f7:97:de:84:a1:11:55:65:cd:a9:5c:67:36:
         38:9b:a2:2d:d7:d6:ef:ec:fa:78:2d:48:08:d8:61:a0:87:69:
         f7:81:21:af:45:fd:9f:a3:8e:9a:08:25:8c:73:a4:80:b1:65:
         0d:2a:11:87:87:f3:fc:0e:ee:a3:28:27:47:64:0c:d9:8a:87:
         88:20:26:7a:aa:65:00:75:6a:7d:43:d8:69:0e:7f:d8:b1:2d:
         9b:0c:ec:9b:ef:7c:8f:7f:79:76:d1:23:ca:5e:a4:e1:fb:43:
         cd:d9:01:c5:42:16:d0:70:da:cb:e6:6c:50:82:97:8a:42:0d:
         b4:da:c7:e6:2c:a3:8b:7c:83:66:da:45:07:eb:a6:64:4a:b1:
         d0:37:69:d6:df:f1:26:b9:ed:bd:f3:34:6e:a2:e5:ac:d0:58:
         d6:a9:4a:7d:7b:22:33:c4:d4:43:58:00:b6:68:40:10:94:31:
         2e:f8:ec:ce:c7:92:f0:76:4e:f9:9c:55:11:22:72:5b:cd:84:
         b3:7b:62:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:43:11 2026 by rpki-client