Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/13279E2C124011ED9E430A4CC4F9AE02.roa
File:                     13279E2C124011ED9E430A4CC4F9AE02.roa (raw, json)
Hash identifier:          1BxQB/90BOAp9PRDMceVIt4omBUpX65e17xrsW9Ey98=
Subject key identifier:   22:65:58:4C:EB:3A:E8:A9:C1:4F:B8:F3:89:FE:BE:63:08:3D:40:09
Certificate issuer:       /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74
Certificate serial:       08AD
Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/13279E2C124011ED9E430A4CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:34:09 +0000
ROA not before:           Mon 26 May 2025 21:19:14 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     18013
IP address blocks:        144.48.6.0/24 maxlen: 24
                          144.48.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:16:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2221 (0x8ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74
        Validity
            Not Before: May 26 21:19:14 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a46a80-24c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c9:a8:58:97:8d:88:53:e3:8f:64:de:08:ae:
                    60:ad:a7:ec:e6:2a:c3:19:fc:28:d0:9f:88:9f:e1:
                    ea:25:42:82:c1:b6:d2:f9:f8:fe:11:27:b0:23:c5:
                    d0:98:8e:b5:d7:e8:01:c7:79:8b:69:2b:19:12:4f:
                    fd:93:bb:72:73:95:e8:06:7e:ce:88:e1:52:13:3a:
                    af:0d:da:8a:9e:b5:d8:36:e3:c9:af:ff:e8:d0:0c:
                    f9:d3:d8:27:2f:9a:be:2e:74:a0:e0:00:a4:67:46:
                    5e:8e:16:5c:6b:3b:c0:a2:6a:06:dc:27:9d:14:d8:
                    d9:68:c8:6f:64:c9:7e:8b:4f:3c:45:ee:4f:f9:48:
                    32:22:bb:10:e4:72:f8:9a:45:d5:9f:02:06:60:ae:
                    10:98:0a:77:4b:e2:5a:7b:9b:cc:3f:47:50:f6:b9:
                    1c:ad:41:3d:0e:1c:dc:ff:d4:d2:98:07:1c:22:f4:
                    d5:5f:21:11:f0:64:d1:79:35:30:ca:e8:34:23:92:
                    b0:bb:66:39:50:98:51:15:96:55:9a:29:0e:c7:60:
                    49:da:8f:91:b9:dd:4c:1f:41:b5:ae:44:98:71:12:
                    4a:0e:69:a2:53:1e:10:c0:d8:18:d3:f5:5c:d3:e9:
                    dd:55:6c:59:7f:8c:b5:14:6f:20:ae:38:3c:ce:d9:
                    f0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:65:58:4C:EB:3A:E8:A9:C1:4F:B8:F3:89:FE:BE:63:08:3D:40:09
            X509v3 Authority Key Identifier:
                keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/13279E2C124011ED9E430A4CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.48.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:0a:9a:9e:a1:e1:8a:f2:2d:dc:ba:b6:33:17:b9:53:09:60:
         c1:20:4d:c5:c1:f2:65:26:66:5f:bc:b1:f3:ab:25:52:c6:87:
         58:d7:11:ae:d1:04:f3:f4:55:e8:34:29:ef:6a:17:55:c1:7a:
         e3:47:c3:26:2b:78:a5:e7:f9:28:18:b4:04:21:b1:44:6e:66:
         da:34:f1:75:81:80:a7:30:15:cd:83:0a:50:c4:cc:7b:ea:62:
         ae:12:e4:0b:0e:98:51:d2:07:33:37:b2:8a:31:c8:3c:79:75:
         08:3b:8b:c4:64:d8:c8:2e:99:65:02:77:a4:71:c7:37:a5:34:
         17:ce:d6:30:df:4e:7b:8f:13:57:16:7c:57:ae:31:d5:ea:97:
         91:08:65:45:6d:5e:e5:b2:8e:54:4c:5d:bb:57:55:53:2d:3f:
         bc:d1:2e:31:87:a9:37:68:b6:41:3e:7d:2f:41:3d:2d:6c:73:
         a9:ef:a5:14:bc:2c:40:94:e4:f0:f6:ee:99:4e:a7:9c:72:c5:
         f5:20:26:30:03:03:3d:ab:d3:9a:32:38:72:df:48:8e:65:7f:
         a3:b0:69:2a:03:da:ea:b0:ab:b7:d3:29:7a:76:f7:73:b0:b9:
         c1:be:4d:d3:21:e4:a1:92:d1:ee:26:f4:c7:d2:20:3f:d2:ef:
         fd:29:63:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:30 2026 by rpki-client