Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/52DC15E02DA611F1B64DB1E8A2833773.roa
File:                     52DC15E02DA611F1B64DB1E8A2833773.roa (raw, json)
Hash identifier:          AzbPG4+Ay9Py93BezJDBHyNMd2NxBXLctC8P1DC+Z84=
Subject key identifier:   44:AA:84:FF:E0:53:24:17:7E:35:23:D4:4E:3D:AF:E5:08:04:7E:E3
Certificate issuer:       /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial:       0999
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/52DC15E02DA611F1B64DB1E8A2833773.roa
Signing time:             Wed 10 Jun 2026 21:24:27 +0000
ROA not before:           Wed 10 Jun 2026 21:24:26 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     212879
IP address blocks:        169.136.64.0/24 maxlen: 24
                          169.136.65.0/24 maxlen: 24
                          169.136.67.0/24 maxlen: 24
                          169.136.72.0/24 maxlen: 24
                          169.136.133.0/24 maxlen: 24
                          169.136.145.0/24 maxlen: 24
                          169.136.146.0/24 maxlen: 24
                          169.136.147.0/24 maxlen: 24
                          169.136.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
                          rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:30:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2457 (0x999)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
        Validity
            Not Before: Jun 10 21:24:26 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a29d60a-6558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fc:09:40:6e:e0:9c:3e:c7:61:b2:68:08:4e:
                    f8:89:93:25:77:e6:51:f7:eb:fe:76:88:38:d5:a7:
                    40:f8:c9:54:45:e2:34:5d:c5:68:c1:a5:04:41:4a:
                    18:eb:f5:9b:c6:70:b2:36:e3:f0:d8:be:03:26:0a:
                    a2:81:54:93:9a:db:6f:87:7d:b7:6d:2e:db:48:7b:
                    77:8d:80:e0:fb:53:c2:2e:4a:e6:92:54:2b:ae:6f:
                    12:53:91:24:f0:f5:21:03:df:94:0d:ef:58:e8:9c:
                    1c:48:62:a8:12:5c:6f:4b:19:0f:f7:be:80:28:f3:
                    0f:8b:50:0c:6d:27:d2:7a:3e:66:40:8f:49:45:09:
                    6d:5f:0e:55:f0:4d:74:35:fb:40:bd:a0:2f:48:9d:
                    39:84:33:7d:37:22:d3:9c:b4:b9:af:83:c2:ce:a3:
                    d4:14:6c:8a:02:bd:73:e1:9b:89:8a:09:67:9d:e4:
                    26:de:f8:19:bf:e7:74:ab:fc:bd:45:fb:3e:10:1f:
                    2d:96:be:91:26:8c:55:7f:f6:0a:02:92:40:84:54:
                    3f:4b:ef:22:1f:4e:bc:28:2f:bc:25:0e:10:56:c0:
                    9c:e0:70:64:e0:8e:b2:fc:5b:ac:b2:35:7d:df:67:
                    36:a3:5b:dd:e3:f9:a8:0c:5f:ef:d3:b7:16:85:09:
                    06:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AA:84:FF:E0:53:24:17:7E:35:23:D4:4E:3D:AF:E5:08:04:7E:E3
            X509v3 Authority Key Identifier:
                keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/52DC15E02DA611F1B64DB1E8A2833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.136.64.0/23
                  169.136.67.0/24
                  169.136.72.0/24
                  169.136.133.0/24
                  169.136.145.0-169.136.147.255
                  169.136.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:08:09:a0:c8:a7:ca:75:90:e7:68:12:38:5a:22:4f:5f:3d:
         05:98:8c:b0:7a:bc:fe:f8:8c:7c:7e:45:2a:26:25:5c:3f:c3:
         23:e7:16:43:9a:b6:d8:66:c7:1d:97:d5:eb:f0:26:88:6d:74:
         ed:68:2a:c3:d5:e2:bf:8a:11:ee:de:9c:a2:3a:4b:ab:9a:5b:
         07:d9:75:5e:a2:cd:66:5f:2a:68:65:8c:4b:34:5b:55:1a:75:
         45:ca:a7:60:e4:bf:cf:bd:15:b3:fc:df:39:16:01:da:5d:b4:
         79:12:ed:51:a2:fe:e1:24:79:fa:98:61:56:3e:57:23:63:5c:
         f6:e0:2c:31:e8:ab:16:e5:a7:a8:48:a2:01:9a:4f:c1:99:55:
         ad:ce:14:d3:88:ff:d7:d9:cd:e4:77:83:0a:5f:68:45:f8:62:
         4e:a0:a8:cf:23:95:d8:c1:f0:9c:37:da:f9:c6:33:5c:d2:bb:
         8f:7e:04:62:c6:20:3c:47:13:1f:49:c8:31:f9:16:18:98:1e:
         33:c7:b0:44:7c:0e:f1:7e:38:60:fd:6f:0c:b3:30:45:cc:22:
         b4:cb:2a:1f:72:23:c6:f7:ce:44:87:cc:f6:e8:87:08:9d:06:
         0d:a0:bb:ca:74:b0:28:69:63:5d:f2:4e:e7:fe:3b:b7:87:b1:
         e4:26:0e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:23:50 2026 by rpki-client