Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/78D63F3A49E611F1A18E902DB5833773.roa
File:                     78D63F3A49E611F1A18E902DB5833773.roa (raw, json)
Hash identifier:          6yed7TU5WsVwocy0PyrBQTwQ0MhVSm9L6l06FSV8VNI=
Subject key identifier:   BA:12:67:76:71:9D:8B:6A:62:F9:83:56:B6:17:D6:81:38:A5:A5:66
Certificate issuer:       /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial:       0997
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/78D63F3A49E611F1A18E902DB5833773.roa
Signing time:             Wed 10 Jun 2026 21:24:23 +0000
ROA not before:           Wed 10 Jun 2026 21:24:23 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     137187
IP address blocks:        169.136.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
                          rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:30:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2455 (0x997)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
        Validity
            Not Before: Jun 10 21:24:23 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a29d607-ef1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:fc:64:73:9e:76:a8:57:20:12:85:6f:0b:
                    48:f6:32:ef:63:b5:a5:7a:c8:d5:8f:2e:fa:55:e3:
                    3e:74:17:dc:19:b2:3b:ee:1c:e4:ff:6f:6d:b3:fd:
                    4d:c8:d4:47:6d:62:7a:01:7d:c1:8a:4e:a8:e0:ef:
                    2c:40:df:30:15:1f:39:40:12:9c:ea:e4:f6:31:da:
                    93:b1:30:1f:12:93:63:b5:09:05:b8:80:34:b9:f2:
                    17:ec:96:8c:fc:8f:bd:7e:19:1a:81:39:15:fe:f5:
                    16:ae:ac:7e:18:13:de:07:59:7c:61:56:e8:61:46:
                    83:6f:d2:8d:2f:98:a5:ac:fe:bf:76:a4:8b:e0:ab:
                    b9:29:cd:6c:f0:ca:8c:03:de:86:79:4c:9a:a5:ab:
                    f6:94:17:ac:e7:ab:9d:d5:2f:68:57:ba:b8:35:81:
                    40:2f:d8:d7:1a:dc:3a:13:52:a4:91:d5:40:44:b0:
                    63:5e:3d:2b:d8:90:12:5f:b3:80:8b:43:c0:f0:65:
                    27:6e:49:8c:15:16:48:cf:61:f0:a8:74:83:27:1b:
                    a2:b5:ab:1f:e0:7e:a9:4e:12:9d:5c:f4:49:8d:4c:
                    cf:c6:3b:aa:25:93:f3:02:03:b9:ab:40:b0:c7:4a:
                    f4:40:35:14:05:08:bb:29:39:f8:25:dd:42:61:73:
                    e0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:12:67:76:71:9D:8B:6A:62:F9:83:56:B6:17:D6:81:38:A5:A5:66
            X509v3 Authority Key Identifier:
                keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/78D63F3A49E611F1A18E902DB5833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.136.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:ee:77:db:af:c5:85:81:26:c2:72:99:6d:a7:b8:23:cc:2e:
         87:48:41:a2:d2:7a:4c:6f:6a:17:31:8f:03:d7:91:bd:50:56:
         21:31:f0:f6:53:17:43:81:4c:dd:39:90:3e:90:eb:eb:c9:3d:
         e3:bd:11:cf:9e:57:bf:04:55:e0:52:ba:c8:a7:1e:3c:d6:f8:
         f7:ec:8d:e0:76:63:97:49:0c:a2:6b:c2:58:c7:4a:b1:3c:ee:
         cc:d1:03:8c:5f:54:62:91:b4:9e:b4:1e:de:ca:16:7a:bc:b6:
         17:53:ee:87:bc:61:bb:a9:e3:75:f3:35:ed:4d:e9:b4:1b:12:
         b0:b7:ed:8e:5c:ec:5a:13:66:4c:cf:f1:15:40:5b:8e:ca:65:
         cf:7b:f2:47:2d:a2:e9:a6:76:19:a7:1a:22:1e:37:e6:b8:d8:
         87:31:8f:57:10:f7:f1:18:62:51:a4:66:83:3a:82:e8:ab:c3:
         30:b8:bd:b5:03:0f:83:0b:86:e4:3f:0c:8f:9c:8b:13:62:13:
         87:89:d3:f8:03:21:63:fd:ce:94:64:dd:98:2f:18:c7:f9:8b:
         ed:a7:00:35:13:0f:f3:7c:71:ab:5e:1c:4f:48:d0:aa:1a:fe:
         f8:91:6a:e1:39:98:19:28:1b:b1:aa:a8:65:b1:c7:09:4a:69:
         96:6c:f3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:03:41 2026 by rpki-client