Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/8353BEA4F88211EEA770C016C4F9AE02.roa
File:                     8353BEA4F88211EEA770C016C4F9AE02.roa (raw, json)
Hash identifier:          DeOg1+xoYDUkAWfjRHY3bgB+e63XrSZC94dKT/SU52M=
Subject key identifier:   4A:AD:31:FB:E3:E7:5D:92:83:5C:99:FB:95:20:66:CB:B0:3B:9B:4C
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       0823
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/8353BEA4F88211EEA770C016C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:54:27 +0000
ROA not before:           Thu 24 Jul 2025 22:34:37 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140899
IP address blocks:        156.59.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2083 (0x823)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Jul 24 22:34:37 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48b63-1330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:e8:26:31:94:1b:98:70:ca:40:43:25:60:2e:
                    8c:be:49:13:f2:4f:21:1b:71:4b:d0:8e:e2:ed:ec:
                    e0:a8:d9:1d:30:18:5e:88:ab:fc:2f:ae:53:db:72:
                    cf:11:45:8f:bc:4c:e7:a4:2b:81:7b:2b:f5:b6:d0:
                    14:d1:f2:46:6b:c6:ad:4f:48:ae:6e:46:32:07:9e:
                    2c:bd:ed:01:48:07:8e:4c:fa:ba:6e:73:ef:3d:6e:
                    b7:41:78:87:b9:87:30:29:81:41:18:f1:e8:a8:85:
                    50:1e:33:61:de:ad:88:ab:fa:55:27:4d:97:56:84:
                    e3:6d:a4:95:dc:98:54:63:1a:0a:15:8c:89:97:f2:
                    a3:eb:15:56:53:c8:27:00:22:96:eb:80:c3:78:44:
                    44:bd:63:19:af:fe:0a:c5:9f:54:0d:30:f0:b1:42:
                    c6:a5:30:84:5c:82:ec:0d:ba:7d:f6:59:b3:37:a8:
                    6d:e4:86:9c:75:87:3c:89:7f:bb:ee:d4:18:b0:11:
                    17:86:2c:ac:05:72:b5:c2:75:37:50:84:97:19:9b:
                    a3:f4:18:12:e1:1c:24:71:d7:78:06:7e:e5:a2:e9:
                    da:5e:89:13:5e:13:82:f3:3d:9b:1b:4f:07:a3:6a:
                    ac:eb:6b:e0:f3:2c:64:8b:a3:88:cd:83:37:b2:e9:
                    ed:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AD:31:FB:E3:E7:5D:92:83:5C:99:FB:95:20:66:CB:B0:3B:9B:4C
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/8353BEA4F88211EEA770C016C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.59.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:12:b9:04:0b:83:7a:a4:37:9d:4e:34:2b:50:f5:95:65:4f:
         0b:df:cb:48:cd:ac:b0:74:9b:e4:76:70:2b:38:29:6e:ab:d0:
         06:ba:26:72:21:10:d0:20:ae:f5:1e:e7:5d:5d:7d:de:0c:49:
         b0:cc:ff:ec:1c:f3:2c:3e:d1:8c:56:35:2f:bc:c1:75:d3:ea:
         0b:c9:38:2a:f5:f8:14:aa:69:c4:29:7a:f7:33:83:12:20:d2:
         94:f5:42:b4:ba:5e:14:a8:a2:22:9a:55:0b:89:97:fe:dd:cb:
         b3:92:b5:a3:20:be:ba:fc:0a:ed:1f:3b:67:bf:39:9d:bf:57:
         09:74:52:55:a3:bc:13:bf:02:9d:a3:46:a6:0b:4a:d3:8c:da:
         46:fb:53:03:18:8a:d0:a5:9e:e7:c8:f8:c1:6e:f1:c5:66:d3:
         18:19:e3:67:ea:be:8b:dd:cf:fc:ef:6c:c1:b7:12:39:01:d9:
         7d:c1:07:1e:cb:b8:7c:23:0f:a5:41:c8:25:60:51:f6:39:a9:
         e4:e7:50:4d:bc:88:4e:45:a9:cc:01:b8:5a:c9:7f:a3:c0:2c:
         f4:26:74:66:97:9a:10:9e:a9:48:c8:ca:07:29:8a:f5:8a:d1:
         35:09:87:8e:51:a9:8e:3b:e6:55:33:3f:0a:a7:1e:00:01:79:
         80:1f:90:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:53 2026 by rpki-client