Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/A45471ACC4ED11EE8A67C739C4F9AE02.roa
File:                     A45471ACC4ED11EE8A67C739C4F9AE02.roa (raw, json)
Hash identifier:          MwL9VhO+S81wefft4Xd8rE2oCPjYVHoN/919rrhVfRc=
Subject key identifier:   F1:51:FE:4B:F4:0D:66:83:5A:EE:81:72:64:61:6E:B7:22:AB:38:11
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       08CC
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/A45471ACC4ED11EE8A67C739C4F9AE02.roa
Signing time:             Tue 28 Jul 2026 22:43:49 +0000
ROA not before:           Tue 28 Jul 2026 22:43:49 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     24429
IP address blocks:        156.59.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2252 (0x8cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Jul 28 22:43:49 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6930a5-73c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bf:91:5a:81:e3:da:ca:f5:85:af:55:03:40:
                    4f:06:0d:f4:ad:87:e0:06:6d:6d:89:5e:4e:28:b1:
                    78:31:f2:53:0b:80:57:2b:5e:fd:6d:ba:9a:9b:38:
                    2b:fc:fc:8a:94:70:62:4f:f2:ed:c7:2f:e2:c5:1d:
                    26:1b:2b:1c:f9:ac:7c:8a:4f:e5:ab:5c:41:7c:86:
                    41:6d:7d:74:af:f9:45:75:78:5a:ea:5b:14:58:95:
                    c1:71:d3:38:ef:75:10:a0:09:60:2b:9a:d7:80:a6:
                    d8:91:cd:30:47:b9:2d:d5:c9:a8:f5:87:76:f6:7b:
                    30:52:27:a1:c3:5a:2a:e1:2a:e3:15:35:4f:c4:03:
                    f9:da:c0:14:3d:6f:24:7b:aa:74:55:67:2a:f6:57:
                    0b:e0:c7:d6:58:13:ec:6f:da:88:97:19:95:5a:7c:
                    dc:d6:44:30:e5:23:77:e8:32:2a:91:94:ad:a6:b7:
                    f6:20:8f:b2:46:e3:af:04:a1:ab:96:5f:85:47:12:
                    32:68:f8:cf:c5:e1:dc:ee:54:d2:13:05:d7:2b:f2:
                    02:3b:d1:91:35:93:2a:37:2a:b0:98:d3:81:b7:36:
                    f6:0f:16:c4:72:84:d6:ce:b7:78:7f:e9:ef:84:65:
                    83:a6:64:4c:ca:53:e6:c0:b6:f2:a8:0e:24:67:cb:
                    24:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:51:FE:4B:F4:0D:66:83:5A:EE:81:72:64:61:6E:B7:22:AB:38:11
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/A45471ACC4ED11EE8A67C739C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.59.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:5d:d9:0b:f8:e9:13:c2:21:d1:66:84:73:48:cf:33:03:63:
         fd:19:26:5e:4c:d4:8e:84:d1:ea:fe:17:7c:85:3a:94:97:8d:
         98:92:f4:07:89:2e:fa:98:85:72:08:a3:1a:ba:ac:22:5f:cb:
         a2:50:fe:1d:fd:d2:39:b1:de:55:ae:3d:77:b5:2e:da:7d:f3:
         5f:af:4b:79:dd:85:35:22:f7:9c:50:d1:20:47:93:fa:f2:98:
         b5:72:fa:48:69:77:7d:78:29:9e:a2:05:1d:de:20:34:dc:19:
         6f:cf:04:f4:88:77:62:7d:40:3b:1d:03:24:d5:1f:5f:6b:51:
         0d:46:3a:7f:e6:88:5d:94:0f:ff:01:1c:2c:8f:3c:86:8e:28:
         ed:b2:0c:61:45:a3:9a:f8:1b:88:fc:56:cf:b6:6c:64:1c:5d:
         da:bb:02:df:f9:62:8a:11:1c:83:16:f2:34:36:55:d8:19:ad:
         13:a4:cb:ad:3c:c8:fe:6d:fc:12:01:2f:a4:f5:ce:20:6c:71:
         25:4a:48:06:11:2a:81:49:72:52:ea:00:1c:e5:ac:4d:67:78:
         17:17:59:9e:72:3a:a9:f6:6c:33:df:fb:1e:fd:90:26:91:3f:
         99:62:63:01:bb:1f:61:f0:76:e0:70:42:aa:56:a3:5f:3d:3d:
         ef:49:fc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:06:32 2026 by rpki-client