Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/ACD9C588D02211F0B0E25D5AC4F9AE02.roa
File:                     ACD9C588D02211F0B0E25D5AC4F9AE02.roa (raw, json)
Hash identifier:          ay5HgAGU9lTCTPCqa8RgDwe7VpeL06ChtuS6jh6wRNM=
Subject key identifier:   F6:80:71:A2:59:34:D0:96:AD:44:1A:9E:C9:75:A4:8B:87:5B:F0:0A
Certificate issuer:       /CN=A91F1451/serialNumber=1153407EE0BFB062713C5BFE6FB822E13B33E013
Certificate serial:       33
Authority key identifier: 11:53:40:7E:E0:BF:B0:62:71:3C:5B:FE:6F:B8:22:E1:3B:33:E0:13
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/ACD9C588D02211F0B0E25D5AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 05:57:59 +0000
ROA not before:           Wed 03 Dec 2025 08:33:00 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     141409
IP address blocks:        144.79.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.crl
                          rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1451, serialNumber=1153407EE0BFB062713C5BFE6FB822E13B33E013
        Validity
            Not Before: Dec  3 08:33:00 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a3d567-9039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6a:27:51:c2:a7:d2:c0:75:7b:1c:a2:88:be:
                    ad:98:10:96:0b:12:f0:87:9d:1d:46:3e:aa:d8:f6:
                    50:32:d3:33:b0:6f:f9:40:7b:c4:5d:d6:89:ba:8a:
                    3e:6c:42:71:ce:ff:7f:4e:ab:e6:02:cc:c8:50:f8:
                    08:6b:c9:4d:14:7c:86:fb:e2:6c:b9:68:a5:62:3b:
                    be:b1:eb:ff:de:43:61:5b:cd:ab:9b:f8:1d:e3:22:
                    7a:f7:f6:59:dd:5e:a7:a7:db:d4:00:ea:85:7e:27:
                    7a:35:e1:e8:d3:e4:5d:58:7e:be:35:13:eb:3a:81:
                    f4:51:ba:86:6d:ec:84:ea:e6:6b:c7:22:14:8e:7b:
                    e3:ce:bb:01:69:2e:f9:76:e2:0c:e0:60:8c:ae:1f:
                    f6:88:08:a2:22:15:81:90:3c:8c:3d:5a:98:df:85:
                    c5:90:20:71:33:2d:48:ca:57:df:2e:dc:f9:6f:0d:
                    76:db:35:7f:66:ec:9f:57:74:ce:6d:9e:a7:dd:64:
                    89:fb:f6:1a:b6:48:91:3f:fe:5f:26:26:f5:54:77:
                    6f:12:cf:d4:2d:21:fe:00:3a:02:8e:91:9b:50:8a:
                    4b:9c:66:34:a6:c3:c3:64:8b:fe:cd:b8:60:6e:8a:
                    f6:1b:00:ef:f3:13:cc:e8:3a:c4:88:5c:fd:f1:90:
                    41:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:80:71:A2:59:34:D0:96:AD:44:1A:9E:C9:75:A4:8B:87:5B:F0:0A
            X509v3 Authority Key Identifier:
                keyid:11:53:40:7E:E0:BF:B0:62:71:3C:5B:FE:6F:B8:22:E1:3B:33:E0:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/ACD9C588D02211F0B0E25D5AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:36:09:d9:63:ed:b1:7c:ff:33:33:e6:54:7e:40:ad:c4:cb:
         82:e4:8c:f4:88:f8:98:ab:eb:27:34:42:66:38:17:da:aa:6c:
         6e:df:9a:82:61:84:3e:a1:db:42:f0:89:74:46:b9:50:3d:ba:
         90:e1:35:40:77:13:53:94:dc:68:d3:8b:77:e3:19:c0:c4:6b:
         9b:20:ae:18:86:84:ee:9c:0d:14:5c:3e:4d:e9:0d:1b:08:cd:
         4c:aa:b5:f4:98:39:b8:5f:1e:ba:33:75:04:4f:3e:ea:0a:7c:
         11:8f:78:ea:31:1a:a3:75:0b:04:35:72:a7:48:68:f1:9c:d7:
         1e:26:d0:58:58:df:a2:93:97:44:e3:7c:ed:ca:2c:dd:8f:cd:
         cf:0e:73:26:09:a4:96:d8:dd:03:e0:b1:d4:fc:85:3c:35:d4:
         db:a4:04:91:49:7a:c9:9f:5d:d4:29:e1:25:4b:17:2f:32:f0:
         9a:7b:73:d2:3a:8c:b3:7a:da:fa:39:92:de:99:6a:be:ac:6b:
         6c:d2:6c:e3:5c:d3:55:23:7c:b3:9b:c3:91:9d:2a:1a:f3:b3:
         83:a9:89:b5:9d:6d:be:03:b7:a0:7e:ae:2b:ab:01:3a:b5:97:
         d0:42:4b:ef:24:bd:d3:a8:91:a8:9d:73:7f:d7:09:22:ec:a5:
         66:f8:94:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:24 2026 by rpki-client