Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/07DEEBF0F20311F09027AFE1496F56BC.roa
File:                     07DEEBF0F20311F09027AFE1496F56BC.roa (raw, json)
Hash identifier:          iWkfkl8IPV0JFK1Zl8pweCdJ/SFodByB+0jA5hETEao=
Subject key identifier:   9B:B3:4B:CB:DE:AB:AD:99:5A:7B:3A:75:B5:D5:B2:07:F0:83:24:0E
Certificate issuer:       /CN=A91F7D5E/serialNumber=4D807047A6E1B0D30BAF64267BF952248AFDD3A9
Certificate serial:       1D
Authority key identifier: 4D:80:70:47:A6:E1:B0:D3:0B:AF:64:26:7B:F9:52:24:8A:FD:D3:A9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/07DEEBF0F20311F09027AFE1496F56BC.roa
Signing time:             Sun 01 Mar 2026 05:45:31 +0000
ROA not before:           Thu 15 Jan 2026 11:12:08 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     131171
IP address blocks:        144.79.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.crl
                          rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7D5E, serialNumber=4D807047A6E1B0D30BAF64267BF952248AFDD3A9
        Validity
            Not Before: Jan 15 11:12:08 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a3d27b-2a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:00:63:fe:ce:d8:8d:bd:57:a8:9a:7e:c2:9b:
                    27:66:21:fa:a9:e3:88:ce:76:e4:bb:72:8d:73:16:
                    e9:1c:e9:96:b5:c0:4f:d8:df:79:83:bb:d1:e8:c3:
                    30:be:b4:81:57:c7:96:85:8b:d7:5a:18:56:40:5b:
                    7f:b0:cb:ec:96:3b:ec:c3:8f:d7:7a:3b:97:f1:e9:
                    42:91:a5:87:50:d6:fc:f6:41:e9:1a:20:2e:52:e9:
                    87:fb:e0:2f:2b:8b:c5:11:b7:6a:1e:45:dd:fa:fd:
                    1a:f3:83:6c:85:b7:da:39:d8:39:75:b8:2c:70:92:
                    74:34:33:7d:8e:54:e3:d1:b6:93:a6:c9:91:40:c3:
                    26:87:37:20:75:92:20:8a:89:b8:b0:20:25:ad:66:
                    cf:83:7a:2c:e7:19:4f:d0:cd:3e:d7:c4:20:f3:86:
                    4a:f9:7e:b1:35:df:1b:04:47:33:26:fe:ad:5f:90:
                    3f:c4:12:db:fc:6c:8f:41:66:47:5a:5d:33:58:e3:
                    e4:b4:ff:5d:3e:56:04:74:09:b7:63:43:43:66:55:
                    b9:e4:2b:03:eb:af:97:e3:6c:7a:16:b0:9f:54:3e:
                    8a:76:14:cb:98:55:ed:85:40:d4:02:b7:d2:32:05:
                    c2:14:8b:67:e0:80:ed:7b:bf:be:e2:64:26:41:e1:
                    ea:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B3:4B:CB:DE:AB:AD:99:5A:7B:3A:75:B5:D5:B2:07:F0:83:24:0E
            X509v3 Authority Key Identifier:
                keyid:4D:80:70:47:A6:E1:B0:D3:0B:AF:64:26:7B:F9:52:24:8A:FD:D3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/TYBwR6bhsNMLr2Qme_lSJIr906k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TYBwR6bhsNMLr2Qme_lSJIr906k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7D5E/0FB62606F20111F0AD418CBA486F56BC/07DEEBF0F20311F09027AFE1496F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:40:dc:8b:f5:d3:00:c7:16:e2:d2:08:a1:f4:12:9d:f6:fa:
         42:e7:22:b0:f3:b5:7c:16:ae:68:03:c6:cb:f8:19:be:cd:bd:
         76:d6:8e:e9:79:06:69:0e:b1:7a:46:ab:54:00:bb:35:08:b7:
         19:dd:9b:d8:47:8b:88:d3:04:88:1d:9e:b2:5b:52:3f:73:b3:
         a0:26:f3:31:98:51:38:3e:84:8e:d7:6e:dc:23:7b:ee:52:0a:
         3e:8c:c3:be:4e:b7:cd:2d:d2:57:cf:ed:b3:f2:9b:ce:36:af:
         99:a6:7c:9f:f1:21:47:76:14:2c:49:fb:d0:9f:64:06:89:1d:
         d7:07:a8:a1:f4:dd:b1:3c:50:37:da:91:3e:9b:c6:b4:20:e1:
         3f:0e:30:c9:48:f5:44:15:00:2f:76:20:9c:0f:9c:4e:9e:56:
         db:fc:f6:2a:f8:a5:ee:f5:99:b3:b7:25:28:fe:53:d9:2a:8a:
         c9:84:e2:e4:53:4d:1a:27:1d:69:c8:82:62:b4:d2:7c:0b:ad:
         b4:58:85:61:46:33:40:d6:84:42:0e:e7:e3:ae:e7:5a:a9:2a:
         b3:b6:98:10:df:08:9b:64:7a:44:9f:e2:9c:0f:d6:1e:84:45:
         28:7a:b1:97:dd:76:c9:c1:22:85:b7:f0:38:24:d9:2c:07:43:
         b5:ee:83:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:47:05 2026 by rpki-client