Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/7D6CF15E299511F1AB285139C2833773.roa
File:                     7D6CF15E299511F1AB285139C2833773.roa (raw, json)
Hash identifier:          zrVJVWy7b99+fAaJlDs/efiLXBbFoQUYnwnxhru+Sag=
Subject key identifier:   F8:CE:10:A8:F7:02:04:35:E6:F5:EF:76:1D:47:71:18:E8:7A:13:DB
Certificate issuer:       /CN=A91FB297/serialNumber=A0FCBE9BCB4328A9E8BCCA1F5E1496ACC2CE2ED9
Certificate serial:       3A
Authority key identifier: A0:FC:BE:9B:CB:43:28:A9:E8:BC:CA:1F:5E:14:96:AC:C2:CE:2E:D9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/7D6CF15E299511F1AB285139C2833773.roa
Signing time:             Fri 27 Mar 2026 04:29:06 +0000
ROA not before:           Fri 27 Mar 2026 04:29:06 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     142263
IP address blocks:        144.79.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.crl
                          rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB297, serialNumber=A0FCBE9BCB4328A9E8BCCA1F5E1496ACC2CE2ED9
        Validity
            Not Before: Mar 27 04:29:06 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69c60791-7312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fb:c2:e9:ac:83:dd:34:38:7a:e1:23:f4:ad:
                    00:f5:38:04:b3:6b:dd:12:98:cd:b9:7f:21:30:ce:
                    fd:94:64:13:76:4a:a0:41:c9:bb:fb:b1:49:88:70:
                    6e:99:8d:7d:c2:23:de:e4:55:99:c1:63:53:cf:84:
                    4e:b7:55:c9:28:a3:28:b1:18:0b:32:7c:48:40:2f:
                    d1:ad:b5:ef:d6:72:ad:ac:3c:56:b9:b9:7b:d5:ee:
                    18:5e:3a:56:6d:45:bf:65:e9:6d:97:6c:e8:f9:92:
                    8d:e8:8a:11:6e:66:66:16:78:fb:68:36:a0:49:b8:
                    b3:a1:33:b8:13:54:70:ed:8f:83:05:1a:32:3d:d5:
                    9b:7f:1e:d8:dc:f5:65:dc:03:15:c0:f5:24:ea:34:
                    3d:2f:0c:7f:dc:8a:75:26:e1:91:73:22:bd:b5:9b:
                    c1:fb:58:07:e5:50:f2:f7:ba:2a:04:5a:d2:89:7c:
                    40:ae:f6:06:68:b5:2b:35:0d:44:b5:63:04:73:9a:
                    ea:fd:c9:9d:46:2f:6c:8d:11:4b:87:cb:97:c6:a7:
                    7d:8c:b9:3a:c9:35:36:54:68:f4:9a:85:6f:a5:d3:
                    09:e6:3f:55:37:09:27:30:76:25:41:33:a3:42:41:
                    e9:81:bd:cf:72:74:48:48:0c:2e:10:b3:34:ea:e7:
                    2b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CE:10:A8:F7:02:04:35:E6:F5:EF:76:1D:47:71:18:E8:7A:13:DB
            X509v3 Authority Key Identifier:
                keyid:A0:FC:BE:9B:CB:43:28:A9:E8:BC:CA:1F:5E:14:96:AC:C2:CE:2E:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/oPy-m8tDKKnovMofXhSWrMLOLtk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oPy-m8tDKKnovMofXhSWrMLOLtk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB297/BBF28DDAD99511F09A18623B64D3641D/7D6CF15E299511F1AB285139C2833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:b6:2c:04:ff:62:fb:03:99:29:c1:5f:01:a0:2b:d4:73:83:
         c0:e3:5f:52:a1:53:84:23:69:de:4b:33:46:f1:68:c1:46:3c:
         09:11:38:de:34:82:20:57:6d:4b:38:74:03:fd:76:e9:a7:6a:
         da:42:5f:77:74:27:8a:b4:64:9c:f6:52:31:86:7a:12:1a:ef:
         14:02:8f:39:ff:17:e3:18:9c:43:ec:4d:e7:db:d0:ab:0b:fe:
         bb:e1:d6:dd:93:c8:6a:3a:3c:df:94:48:86:5d:3f:67:01:f1:
         75:48:b8:7a:b0:30:04:05:1c:d9:b1:06:b5:4c:cb:3c:45:07:
         2c:4c:56:79:e1:a8:a2:a2:8d:59:51:e5:84:56:b7:b6:ce:80:
         df:ba:da:be:f4:67:41:ba:7e:92:d6:29:a0:4f:12:43:6f:93:
         2c:9b:8e:fc:c9:49:ab:e9:82:64:c0:33:8b:35:c6:fd:21:c0:
         8b:53:57:17:fd:61:0b:54:76:78:97:de:12:7d:4d:25:1d:dc:
         f7:7e:a4:39:79:30:24:5f:7c:44:3f:37:87:4b:0e:88:a3:f2:
         37:86:5d:7c:0b:92:91:91:0f:d8:e1:04:21:01:2e:e7:e3:ee:
         d8:02:c0:3d:e7:77:59:4d:36:92:87:68:9f:97:43:0d:57:ff:
         64:95:80:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:10:42 2026 by rpki-client