Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/031A6E544E9311F19004C0C7A2EE528E.roa
File:                     031A6E544E9311F19004C0C7A2EE528E.roa (raw, json)
Hash identifier:          w/4wlpVVsUwM2QVkvZtJ7suuuKCdp4EEZYeS6K8GgLc=
Subject key identifier:   1E:9D:8F:C0:30:57:F5:76:C1:D5:7D:CD:97:FD:DC:8C:C2:F9:C7:ED
Certificate issuer:       /CN=A91758DF/serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
Certificate serial:       16
Authority key identifier: DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/031A6E544E9311F19004C0C7A2EE528E.roa
Signing time:             Wed 13 May 2026 06:14:35 +0000
ROA not before:           Wed 13 May 2026 06:14:35 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     14593
IP address blocks:        179.65.0.0/17 maxlen: 24
                          179.65.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl
                          rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jun 2026 20:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF, serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
        Validity
            Not Before: May 13 06:14:35 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a0416cb-3b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fa:61:dc:57:1d:a5:f3:da:03:e5:5f:d8:1b:
                    6a:85:c4:34:5c:69:1e:3e:09:b1:57:78:5b:c3:4d:
                    50:20:7e:2f:ea:8c:2c:3f:82:0f:ff:33:99:e2:14:
                    09:14:89:0f:3d:d1:8b:c4:bb:6c:38:75:a2:3f:f1:
                    61:26:d2:f2:fc:70:90:22:1f:06:5e:a2:e0:3c:88:
                    d1:a5:4f:51:19:27:42:c5:e6:0d:21:ee:a4:60:19:
                    83:d3:dd:b8:46:f0:bb:04:f7:5e:15:6e:bc:7d:b7:
                    c4:e9:b9:f4:d2:d4:39:81:61:00:a6:3d:95:41:07:
                    0a:f6:0a:ea:0d:88:61:3f:19:cf:d2:ab:0b:18:0e:
                    84:ed:ff:aa:7c:35:b3:e3:a6:e4:1f:ab:23:f5:52:
                    1c:22:b9:50:26:ec:6b:90:19:bb:76:17:9c:3e:93:
                    81:ea:47:3a:f4:dc:f6:5a:fa:e5:02:84:6b:6e:60:
                    ec:9f:c3:13:5d:1c:5f:15:b2:26:85:69:a2:2d:de:
                    da:e3:cf:ce:f0:d3:e4:c3:6b:a7:2b:3f:34:02:55:
                    c8:7b:0e:e0:77:a2:d6:ee:b8:99:36:62:5b:ee:96:
                    01:8b:6b:14:e0:84:65:86:db:6d:6a:42:90:42:6b:
                    c6:2e:7b:02:53:c0:c4:fe:06:f5:f4:43:57:d6:6e:
                    3c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9D:8F:C0:30:57:F5:76:C1:D5:7D:CD:97:FD:DC:8C:C2:F9:C7:ED
            X509v3 Authority Key Identifier:
                keyid:DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/031A6E544E9311F19004C0C7A2EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.65.0.0-179.65.191.255

    Signature Algorithm: sha256WithRSAEncryption
         45:1d:98:46:86:cb:61:51:df:7d:86:95:51:cb:57:f3:88:40:
         da:0b:4e:f7:71:e7:80:7a:6d:af:b5:1c:86:ab:83:8a:b8:ac:
         ad:ab:4c:20:4d:fb:d0:3a:7d:cd:a7:63:34:9c:5b:6d:6b:23:
         90:e4:c4:23:6d:61:46:b2:09:53:9f:b9:eb:eb:b1:4c:08:67:
         c6:2d:ae:c3:cd:e1:e2:6c:97:09:7e:2f:46:d5:02:40:81:9d:
         68:4f:cb:80:7a:82:61:35:2f:33:28:6c:2d:60:de:ec:da:6e:
         0e:43:f4:e3:6b:88:cb:bf:a8:c0:f5:16:b1:88:63:57:4e:23:
         c3:1c:eb:a8:bb:34:f8:c1:a2:88:95:14:fe:a2:be:a1:c1:30:
         ae:d5:b2:1a:38:5f:b1:9d:63:e0:d8:fc:2f:69:2c:d4:5a:4b:
         f4:0f:e0:ad:9e:ab:a2:95:82:be:1d:70:e5:4c:92:18:50:87:
         87:1f:04:04:ba:12:12:12:c4:25:c5:bc:c0:1d:8d:a2:43:f4:
         c3:b2:71:e4:18:d4:f5:af:24:26:5e:e0:a2:94:0f:b9:44:46:
         43:c3:7c:4e:03:ac:b5:e7:09:2d:08:5e:a9:cf:ed:85:61:b7:
         d3:b8:a1:df:35:35:1f:91:c4:de:9a:61:d8:08:d1:dc:4a:56:
         bb:85:27:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:15:40 2026 by rpki-client