Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/703D5E5CE0D811F0B739A402566F56BC.roa
File:                     703D5E5CE0D811F0B739A402566F56BC.roa (raw, json)
Hash identifier:          EXGMDgUny2lIb1ISnhH8aSCHAO+p29oRPP6YDU6d7T4=
Subject key identifier:   34:68:4A:21:48:92:26:E1:5D:BD:B9:5D:50:68:D2:A3:24:10:A2:DF
Certificate issuer:       /CN=A91100B2/serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Certificate serial:       0100
Authority key identifier: BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/703D5E5CE0D811F0B739A402566F56BC.roa
Signing time:             Fri 04 Sep 2026 19:39:25 +0000
ROA not before:           Fri 04 Sep 2026 19:39:25 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     152475
IP address blocks:        79.109.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
                          rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91100B2, serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
        Validity
            Not Before: Sep  4 19:39:25 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9b1e6d-b23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:d0:ca:a3:cf:c9:77:56:08:65:7c:12:e0:
                    01:2c:bc:10:0e:d9:d4:f4:4a:3e:7b:94:b0:8c:0c:
                    a8:da:a0:ca:44:20:ba:ab:40:78:28:94:11:4f:aa:
                    9d:f2:da:76:6c:ac:da:30:53:f9:1c:74:dc:93:09:
                    15:42:9d:9d:00:5d:75:da:6b:32:48:54:b2:fc:56:
                    33:c8:cd:da:de:ac:48:14:91:92:ab:05:e3:33:9b:
                    83:20:12:29:e2:a4:2c:7e:94:e7:04:dc:05:9f:a4:
                    2a:c9:11:59:46:11:f9:34:1e:f2:67:45:ae:98:b3:
                    ad:c8:2d:9b:e2:08:82:59:83:48:67:dd:ad:72:25:
                    3a:55:bb:10:57:f1:91:e1:8d:9e:be:3f:f3:20:52:
                    c8:1e:35:62:51:17:68:12:89:a0:6d:08:12:ae:66:
                    a3:32:22:b4:7c:c7:52:88:57:90:c2:3b:c6:4a:6a:
                    30:b6:7a:1d:da:4d:a7:3e:31:ee:b2:af:94:65:68:
                    08:94:54:5b:9b:eb:be:94:db:73:52:a5:3b:68:5a:
                    a9:6d:9d:01:8f:35:a4:7f:bd:a0:60:b2:54:f3:bc:
                    51:c4:f4:fc:4d:c5:9f:b1:24:88:3d:03:c9:42:89:
                    f1:3e:90:6b:5f:64:32:e5:5d:22:91:24:83:f4:88:
                    88:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:68:4A:21:48:92:26:E1:5D:BD:B9:5D:50:68:D2:A3:24:10:A2:DF
            X509v3 Authority Key Identifier:
                keyid:BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/703D5E5CE0D811F0B739A402566F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.109.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:7d:b2:e6:6d:1d:3f:ee:55:c8:ce:23:1f:64:4e:d1:6e:55:
         53:09:ae:84:41:c5:04:47:8b:d7:87:ff:82:51:49:e7:6e:36:
         a3:4e:74:77:9f:d5:bf:6f:32:4e:94:7b:df:65:11:3d:18:44:
         86:ec:94:67:25:61:00:96:a3:d8:fd:ca:f7:d6:d7:a3:e4:92:
         e0:d9:90:64:92:5c:e1:75:47:44:f8:32:2c:23:dd:ef:f3:70:
         b1:43:68:c2:1b:37:b6:c4:8b:55:4d:96:ef:d3:d0:0d:aa:32:
         2b:f7:55:c1:70:8a:e1:a7:44:30:d9:41:87:e9:57:85:70:34:
         0b:90:e9:8b:49:bf:1d:34:ba:61:b6:29:9b:b3:57:96:cd:73:
         48:3b:f8:86:ba:1a:0b:0a:78:59:fa:7f:b5:80:0b:89:1f:e0:
         31:24:33:48:0f:54:01:90:20:9f:0e:32:7f:af:3d:bf:e5:08:
         b4:f3:ed:ec:d8:f4:72:df:2d:81:6f:0e:c8:43:a1:68:3f:11:
         67:2c:28:5d:c1:cb:a7:d2:01:2e:27:ff:7e:f7:15:3f:db:a6:
         e2:8a:a7:d7:4a:39:fb:5c:a1:23:8e:24:0a:e8:ec:2f:d2:09:
         d5:95:e4:d8:98:f4:a5:f4:4a:79:8d:f8:bf:1d:19:cf:93:33:
         80:4b:75:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:47:36 2026 by rpki-client