Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8CBB3EA2D06911F09735DD48C4F9AE02.roa
File:                     8CBB3EA2D06911F09735DD48C4F9AE02.roa (raw, json)
Hash identifier:          +Arso+69nLarMmEU/IOayMbbqv3xvIJGrDJr2ozNEC0=
Subject key identifier:   39:E1:18:0A:02:D5:6B:B6:89:68:5D:33:E2:61:E7:DF:36:2B:18:52
Certificate issuer:       /CN=A91100B2/serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Certificate serial:       FE
Authority key identifier: BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8CBB3EA2D06911F09735DD48C4F9AE02.roa
Signing time:             Fri 04 Sep 2026 19:39:21 +0000
ROA not before:           Fri 04 Sep 2026 19:39:21 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     140570
IP address blocks:        79.109.236.0/22 maxlen: 22
                          79.109.236.0/24 maxlen: 24
                          79.109.237.0/24 maxlen: 24
                          79.109.238.0/24 maxlen: 24
                          79.109.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
                          rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91100B2, serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
        Validity
            Not Before: Sep  4 19:39:21 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9b1e69-0b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d8:e6:ef:80:3f:30:e8:43:49:fc:c8:c7:20:
                    73:04:7a:11:22:0a:49:e2:ce:db:5c:45:91:8a:56:
                    cd:ad:99:1a:ce:d7:74:cc:4a:17:3c:4c:21:3f:84:
                    ef:74:79:f3:c5:77:80:55:21:9a:f6:e0:f6:fd:2e:
                    36:d1:5e:e5:b5:27:e7:0b:9a:10:ff:8f:e3:da:cc:
                    e6:e6:68:2d:99:d5:a4:a7:c4:64:49:d6:fe:04:f3:
                    39:6c:9b:03:05:ec:db:9d:1a:dd:d7:bf:46:4d:80:
                    80:ed:84:fe:4a:49:ea:d8:74:c5:58:b1:80:9f:7b:
                    31:00:30:c7:c1:05:0f:d9:51:b8:87:4b:9c:8c:8a:
                    b7:2b:38:e3:1b:68:3c:cf:8d:1f:66:4d:49:6d:7c:
                    9c:4f:ee:d6:3e:93:9c:bc:cc:ed:9e:8b:98:cb:4a:
                    d1:1d:e8:5a:d3:7b:b2:0c:48:d3:e3:e1:9c:0f:49:
                    0e:45:71:e1:67:89:81:9f:1c:20:fc:fe:62:83:08:
                    5e:1b:d7:82:24:3a:9d:68:9d:75:b1:82:22:9d:c4:
                    5d:08:50:52:fb:56:0c:dc:7d:8a:5a:6e:32:8b:e1:
                    31:ff:20:ad:7e:c4:b2:66:16:4e:f3:49:17:c9:45:
                    a9:c0:67:60:4d:e7:88:7c:ba:23:fb:c7:8d:94:2a:
                    5c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E1:18:0A:02:D5:6B:B6:89:68:5D:33:E2:61:E7:DF:36:2B:18:52
            X509v3 Authority Key Identifier:
                keyid:BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8CBB3EA2D06911F09735DD48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.109.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:5e:79:70:1d:7d:03:53:08:e6:4c:e4:2d:20:4e:dc:28:64:
         17:48:0a:4f:c8:0f:2a:7e:19:8b:5a:ed:14:a1:e1:ec:e9:94:
         c7:58:03:02:c3:2b:34:0e:f6:e0:77:0e:60:b9:92:1c:af:39:
         4e:d0:52:04:95:8d:82:d0:91:65:3d:1c:88:5c:da:9e:7c:b8:
         ee:74:b1:eb:ea:03:96:8a:2b:0d:bd:bc:a8:d9:ae:d1:1f:77:
         44:66:b3:27:e5:8c:ad:fc:d5:bf:c0:d4:5d:b7:8d:6e:b7:54:
         9b:e3:a6:36:7a:7b:ad:7e:e4:14:e0:51:8c:8d:95:0a:27:de:
         c8:a3:1d:1b:37:ff:b9:99:05:d7:c4:4a:40:e4:24:3e:8f:6c:
         18:8a:ae:47:0e:da:30:36:d5:ec:1a:84:bb:7c:17:2a:3e:f4:
         f3:60:8a:51:81:33:3a:8d:04:3a:db:ea:fa:38:06:2a:87:cb:
         c5:58:d1:68:31:4a:2f:bd:9a:04:02:f1:bc:b6:c3:2b:f5:24:
         e5:2d:65:0b:57:be:9b:1c:38:9e:3d:4f:c4:68:56:b4:a1:36:
         f9:a7:18:e5:9f:57:12:fe:1e:a0:5c:c5:af:f0:f5:92:c0:1c:
         fe:a9:1f:77:d6:16:67:4e:29:01:b6:16:5d:17:52:89:10:aa:
         3d:ad:1d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:45:01 2026 by rpki-client