Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/26787AF65D6D11F1AC5A3C58BE833773.roa
File:                     26787AF65D6D11F1AC5A3C58BE833773.roa (raw, json)
Hash identifier:          aAazDlvlst4QJf10A0nu+4NUqP8Vp7PTtF9Qpr/s7GM=
Subject key identifier:   F1:88:18:18:6D:BB:15:A1:0D:F2:78:60:28:F5:C8:3B:C3:81:6E:5A
Certificate issuer:       /CN=A9119D72/serialNumber=61E1DC65FD6AC4DBEA6AFA3001812AB1CEA1DB8F
Certificate serial:       02
Authority key identifier: 61:E1:DC:65:FD:6A:C4:DB:EA:6A:FA:30:01:81:2A:B1:CE:A1:DB:8F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YeHcZf1qxNvqavowAYEqsc6h248.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/26787AF65D6D11F1AC5A3C58BE833773.roa
Signing time:             Mon 01 Jun 2026 03:51:21 +0000
ROA not before:           Mon 01 Jun 2026 03:51:20 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     4764
IP address blocks:        144.79.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.crl
                          rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YeHcZf1qxNvqavowAYEqsc6h248.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 03:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119D72, serialNumber=61E1DC65FD6AC4DBEA6AFA3001812AB1CEA1DB8F
        Validity
            Not Before: Jun  1 03:51:20 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a1d01b8-69e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a9:e3:c8:65:f1:6c:2f:29:5d:ca:22:54:de:
                    49:07:f0:f6:6c:b0:b4:ae:18:f2:cf:f2:9f:e3:0d:
                    f9:55:36:40:a8:85:79:ae:ff:46:c4:b7:86:db:6c:
                    dc:c2:56:ed:fd:c8:c7:a6:b8:da:1a:dc:b6:fc:3e:
                    fc:76:7a:30:c4:16:72:4b:64:07:cf:33:c0:1c:14:
                    a1:e4:b9:da:94:f4:ba:a7:1d:35:b0:d4:12:b2:5d:
                    50:3b:7a:1f:73:21:b9:fe:c2:1c:16:e5:7c:24:22:
                    0a:2b:c7:24:3e:b2:43:4b:43:3f:e3:54:44:5d:fe:
                    be:83:b1:2a:d9:1b:f1:c7:0e:47:60:50:51:dd:c8:
                    9c:c8:1c:0f:6e:92:e5:7b:11:b6:7b:d1:93:9b:08:
                    8c:9e:db:f1:ab:a5:3d:95:9c:e7:09:5b:68:53:7e:
                    3d:90:4f:90:57:50:53:bd:0f:e5:73:ee:09:eb:7a:
                    43:16:27:46:0f:04:3a:e7:bf:fc:9e:26:30:86:f9:
                    5e:84:4e:12:39:76:fb:18:bd:08:46:a9:0a:e2:e8:
                    33:04:11:ec:0d:03:6c:01:9c:6f:39:d3:1e:d8:81:
                    20:f9:70:7b:47:74:72:19:3c:d9:65:8a:20:93:52:
                    68:a4:9c:39:05:e0:23:ad:a7:3f:ce:91:f3:58:30:
                    09:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:88:18:18:6D:BB:15:A1:0D:F2:78:60:28:F5:C8:3B:C3:81:6E:5A
            X509v3 Authority Key Identifier:
                keyid:61:E1:DC:65:FD:6A:C4:DB:EA:6A:FA:30:01:81:2A:B1:CE:A1:DB:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/YeHcZf1qxNvqavowAYEqsc6h248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YeHcZf1qxNvqavowAYEqsc6h248.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119D72/36A534565D6C11F191B7164DBE833773/26787AF65D6D11F1AC5A3C58BE833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:14:57:06:db:f7:0e:94:4f:04:0a:8d:38:dd:d9:8f:08:c2:
         50:9e:a1:01:2b:e6:1e:c6:0f:13:6a:51:6c:1c:00:eb:a7:4e:
         49:93:bc:95:53:fc:10:48:35:2e:4a:fd:fb:49:58:42:ae:09:
         c1:40:1a:5c:28:12:3e:6a:5c:23:b6:6e:22:ee:74:02:23:c5:
         e0:5d:48:9a:9f:12:81:fa:95:44:36:1f:83:17:03:53:c7:19:
         8f:ef:61:19:d9:d7:bf:a5:cb:f0:36:a3:40:73:36:78:fa:26:
         78:03:6f:35:60:e6:1c:75:ee:71:61:5f:03:99:f2:06:cc:4d:
         ee:cd:24:e3:03:57:ed:91:b1:b7:a2:ac:ab:ca:6f:44:dd:37:
         0d:8f:6d:eb:f6:c6:a5:6b:27:1a:ec:f7:7a:05:51:4d:fa:45:
         07:66:17:04:1e:99:6f:b8:07:2f:6d:33:5c:7c:14:80:d8:aa:
         73:be:97:4c:88:68:58:45:3c:3b:e0:09:fb:fe:1a:4e:92:17:
         3e:e1:34:a2:4d:bd:68:4f:d5:0d:90:a5:b3:fa:f0:38:16:70:
         87:16:1e:64:3f:ec:f4:b6:98:ee:17:01:54:f8:06:04:3c:11:
         b0:b4:22:78:2b:49:f4:f9:8f:15:f7:c3:6b:19:db:8a:5e:de:
         ac:4d:ca:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:32:38 2026 by rpki-client