Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/79FB87E45BE811F1A1050E64C6833773.roa
File:                     79FB87E45BE811F1A1050E64C6833773.roa (raw, json)
Hash identifier:          NWwclcZCcPG2TS1pQpW1RR20GoSP1Iy5BozZgf751Lw=
Subject key identifier:   3D:B2:2A:9E:61:76:84:B5:43:4C:F4:C4:E1:BB:D7:B5:17:CA:83:43
Certificate issuer:       /CN=A912698E/serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C
Certificate serial:       D8
Authority key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/79FB87E45BE811F1A1050E64C6833773.roa
Signing time:             Sat 30 May 2026 05:29:06 +0000
ROA not before:           Sat 30 May 2026 05:29:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137263
IP address blocks:        205.210.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl
                          rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 17:35:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C
        Validity
            Not Before: May 30 05:29:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a1a75a2-6bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:40:e3:4d:b2:ec:91:a2:c0:3b:00:30:a1:43:
                    5a:10:88:9b:b6:80:2d:88:53:b1:15:59:fe:55:ef:
                    57:10:7e:a7:f9:25:29:cb:e5:c1:5e:b4:fb:d2:ff:
                    55:a6:16:cd:3f:e9:07:12:65:1c:d0:26:2c:25:82:
                    43:3a:a3:07:d1:00:a4:30:06:6e:13:c9:14:3d:da:
                    19:e4:c4:d5:eb:a6:f6:2d:d8:10:9a:97:bc:e1:e0:
                    b3:28:6b:97:6d:aa:3a:55:56:9c:5e:59:30:78:46:
                    56:3e:de:91:3b:99:7f:7e:fb:19:5d:3a:26:80:20:
                    4b:57:a0:f8:87:67:09:3c:11:f1:87:23:76:82:f5:
                    82:f3:fe:78:20:1f:c6:49:96:51:78:32:bc:2a:0f:
                    37:d1:d0:cb:91:c8:72:41:7f:48:f6:cf:24:82:d1:
                    0a:db:87:dc:8d:45:d1:23:2a:ea:59:ab:bc:70:dc:
                    ff:b9:bd:35:d5:80:a2:77:38:f6:fa:52:e4:ea:f6:
                    0f:02:84:e3:e0:69:ba:f6:dd:9d:60:be:cd:68:1d:
                    7b:d1:ab:d3:5b:01:d2:4b:05:d4:73:92:c4:07:12:
                    a6:7e:95:9c:e8:99:4c:8c:92:ee:75:65:01:76:70:
                    4a:35:b0:10:19:4e:52:db:3c:bc:d4:59:d5:10:72:
                    17:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B2:2A:9E:61:76:84:B5:43:4C:F4:C4:E1:BB:D7:B5:17:CA:83:43
            X509v3 Authority Key Identifier:
                keyid:5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/79FB87E45BE811F1A1050E64C6833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.210.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:ba:3b:dc:87:ac:90:42:d8:a4:92:7b:2d:8a:d8:fe:68:32:
         54:06:4f:53:4c:c0:76:6e:0d:43:24:eb:22:3a:74:70:c8:2b:
         f0:0c:83:bf:04:b3:79:c5:7a:2c:b4:2b:7d:8c:75:53:aa:84:
         fa:a2:0e:6f:33:c3:08:05:96:c6:d7:2d:f7:bc:61:18:ac:ff:
         0a:4c:9c:26:1d:cf:ff:27:12:61:30:ba:aa:68:c5:d5:0b:1f:
         cb:30:f9:95:7c:46:a8:0f:ad:46:40:b2:af:dd:60:de:25:8f:
         ba:1a:28:20:a6:56:6f:43:bf:c3:10:12:89:98:ce:41:60:fa:
         4e:a4:57:55:59:85:a1:ab:bc:74:69:18:33:0e:4a:22:ce:a4:
         25:9e:da:79:6d:ab:52:f5:9f:be:66:ee:f9:95:71:ce:ee:d1:
         41:ef:7a:26:d7:b5:6e:e8:f5:17:5a:5b:a7:b6:9f:96:14:a3:
         7c:99:e8:68:22:59:2c:b7:0b:53:36:01:f9:46:43:af:f7:52:
         c7:d3:68:d1:e0:fa:35:2a:8f:2d:aa:45:38:46:e8:bb:80:13:
         4a:d4:c4:cf:0f:bb:79:58:7d:8c:27:ff:7f:20:ed:8f:5e:84:
         33:8f:66:5c:69:a9:91:5b:e6:1f:20:0d:d9:44:bb:a5:65:b8:
         93:ad:46:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:33:02 2026 by rpki-client