Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/79F7221E892911EF896D1145C4F9AE02.roa
File:                     79F7221E892911EF896D1145C4F9AE02.roa (raw, json)
Hash identifier:          OR8jcGTbV0bFVy9IlsqFXRkqlclLb5Iptk5F3JoFORI=
Subject key identifier:   89:D4:7E:AF:F8:1C:8F:FA:4D:C4:6F:4E:21:FF:FB:01:46:2C:B2:00
Certificate issuer:       /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Certificate serial:       01A2
Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/79F7221E892911EF896D1145C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:39:10 +0000
ROA not before:           Thu 01 May 2025 04:41:29 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     45179
IP address blocks:        43.239.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
                          rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 03:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91348C9, serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
        Validity
            Not Before: May  1 04:41:29 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a584ee-e875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fe:00:11:e4:88:7e:d1:5c:4a:4e:7a:98:ee:
                    e6:23:d0:d9:8e:36:0b:52:bc:1a:91:a4:c8:8b:0a:
                    c2:78:4d:d8:50:7f:38:0a:10:6b:11:71:fa:9e:f0:
                    ae:bc:3d:bd:be:59:a3:46:b3:8c:56:99:51:5e:1f:
                    34:0b:71:a9:8c:4f:cb:39:a4:b9:b0:18:ae:fa:f4:
                    b6:a2:ee:10:6b:4a:57:38:87:1a:69:9d:58:49:7b:
                    ee:28:b0:7e:32:8c:ff:36:66:c5:81:26:23:8d:47:
                    32:b2:a5:dc:a5:98:32:82:13:77:d5:ac:9a:87:2b:
                    0a:03:27:f9:2a:ce:1d:a0:c6:cc:93:e1:c6:b6:56:
                    a6:d2:5b:29:52:2f:81:08:dd:e4:ee:a7:b4:ba:36:
                    47:43:d2:ec:70:cc:c0:b2:97:6c:ec:84:33:a2:dd:
                    8f:e6:f5:7a:6e:ec:8b:cd:25:06:5f:5f:c1:5b:96:
                    25:b5:84:66:1d:26:a1:1b:e0:cf:7d:65:52:7e:06:
                    23:a9:1c:f9:50:07:34:27:72:8a:33:98:fb:d9:8c:
                    17:e8:89:5e:ab:c0:39:b6:9e:61:7d:7a:8e:e1:db:
                    5c:5a:e6:10:db:a9:7f:f0:50:95:63:e2:35:9a:bf:
                    dc:82:b5:c0:e4:ae:d7:58:13:0c:2e:bc:68:4e:d0:
                    64:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D4:7E:AF:F8:1C:8F:FA:4D:C4:6F:4E:21:FF:FB:01:46:2C:B2:00
            X509v3 Authority Key Identifier:
                keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/79F7221E892911EF896D1145C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:21:74:c4:a0:5d:cf:f7:4c:dc:f5:31:1b:f8:7b:5f:0b:ae:
         22:e0:59:5c:c1:38:3a:c2:64:bc:df:a0:7d:ad:bb:ec:50:80:
         c3:db:24:ae:d5:45:9b:8b:b2:1c:2e:a0:b2:bb:e8:2e:01:c6:
         02:49:eb:67:a1:64:83:27:df:0c:4b:c6:0d:08:78:61:1c:f5:
         9e:1f:ef:ba:66:07:3e:e1:55:bc:66:2b:d3:4d:29:c4:b4:91:
         26:19:dc:b7:8f:9b:23:0d:51:16:0c:13:98:5f:0d:df:f3:16:
         20:53:c4:05:7f:99:8c:df:fe:67:d1:68:3f:55:75:89:65:21:
         8f:e2:5b:3f:8f:82:dd:31:6f:40:4b:a3:97:6d:45:34:92:5b:
         87:9f:c0:86:b8:b6:e1:41:1a:9d:88:5a:02:2b:ae:b7:b4:7a:
         05:ce:ce:2f:52:5e:d2:40:db:86:25:3e:a6:fb:7d:46:33:bd:
         d0:7e:b7:2d:0d:4c:cf:d8:a4:ad:8d:cc:4b:1a:e0:2b:1a:98:
         b0:a6:d4:bc:05:f5:f5:95:61:56:27:4a:9e:c3:ab:48:84:98:
         c5:d8:04:e3:9f:42:8a:e7:8d:3d:da:a3:11:0f:8c:cf:c3:9f:
         4e:e5:f3:f6:10:a6:b4:51:d9:7f:5b:0c:b1:d5:3a:d7:64:5a:
         66:82:87:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:11:34 2026 by rpki-client