Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/8038DB82BCD411F1A81F77143511F970.roa
File:                     8038DB82BCD411F1A81F77143511F970.roa (raw, json)
Hash identifier:          +uFzQciPvxgh/je7bv4v6W/xPiJxE8mzr7j7+oesDsY=
Subject key identifier:   99:A3:24:E3:B7:D3:73:83:6C:DB:A8:12:7E:74:A3:0E:CE:DD:6C:02
Certificate issuer:       /CN=A91556B2/serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088
Certificate serial:       1B
Authority key identifier: DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/8038DB82BCD411F1A81F77143511F970.roa
Signing time:             Wed 30 Sep 2026 13:40:30 +0000
ROA not before:           Wed 30 Sep 2026 13:40:30 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     138542
IP address blocks:        79.109.0.0/24 maxlen: 24
                          79.109.2.0/23 maxlen: 23
                          79.109.7.0/24 maxlen: 24
                          79.109.16.0/20 maxlen: 20
                          79.109.32.0/19 maxlen: 19
                          79.109.64.0/18 maxlen: 18
                          79.109.128.0/18 maxlen: 18
                          79.109.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl
                          rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 09:32:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91556B2, serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088
        Validity
            Not Before: Sep 30 13:40:30 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd114d-d2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fb:c3:f5:8f:cb:b8:b0:90:17:29:fe:8c:57:
                    26:97:9d:7a:eb:e5:39:5d:52:bb:93:ba:65:88:9f:
                    e8:e4:72:37:bd:bf:18:e8:0a:88:f3:a3:55:5c:90:
                    49:bc:f3:b4:5f:9e:e3:52:ce:34:ca:6f:8f:8a:9c:
                    b6:c8:f1:39:0d:1a:2a:df:9a:d8:19:ff:84:b6:1b:
                    7c:2d:84:0d:53:ca:43:6e:cf:f0:ac:06:27:dc:11:
                    82:ed:3f:8a:a5:00:97:e8:5a:89:17:07:97:c6:d4:
                    9d:e3:a9:5e:9e:46:aa:4f:07:83:4a:3d:db:ff:19:
                    de:70:2e:7f:8b:cb:8d:ff:70:23:b7:29:b2:e9:ff:
                    58:e3:77:72:ad:96:a8:8c:38:8f:0a:0b:3a:fa:9a:
                    a4:b2:da:b4:b0:a2:a4:50:af:02:f4:ab:19:a7:d0:
                    0b:5a:20:69:f8:20:69:2d:e9:a9:53:43:75:87:9e:
                    43:b9:58:c8:02:9e:9d:ac:d5:7c:a7:6c:4b:89:a3:
                    d7:11:16:de:25:df:97:13:51:69:78:ce:34:cf:3b:
                    26:22:d3:ee:96:3d:a9:8f:94:fb:13:3d:ca:6c:8e:
                    83:18:13:70:ed:9c:62:4c:e8:d8:13:27:8b:d8:93:
                    c9:37:c9:bb:6f:a3:60:f3:38:20:d8:e7:8b:9a:5d:
                    e5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A3:24:E3:B7:D3:73:83:6C:DB:A8:12:7E:74:A3:0E:CE:DD:6C:02
            X509v3 Authority Key Identifier:
                keyid:DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/8038DB82BCD411F1A81F77143511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.109.0.0/24
                  79.109.2.0/23
                  79.109.7.0/24
                  79.109.16.0-79.109.223.255

    Signature Algorithm: sha256WithRSAEncryption
         18:35:76:3f:e9:7b:5e:fb:08:da:47:6b:81:cd:4b:af:69:56:
         2a:7b:27:e8:43:11:5e:0c:7f:89:cc:13:fd:57:a1:b3:36:eb:
         74:02:9c:06:3d:18:f4:2a:62:ff:23:1e:d1:c9:dc:1e:ff:b8:
         61:25:5d:4c:ae:21:a8:2d:0d:a9:6e:f7:86:96:30:6d:9f:1b:
         ea:91:ce:57:a0:5a:a2:ed:e4:9b:2c:83:70:5b:f0:c6:03:fd:
         a1:be:cf:03:8b:dc:d5:e2:27:41:16:74:d6:c1:9d:56:02:96:
         80:38:45:34:5b:65:fa:fe:a0:90:bf:ca:49:d1:4f:12:73:cd:
         4a:6c:a8:04:ff:c7:d8:c7:18:c2:ec:b9:35:56:81:f0:3d:a9:
         e2:70:13:1d:57:24:ad:48:a3:a5:c7:db:a8:08:e8:8a:2a:98:
         c8:9a:c2:5b:0d:1a:fc:00:74:2f:19:17:3b:28:d3:58:8e:a8:
         b0:74:41:3e:fd:e0:c2:09:9a:5a:84:95:44:3e:26:99:9a:4c:
         c5:19:30:1e:bd:85:ae:78:bc:6b:51:df:37:b7:83:95:b2:42:
         64:59:72:0e:da:f1:4f:f9:3d:c8:56:a1:83:5d:d4:16:f5:0d:
         b5:04:7b:e9:48:d1:4f:1a:96:fe:fb:ec:c4:27:aa:3a:75:2f:
         a9:80:6e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:47:30 2026 by rpki-client