Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/E5163B82AA8A11F1B24D5C986C11F970.roa
File:                     E5163B82AA8A11F1B24D5C986C11F970.roa (raw, json)
Hash identifier:          xhcHEPURG9+lzbo3uoCbCYX9fbPEr9b8rbLdKw7DUTc=
Subject key identifier:   51:F5:90:47:35:8E:76:DA:E3:47:9C:19:F2:B7:D2:E1:77:1C:64:29
Certificate issuer:       /CN=A91556B2/serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088
Certificate serial:       0B
Authority key identifier: DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/E5163B82AA8A11F1B24D5C986C11F970.roa
Signing time:             Mon 07 Sep 2026 07:08:15 +0000
ROA not before:           Mon 07 Sep 2026 07:08:15 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     152475
IP address blocks:        79.109.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl
                          rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 09:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91556B2, serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088
        Validity
            Not Before: Sep  7 07:08:15 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9e62df-9d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a9:cf:78:0b:c3:33:1b:31:85:cc:c8:11:e6:
                    92:75:d4:18:12:af:ed:fa:8a:f7:3b:0f:a8:47:2e:
                    0e:d6:e8:66:11:c3:00:e5:af:0b:8a:fe:72:3b:3f:
                    d7:2e:83:e9:36:e0:63:ff:c5:e8:fe:83:a1:40:87:
                    ac:5f:90:22:e6:5b:83:19:2e:16:83:69:59:79:57:
                    53:0b:d6:01:d4:27:14:ff:f0:d7:7b:83:70:d8:1e:
                    c7:7a:54:77:c2:9c:c9:8e:21:db:68:b7:32:5b:2a:
                    ce:44:8f:8d:60:d5:86:3f:8a:77:76:93:94:4f:58:
                    25:c6:43:d3:63:18:b1:e7:40:c9:ca:b4:0e:bb:e6:
                    b4:9f:8e:e9:59:58:42:4e:a1:4f:34:92:c1:41:eb:
                    d9:05:e7:08:98:36:a6:09:1d:49:39:f8:60:6b:e7:
                    e3:e6:9d:79:0e:d5:a1:0f:fb:b5:33:d3:ed:f7:73:
                    7b:c4:5b:0b:30:80:68:bc:cf:0c:24:95:ce:09:0a:
                    34:a6:80:91:31:a0:cf:04:ad:c0:90:46:31:34:97:
                    7b:bf:83:c9:32:44:7b:f9:9f:3a:67:ad:5f:35:ea:
                    60:a6:85:66:22:e8:61:64:6b:e2:64:35:86:9d:d4:
                    cc:3f:ef:a8:eb:73:cc:56:88:7f:39:79:56:dc:99:
                    36:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F5:90:47:35:8E:76:DA:E3:47:9C:19:F2:B7:D2:E1:77:1C:64:29
            X509v3 Authority Key Identifier:
                keyid:DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/E5163B82AA8A11F1B24D5C986C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.109.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:7f:f9:e9:99:6e:cc:d3:70:ff:bd:01:46:a4:fe:28:5b:b9:
         4b:00:4c:e1:c9:d9:51:95:27:af:57:f1:31:ab:46:35:75:48:
         da:5f:c9:d8:88:61:cc:42:06:2f:8b:c3:a6:5e:58:16:ed:43:
         ac:cc:cd:e4:fb:70:50:b8:49:a2:72:b0:e7:f3:4f:37:60:56:
         d3:55:ef:c9:c7:a7:be:e0:a9:cb:20:ef:f4:ea:35:b3:ac:c5:
         a3:2f:7d:87:ee:81:39:7a:a8:8e:9a:fb:36:eb:af:13:0b:9c:
         17:00:35:cc:55:da:3b:c7:46:6c:70:da:c4:2f:9f:41:b3:fa:
         7e:5b:48:00:8d:b9:d6:51:79:0d:79:79:e3:33:b3:f8:56:b5:
         63:ab:1e:1a:1e:1e:b7:3e:c6:1b:f7:9f:51:95:88:c2:ba:5d:
         ed:ff:56:42:29:9a:34:f1:7c:73:ef:a1:e3:47:8e:51:9f:b9:
         15:79:0b:ad:f7:31:79:f8:91:2f:50:ed:b5:66:73:92:d3:b7:
         6c:d8:54:05:bd:0b:90:83:92:42:0e:12:4b:91:a3:be:83:80:
         3d:23:6c:7d:b1:e6:e0:cd:7b:a5:66:e0:89:85:11:76:c1:9e:
         b7:9e:00:5a:31:7b:f8:ab:ee:03:7c:a8:7d:7f:a6:ba:29:22:
         91:3b:4a:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 8 17:44:02 2026 by rpki-client