Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/471E9C908DB811E98ACC9F7EC4F9AE02.roa
File:                     471E9C908DB811E98ACC9F7EC4F9AE02.roa (raw, json)
Hash identifier:          orYv1OKaU29M4Ne+KHXNUOifDh8/09Tj4r+taY2EwcQ=
Subject key identifier:   69:CD:5A:9A:D4:4F:C2:A2:02:CC:ED:D2:36:D4:CC:F0:95:58:E5:5F
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       36FF
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/471E9C908DB811E98ACC9F7EC4F9AE02.roa
Signing time:             Thu 30 Jul 2026 15:11:16 +0000
ROA not before:           Thu 30 Jul 2026 15:11:16 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     45471
IP address blocks:        58.181.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 14:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14079 (0x36ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 30 15:11:16 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6b6994-4d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:43:fd:52:b8:7d:c6:56:d0:80:92:65:aa:69:
                    e6:53:13:4e:f3:51:81:9d:62:a8:74:e3:5f:36:0a:
                    cf:b0:96:1b:27:70:27:c9:00:32:a5:5e:99:e3:b3:
                    ee:4c:97:6a:0a:d3:e0:42:98:91:02:b6:0d:f6:ab:
                    6e:46:85:8b:6d:c3:57:b8:a4:b8:37:73:37:37:94:
                    64:f8:b9:a0:bb:dc:60:71:3b:37:1b:22:ea:58:fe:
                    08:dd:2d:47:de:1f:b2:ac:7c:79:9d:1e:d6:a4:bf:
                    82:d2:d6:4f:d7:ed:62:6a:ca:6c:52:f2:c1:2d:63:
                    f8:f4:8b:76:1a:7c:e2:2e:dc:83:6b:33:7f:5e:98:
                    28:e5:c4:0b:b9:69:db:8f:05:da:ac:ec:6b:f6:5b:
                    0f:65:02:af:70:63:a7:4c:4e:f4:67:a6:ad:27:58:
                    09:56:56:63:87:77:9a:24:fe:66:cb:f5:e9:3f:07:
                    4d:f4:77:51:b7:1e:b8:d8:bc:46:1c:63:eb:ee:fb:
                    b0:fc:0a:14:93:8e:d6:1e:b5:bd:d2:e9:78:d5:56:
                    a5:a3:23:4c:fb:b1:ad:d8:a3:e6:ba:d0:fd:42:f0:
                    51:de:fe:24:81:3e:00:86:a9:69:9f:cd:fd:09:2f:
                    68:c5:1e:7a:b0:d8:ad:a1:0f:a7:9a:e9:a9:3d:6d:
                    9f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CD:5A:9A:D4:4F:C2:A2:02:CC:ED:D2:36:D4:CC:F0:95:58:E5:5F
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/471E9C908DB811E98ACC9F7EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.181.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:dd:40:70:5a:74:6c:b1:93:03:24:3c:72:ea:38:5c:62:57:
         f2:9f:1b:3c:00:96:c5:c1:e7:29:a7:c8:65:07:aa:cb:7e:0e:
         dd:52:40:4b:9e:10:a1:61:12:4d:b5:11:df:87:d3:76:d3:35:
         ef:83:2a:41:ae:74:9f:ea:4e:0e:e6:8b:22:33:65:71:b1:7f:
         c9:5e:84:84:d0:f2:2b:12:d1:67:b2:ec:71:13:06:b1:15:6d:
         65:54:f9:95:69:62:6a:6c:19:a9:4c:a1:5c:f2:70:ba:d6:84:
         95:44:dc:7d:d9:ab:46:37:94:0a:d4:99:f4:eb:ab:54:73:42:
         8f:73:63:20:5b:88:84:56:d1:4c:df:6a:15:e2:9c:09:c5:c0:
         4b:ec:6b:8c:29:d6:24:1e:af:3e:3d:67:f0:10:ec:73:9b:e0:
         c7:c4:fb:22:9b:79:62:92:cd:9b:a0:b8:d4:5c:6a:d6:33:dd:
         b0:0d:fc:da:3c:c3:81:28:a0:4b:f5:88:2b:72:d6:d2:4a:1a:
         50:67:fe:5c:2f:b2:e6:01:62:62:87:75:65:82:e4:bc:63:65:
         e3:76:98:2b:a9:0c:84:8a:ba:6a:d7:3a:0e:e1:d3:29:db:e2:
         5f:01:01:ac:02:e9:6c:36:8b:eb:f2:ab:7f:9b:27:1a:64:ff:
         bc:d3:39:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 19:50:03 2026 by rpki-client