Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/031A6E544E9311F19004C0C7A2EE528E.roa
File:                     031A6E544E9311F19004C0C7A2EE528E.roa (raw, json)
Hash identifier:          XSk8TRLnQcnajyyzxwmOeH2VC1E5ZNDxh6cE4PqtTW8=
Subject key identifier:   B0:A6:66:67:45:FD:5E:F6:B5:6C:31:36:1F:7F:9A:CD:F6:8F:94:99
Certificate issuer:       /CN=A91758DF/serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
Certificate serial:       4B
Authority key identifier: DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/031A6E544E9311F19004C0C7A2EE528E.roa
Signing time:             Sun 16 Aug 2026 20:41:10 +0000
ROA not before:           Sun 16 Aug 2026 20:41:10 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     14593
IP address blocks:        179.65.0.0/17 maxlen: 24
                          179.65.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl
                          rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF, serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
        Validity
            Not Before: Aug 16 20:41:10 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a822066-89c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6e:73:11:83:ae:5a:60:7e:cb:a4:83:5e:a5:
                    d4:57:e3:b1:08:de:71:40:1f:df:9b:9f:36:e5:b9:
                    9f:e0:79:04:02:0f:ee:5e:69:97:f7:cd:0a:e4:60:
                    9d:42:63:53:86:66:04:39:d8:0d:16:39:07:5a:e8:
                    84:b8:58:1d:8b:61:30:19:8f:18:3e:a2:9b:9e:73:
                    72:b0:32:3a:d2:b1:3a:7f:b6:13:1d:0f:a4:04:c4:
                    c5:ab:db:d7:36:60:a4:4f:98:ac:16:b6:ee:ba:84:
                    9f:fa:0e:79:d1:b5:60:38:ac:32:20:ea:dd:5b:9f:
                    55:f3:5e:27:e0:f2:dd:10:1c:e8:a9:61:30:3d:0f:
                    94:f7:d6:49:a5:03:30:a8:34:be:4e:00:fd:06:b4:
                    c3:34:32:49:9e:d1:85:27:d6:e8:61:c4:b6:55:3e:
                    90:a3:8c:d7:7a:11:b1:0c:6f:0c:3f:c2:d7:81:40:
                    d1:bd:e9:3f:c3:a5:1b:43:a9:83:61:ef:23:e7:cb:
                    ae:65:56:e8:1e:d4:c4:ee:52:3b:96:55:6c:d7:54:
                    6b:a0:5e:d6:06:a3:e6:11:47:a3:f4:f5:94:05:ce:
                    f1:9b:55:71:3c:ae:66:47:48:f6:20:5c:ed:1d:c8:
                    c3:f7:d9:4b:9b:f3:8f:47:9b:6f:70:7f:d4:df:8a:
                    da:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A6:66:67:45:FD:5E:F6:B5:6C:31:36:1F:7F:9A:CD:F6:8F:94:99
            X509v3 Authority Key Identifier:
                keyid:DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/031A6E544E9311F19004C0C7A2EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.65.0.0-179.65.191.255

    Signature Algorithm: sha256WithRSAEncryption
         2f:92:fd:20:d5:20:de:11:c1:44:0d:5e:45:dd:89:e2:fc:90:
         1a:0f:9a:9f:cd:c2:7b:81:d9:de:ff:12:ff:05:93:2a:29:f1:
         c0:d1:b5:3f:2a:b2:37:77:06:85:d7:ae:ec:78:6c:84:cd:a6:
         1a:78:82:3d:21:4a:cc:4e:5e:5d:aa:f7:a0:59:52:f4:01:a8:
         98:d7:c7:78:5d:b3:8d:bd:3f:47:56:5a:86:3b:0b:a0:4f:c5:
         07:af:16:13:71:0b:bd:2d:ee:b7:45:fb:10:18:38:75:1b:a0:
         02:ab:b8:e2:37:cf:df:d5:f2:ab:86:df:9c:94:94:1e:38:2e:
         ad:6b:39:bc:3c:f1:2b:ea:5d:da:c4:4f:85:d0:cc:27:00:c3:
         26:f0:6e:62:87:24:8c:a5:64:76:87:3a:da:94:6b:12:18:cf:
         a4:2b:78:b6:d8:3b:9f:5e:4d:0a:db:73:87:05:87:5c:22:74:
         39:7c:c6:36:0c:01:99:e6:de:d7:57:ed:92:59:93:69:f9:b7:
         fd:c7:33:c9:90:c8:8c:b2:48:fb:86:d9:62:3a:9e:e7:45:0b:
         01:8f:8c:a1:7f:40:e9:84:e2:3b:17:44:3e:12:98:ab:62:fa:
         5e:7c:4b:f8:d9:43:5a:82:18:2a:a1:a5:8e:25:e8:88:e4:e7:
         f2:13:a9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:11:46 2026 by rpki-client