Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/08AE48C23CEB11F1B92AFD80C4833773.roa
File:                     08AE48C23CEB11F1B92AFD80C4833773.roa (raw, json)
Hash identifier:          6tcLUJAPpXxMhDjYEZ6Foh2oBrAUGB58QWwlBnxvt7I=
Subject key identifier:   6E:22:2D:5B:99:10:9B:3F:80:7C:47:55:21:71:D6:01:A0:6F:0F:C5
Certificate issuer:       /CN=A91758DF/serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
Certificate serial:       06
Authority key identifier: DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/08AE48C23CEB11F1B92AFD80C4833773.roa
Signing time:             Mon 20 Apr 2026 18:59:19 +0000
ROA not before:           Mon 20 Apr 2026 18:59:19 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     14593
IP address blocks:        179.65.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl
                          rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 20:21:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF, serialNumber=DB054D4FF483B894D8085E0FE3786CE2E9B53062
        Validity
            Not Before: Apr 20 18:59:19 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69e67786-ce3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f6:7b:34:d7:cd:61:00:5a:61:7c:ad:96:7e:
                    70:e8:42:8f:a1:97:25:a7:f1:3f:48:19:34:c9:9d:
                    ad:65:79:d7:c9:81:59:0d:47:3c:35:ee:40:14:8e:
                    46:36:1c:68:82:de:40:0b:ba:50:ff:6b:b8:09:d9:
                    94:71:cd:a7:e6:83:c2:ff:9c:38:a3:ed:47:b6:fc:
                    71:63:49:d9:80:99:a9:d6:70:d9:25:b0:fd:ec:92:
                    fb:e7:a3:55:ec:85:50:d2:34:76:a2:69:1b:a9:4c:
                    89:dd:20:b7:ad:4e:f2:f9:c4:b5:7a:61:90:42:65:
                    3d:cc:eb:c8:eb:fc:a7:4d:ef:47:ec:11:24:ab:fe:
                    90:91:aa:f1:78:ab:85:d8:fe:46:28:c3:0c:0c:3d:
                    f2:af:85:dd:bb:b4:29:ec:5c:55:aa:89:28:0b:bd:
                    43:1b:81:e2:f8:4f:87:00:01:d5:fe:ec:fc:c2:1d:
                    2c:97:4c:78:6a:d4:e5:d6:5f:e0:f8:95:4e:ad:0e:
                    19:c6:39:71:ef:3c:69:41:a5:47:60:c2:aa:db:01:
                    48:34:7e:22:5d:b8:0b:fc:28:df:da:74:90:58:4e:
                    68:4e:4b:4c:cb:63:48:10:98:bf:4f:12:ec:e9:98:
                    80:5e:d0:e7:de:77:0c:24:0c:0c:11:39:dc:3d:0b:
                    22:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:22:2D:5B:99:10:9B:3F:80:7C:47:55:21:71:D6:01:A0:6F:0F:C5
            X509v3 Authority Key Identifier:
                keyid:DB:05:4D:4F:F4:83:B8:94:D8:08:5E:0F:E3:78:6C:E2:E9:B5:30:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/2wVNT_SDuJTYCF4P43hs4um1MGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/2wVNT_SDuJTYCF4P43hs4um1MGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/0C4BA820351C11F1AB286CA77CEE528E/08AE48C23CEB11F1B92AFD80C4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.65.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         12:0c:6b:ed:18:83:17:0a:f1:8d:fd:a6:94:aa:88:d4:91:ca:
         d3:6e:18:95:c3:cf:58:43:cd:8f:c9:c9:df:21:3c:31:89:b7:
         04:f9:4d:dc:27:16:d8:23:89:e5:59:10:52:1e:b6:a8:44:8d:
         85:e9:03:e4:50:f0:fc:84:c7:76:c1:ba:a7:88:55:41:59:6e:
         ac:70:78:f3:fa:b5:2f:65:a4:f6:56:b1:57:b2:0c:1a:c6:78:
         8b:97:75:ac:9f:16:93:61:f0:f0:ad:95:c0:55:c3:7d:7d:72:
         e7:7a:d3:9a:72:5e:56:72:ea:b4:83:76:77:28:9a:91:44:1b:
         94:d3:6e:92:bc:4a:5b:9b:7a:f4:bb:29:7f:87:9b:56:b5:8d:
         fe:8e:4c:1f:a3:a9:8e:a2:e0:25:14:5b:da:ed:8d:11:f7:4b:
         5b:61:06:b6:b6:c6:27:0e:d5:be:d9:e9:fd:cc:82:17:7f:50:
         25:54:d1:79:aa:e1:bf:5b:3e:22:43:a9:f4:5c:47:e9:a9:a7:
         58:82:75:cf:47:de:87:22:13:86:27:9c:f9:19:44:3c:58:99:
         aa:f3:85:8b:fe:4e:e2:9a:f8:7a:15:8a:4e:ab:24:0f:da:25:
         7c:38:c8:14:fd:f5:9a:16:93:6d:6d:4c:36:ea:da:cb:da:68:
         d0:c3:03:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 28 00:47:55 2026 by rpki-client