Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/B8E35E8AD8C811F08AAE626967D3641D.roa
File:                     B8E35E8AD8C811F08AAE626967D3641D.roa (raw, json)
Hash identifier:          WR/P6r1CyFK9YH3dwfKAH8Ku8LJSqPwj9IcgqOtPOhs=
Subject key identifier:   13:A2:9E:65:7B:63:AB:92:40:DD:28:A8:7F:2B:37:64:A9:DE:4A:B3
Certificate issuer:       /CN=A918E4B7/serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
Certificate serial:       C6
Authority key identifier: 97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/B8E35E8AD8C811F08AAE626967D3641D.roa
Signing time:             Sun 04 Oct 2026 23:44:10 +0000
ROA not before:           Sun 04 Oct 2026 23:44:10 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     36007
IP address blocks:        79.108.224.0/24 maxlen: 24
                          79.108.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl
                          rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 23:04:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E4B7, serialNumber=97C857A75C9A6E298B09A061D8F7CE107BF9D333
        Validity
            Not Before: Oct  4 23:44:10 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac2e4c9-c5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e2:0c:6c:e7:87:35:9f:c3:b3:55:48:ee:ba:
                    af:91:3d:47:1d:5e:fe:99:ff:a9:fd:9e:0f:11:8e:
                    5a:bb:3f:80:a3:f0:27:83:58:5a:8e:01:9e:50:bf:
                    69:f7:e9:1b:4c:60:c7:74:6b:ab:ff:2c:f2:19:ee:
                    b8:37:78:c1:7a:62:0e:e7:9e:5c:d8:0a:1c:e4:b2:
                    22:5c:f1:47:b8:c6:d2:05:ca:e9:3d:c5:89:d8:77:
                    d8:61:b1:64:5e:17:bb:66:af:43:82:00:17:63:9f:
                    d5:b0:29:c5:45:93:6e:11:0b:14:1a:58:43:d5:20:
                    13:71:29:43:9c:b5:b2:60:0c:01:d0:62:6f:7d:bb:
                    20:a8:e4:7c:e2:e4:72:3b:d8:b4:e4:02:8f:2f:7f:
                    1b:aa:74:44:20:64:21:38:ad:21:08:1e:ee:09:69:
                    73:85:f0:91:79:3b:4a:bf:6e:a6:9a:6b:6e:ed:4c:
                    86:fe:8f:8e:a9:5f:60:fd:0c:b4:17:5a:c1:98:a0:
                    86:ce:f1:ac:19:fd:27:60:81:5a:83:c0:3f:b3:29:
                    18:ee:21:62:6f:d7:e9:87:75:91:a1:62:79:1c:78:
                    c1:3c:21:63:e8:44:d3:68:38:c4:55:62:64:e6:eb:
                    79:c8:b3:c0:72:1c:99:3a:c3:20:6c:1a:2a:23:4d:
                    f9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A2:9E:65:7B:63:AB:92:40:DD:28:A8:7F:2B:37:64:A9:DE:4A:B3
            X509v3 Authority Key Identifier:
                keyid:97:C8:57:A7:5C:9A:6E:29:8B:09:A0:61:D8:F7:CE:10:7B:F9:D3:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/l8hXp1yabimLCaBh2PfOEHv50zM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/l8hXp1yabimLCaBh2PfOEHv50zM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/BD8AED08A64211F0AC995833C4F9AE02/B8E35E8AD8C811F08AAE626967D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.108.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:ea:b1:e3:4b:d7:c8:1f:bc:fe:c2:b1:c1:b1:16:04:4c:56:
         b0:07:54:86:a0:e6:09:bf:7b:9a:39:4e:1c:66:1a:75:bf:e9:
         98:13:e5:2f:39:1e:f0:84:52:c6:95:f2:a5:e7:f6:c5:e0:34:
         ad:1c:f3:e5:65:4d:74:36:28:3b:1c:38:94:79:a0:b4:e5:79:
         b4:7c:97:ff:fb:04:8f:55:6d:e6:86:bb:85:78:91:57:61:a0:
         82:0a:e2:aa:f3:ea:75:5f:32:0d:f1:3e:e1:2a:2b:9d:14:f8:
         7b:c6:6b:d8:14:e2:d1:88:e4:f8:71:d3:ac:0d:6a:d2:88:6e:
         9f:2f:36:fa:48:80:63:e4:e1:d8:e9:c6:37:a5:81:58:42:15:
         1d:c8:60:60:87:ae:e5:8a:e5:d4:f6:73:ca:6d:0a:4e:de:f5:
         e0:4c:9c:6b:62:dc:21:ef:07:a7:8d:4e:af:79:4a:e3:a9:45:
         9d:8d:b0:1d:29:8e:11:c8:b7:5f:41:05:b4:fb:c1:35:27:b8:
         d0:6a:e5:98:0a:37:67:52:1c:f5:da:ad:0c:92:a9:ce:cc:b2:
         20:00:d8:e0:aa:a2:b3:f2:02:c0:50:3c:c8:d5:0a:b5:cd:9c:
         ce:85:11:f9:a7:02:f7:4b:0b:fc:8c:32:af:42:6a:89:72:d4:
         c2:a5:fd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 15:47:09 2026 by rpki-client