Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/1F379CE69D2211F1A2D31D4A4411F970.roa
File:                     1F379CE69D2211F1A2D31D4A4411F970.roa (raw, json)
Hash identifier:          hHqfaMqHudinN58Q6SY+uw71820GehKW91mX6AroNpg=
Subject key identifier:   54:E1:33:1E:44:67:1A:7E:BA:35:CA:03:BB:8B:5A:FA:9B:30:D0:F0
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0DDE
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/1F379CE69D2211F1A2D31D4A4411F970.roa
Signing time:             Fri 21 Aug 2026 06:58:50 +0000
ROA not before:           Fri 21 Aug 2026 06:58:50 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     152179
IP address blocks:        153.79.80.0/24 maxlen: 24
                          153.79.81.0/24 maxlen: 24
                          153.79.82.0/24 maxlen: 24
                          153.79.83.0/24 maxlen: 24
                          153.79.84.0/24 maxlen: 24
                          153.79.85.0/24 maxlen: 24
                          153.79.86.0/24 maxlen: 24
                          153.79.87.0/24 maxlen: 24
                          153.79.88.0/24 maxlen: 24
                          153.79.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 13:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3550 (0xdde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Aug 21 06:58:50 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a87f72a-4526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:89:d7:11:5a:e1:76:8b:3a:3e:aa:c7:6c:5a:
                    9f:0c:96:4b:6b:dd:19:9b:89:fd:f7:89:06:c2:46:
                    67:f8:d9:8b:c7:fe:58:a2:c7:7e:67:68:34:e8:38:
                    c2:26:5a:f1:f4:b7:a2:11:6d:70:e0:00:2d:da:83:
                    f1:8b:c2:97:ab:0e:ec:3a:48:6c:b4:5f:59:de:5d:
                    07:e2:b1:99:2a:5b:4b:e8:9e:85:a1:75:64:c7:9f:
                    3c:84:7b:19:e2:f9:03:c2:ec:aa:84:2e:33:c2:ca:
                    a8:0b:89:1a:58:81:0e:80:05:0f:0f:4a:bb:79:be:
                    55:8e:ea:17:df:03:77:8f:dd:4c:d4:62:cc:8e:20:
                    31:31:d0:af:cf:8f:09:0e:d0:af:20:87:22:ee:12:
                    1d:ed:29:7a:41:2d:a0:30:7b:80:8c:8d:0f:bc:81:
                    56:aa:39:01:f2:5d:a0:8a:97:65:22:bd:ff:3e:f7:
                    f5:a9:94:db:d7:03:af:02:bd:6d:07:02:92:c1:ad:
                    41:20:34:d8:ea:ae:77:c7:c6:69:a5:50:18:0d:bb:
                    03:24:b1:92:dc:df:fd:23:c2:f5:28:6f:7b:4f:72:
                    27:08:f1:ba:a4:d0:12:41:54:81:32:ba:03:7f:fa:
                    84:2c:39:61:83:7c:fa:85:a4:8e:bb:a8:05:55:4d:
                    3a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E1:33:1E:44:67:1A:7E:BA:35:CA:03:BB:8B:5A:FA:9B:30:D0:F0
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/1F379CE69D2211F1A2D31D4A4411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.79.80.0-153.79.89.255

    Signature Algorithm: sha256WithRSAEncryption
         0c:5c:cd:02:16:4e:c8:52:72:c6:8e:96:79:0f:7c:12:90:94:
         b1:44:f1:26:4e:d7:79:d7:6d:49:a9:0c:28:63:1a:00:34:08:
         ca:fd:86:d0:4a:c3:99:b3:4d:1a:8e:01:28:79:07:4a:4f:78:
         e7:29:a4:05:3a:cc:2b:42:e7:f4:63:66:4a:d6:7d:14:29:05:
         3a:7e:05:09:61:e7:d0:26:d1:03:bf:59:8a:3b:7c:89:14:62:
         a3:f1:9c:78:84:bb:f3:67:e4:a5:60:90:95:d8:90:1d:f9:6f:
         d5:c3:27:f9:45:92:d7:24:53:13:5b:5d:e4:d8:42:81:a9:f4:
         96:79:8b:6f:76:aa:3c:bf:b6:46:f8:aa:84:a2:f7:11:f8:f0:
         84:1d:34:17:1d:67:a9:fa:72:1f:d0:84:48:f5:4e:95:68:8b:
         dd:43:28:3f:2c:8e:81:fb:1c:ed:fb:e3:1f:23:ef:98:5a:88:
         92:4b:d3:23:d7:83:dd:49:59:ee:c7:f6:45:8f:6d:38:0c:b5:
         8a:2f:5e:96:81:61:14:a7:47:1c:4e:e6:71:2b:01:25:ca:7b:
         e7:12:00:a1:ef:a5:2c:52:03:6c:99:33:a2:ce:2c:4c:bb:a5:
         f2:ef:c9:db:2b:9a:51:31:7f:3e:fb:6b:0f:43:7f:da:21:a9:
         5d:9c:9d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:03 2026 by rpki-client