Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/787B47E0DA6C11F0961B74F799D3641D.roa
File:                     787B47E0DA6C11F0961B74F799D3641D.roa (raw, json)
Hash identifier:          FfY+Am7vz0DGIkm7rRmqD3LUwwxSIGVao0r5oz7o9sE=
Subject key identifier:   0D:19:97:70:7A:F7:03:D2:F3:72:E6:CC:D7:EE:CF:2C:9B:74:9F:D1
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       23EA
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/787B47E0DA6C11F0961B74F799D3641D.roa
Signing time:             Fri 02 Oct 2026 15:20:50 +0000
ROA not before:           Fri 02 Oct 2026 15:20:50 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154406
IP address blocks:        144.79.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9194 (0x23ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:20:50 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcbd2-3648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:33:99:8d:d4:2c:c1:28:4a:d2:da:2a:9d:fc:
                    58:fe:1f:72:34:37:23:70:1f:3c:4e:a9:f0:76:94:
                    6b:f3:d0:03:3b:95:2b:04:97:74:c3:62:c4:89:4a:
                    ab:62:58:c1:dd:9f:67:5a:0e:d4:3e:a6:69:65:a1:
                    0f:71:37:a0:d2:89:8e:4d:69:3d:c6:c6:12:c6:cb:
                    30:ac:c8:99:9f:33:7d:3b:ed:cd:1e:ee:d6:55:e3:
                    3a:5d:57:27:a2:6a:79:44:90:bd:c5:80:4a:5a:62:
                    3f:09:c9:41:eb:cc:da:e6:2e:55:6b:99:b2:14:e2:
                    0e:1c:46:49:87:8b:d1:ec:87:8b:fc:25:a7:5d:9c:
                    41:23:24:83:81:76:fd:99:fd:35:38:10:a3:9f:88:
                    5e:fe:91:83:29:9c:e8:c6:b5:c2:fa:0f:e8:94:0e:
                    4d:c2:41:dd:15:4c:4a:b8:de:43:e4:dd:65:da:8f:
                    9f:f2:78:72:77:75:de:f8:da:86:cc:1f:e3:ca:62:
                    83:e0:96:6b:e4:e8:40:80:d3:f3:2b:44:d2:e3:ff:
                    97:92:6e:8c:9b:cb:fd:27:15:95:65:67:e3:f6:c6:
                    45:f2:ca:c5:76:38:d3:f2:c9:0a:39:e7:93:66:fd:
                    cf:9d:05:a9:28:f7:f5:7c:96:a3:0e:56:d7:57:83:
                    b0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:19:97:70:7A:F7:03:D2:F3:72:E6:CC:D7:EE:CF:2C:9B:74:9F:D1
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/787B47E0DA6C11F0961B74F799D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:8b:35:94:e5:e7:a8:5b:82:65:14:87:b5:fb:8e:96:5f:85:
         a5:87:4c:24:a0:13:ac:e6:62:a2:51:fa:86:b6:77:c3:d7:99:
         83:dc:1b:f7:de:fc:fe:e9:4d:70:81:3a:9d:1c:84:20:64:80:
         98:ef:f5:45:5f:90:6b:38:77:25:a1:76:a8:86:48:df:fa:86:
         06:c1:2a:e7:bd:0a:2e:f5:ce:c5:72:59:07:48:94:74:8b:db:
         d2:ce:9f:7a:59:fd:97:7a:b4:53:98:25:6e:29:19:d7:c2:54:
         c8:f0:0e:46:b2:75:b9:89:96:b6:ed:5b:82:9e:81:eb:b7:55:
         64:ac:2a:b1:84:6d:52:d2:f7:45:fd:c4:f1:a4:cb:78:83:a6:
         42:23:52:50:87:ff:42:71:26:81:0a:29:3b:a6:9f:c9:81:37:
         23:80:b6:19:34:45:a2:d8:f0:eb:1e:65:bd:2c:2c:a8:c1:5b:
         fe:61:41:5e:f0:b3:37:32:24:25:b2:7c:77:6d:5d:ac:c3:a4:
         45:bd:a0:51:15:a1:1c:08:73:14:c6:97:ff:eb:0a:08:d9:cb:
         f0:7b:8c:60:cc:5d:af:8f:6e:07:47:c4:92:9e:5e:4d:ad:96:
         ad:ac:d7:c4:f1:14:ef:10:3f:01:83:de:d7:51:ea:a9:69:b8:
         fd:85:4c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:48:44 2026 by rpki-client