Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/787B47E0DA6C11F0961B74F799D3641D.roa
File:                     787B47E0DA6C11F0961B74F799D3641D.roa (raw, json)
Hash identifier:          ur6YXPjrS7rD6PZk6iiExADhQkkEYMpmDQnxgKnVoes=
Subject key identifier:   B2:C9:84:A8:7E:3C:FD:B1:89:51:70:49:52:E5:D6:C9:4D:C1:1B:5B
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       211C
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/787B47E0DA6C11F0961B74F799D3641D.roa
Signing time:             Mon 02 Mar 2026 23:21:35 +0000
ROA not before:           Tue 16 Dec 2025 10:46:26 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154406
IP address blocks:        144.79.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 14:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8476 (0x211c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Dec 16 10:46:26 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61b7e-0ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:be:7b:03:32:e7:8e:31:8c:26:93:71:0f:d2:
                    09:c1:9b:e7:16:66:cd:4e:ce:5b:cd:6e:2f:20:5c:
                    f0:fc:0c:28:8f:d2:e7:33:8e:6f:a5:14:94:90:ba:
                    b7:1e:d4:16:58:26:bd:63:19:24:87:81:7b:c4:ac:
                    00:92:5a:89:82:68:da:ad:ea:e8:bc:ec:5d:44:33:
                    82:2c:aa:98:fd:81:2c:75:72:09:3c:5a:65:b3:0c:
                    d7:fd:a0:2c:18:42:b8:3f:23:a0:6c:48:27:7e:56:
                    4f:cc:7a:ee:24:7a:31:b3:72:eb:61:93:d6:c8:fc:
                    33:86:0c:a8:08:9c:2d:ed:81:87:41:97:19:96:9e:
                    a6:56:82:cb:6a:43:e1:c3:5a:6e:2a:2d:bd:e7:0e:
                    9c:25:c3:0a:4a:f8:b8:91:61:84:4a:83:e5:c7:30:
                    00:fc:56:45:75:bd:42:37:4b:1d:9d:c3:fc:f5:91:
                    1c:49:8f:62:b1:90:3b:cd:7c:54:67:f0:fa:a5:02:
                    33:ea:ac:1e:b0:cf:95:49:c7:9b:23:cc:d4:29:83:
                    e8:e6:7f:c5:25:47:0c:72:bd:53:56:db:8a:b1:1e:
                    d1:5c:d6:c5:3b:65:10:66:9b:58:37:fe:2d:e7:5d:
                    41:9d:7f:23:2b:50:92:61:a1:6e:56:73:77:89:f7:
                    96:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C9:84:A8:7E:3C:FD:B1:89:51:70:49:52:E5:D6:C9:4D:C1:1B:5B
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/787B47E0DA6C11F0961B74F799D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:a2:1c:24:b4:6f:21:37:8a:e2:a2:6a:28:c2:d0:fa:26:f3:
         42:09:e7:e1:a4:15:f6:96:57:4a:fe:7f:ad:ff:f5:07:4c:f4:
         48:1c:bd:31:a0:ed:da:02:95:16:8d:93:2e:b2:4a:5b:80:ee:
         74:36:4e:b5:9d:db:e8:1d:bd:f6:5e:88:04:c6:8f:0c:94:7b:
         00:f7:be:11:a6:71:05:26:1e:23:1d:1a:78:0f:2e:c0:27:a2:
         94:f7:62:69:fa:d6:ad:0a:08:95:ff:6f:48:e2:3b:ef:0e:b5:
         78:8a:23:54:d0:01:fb:45:e2:65:95:c7:4b:27:46:16:ce:41:
         6d:ac:b5:09:20:6d:9e:88:53:13:1e:0e:d0:03:b5:c0:4c:f6:
         07:6f:a7:da:59:b2:cf:f0:d2:f3:39:95:59:b0:37:2d:41:82:
         45:01:53:75:69:cd:08:c0:62:66:3b:e6:ec:b4:0b:cd:2f:1f:
         5e:0b:9b:5f:50:6e:38:04:a8:2b:16:e6:d1:f3:e8:13:0e:7a:
         61:50:7e:2a:b7:24:a0:c5:3b:ea:65:a0:73:e2:54:86:bb:dd:
         55:d9:55:48:86:d4:1d:ed:ea:9c:b3:e6:f1:3b:31:8a:05:2d:
         21:a2:c3:c8:b1:e5:fc:ad:4f:7c:07:db:ba:67:93:da:89:7d:
         38:e9:45:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:58:14 2026 by rpki-client