Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/39D27246750511F1B847DD7F6CA30FBC.roa
File:                     39D27246750511F1B847DD7F6CA30FBC.roa (raw, json)
Hash identifier:          cia8IPAkix/MNyKAepXMq+8vc+QuoRzXeBNvwlaYww4=
Subject key identifier:   72:2E:D8:90:78:84:D8:AD:AE:C6:1A:28:22:B3:1E:A5:DF:E3:E6:85
Certificate issuer:       /CN=A91AC415/serialNumber=B4E220BFCE2290AA2D6F88ED7AAE30DE8915C94C
Certificate serial:       02
Authority key identifier: B4:E2:20:BF:CE:22:90:AA:2D:6F:88:ED:7A:AE:30:DE:89:15:C9:4C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tOIgv84ikKotb4jteq4w3okVyUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/39D27246750511F1B847DD7F6CA30FBC.roa
Signing time:             Wed 01 Jul 2026 04:27:53 +0000
ROA not before:           Wed 01 Jul 2026 04:27:53 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152129
IP address blocks:        45.74.156.0/23 maxlen: 23
                          45.74.156.0/24 maxlen: 24
                          45.74.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.crl
                          rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tOIgv84ikKotb4jteq4w3okVyUw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 04:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC415, serialNumber=B4E220BFCE2290AA2D6F88ED7AAE30DE8915C94C
        Validity
            Not Before: Jul  1 04:27:53 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a449749-9667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c0:db:63:7a:b3:52:b3:e2:7e:66:bf:c8:c8:
                    32:3f:23:e6:4f:b5:6f:df:1f:b8:4b:07:13:df:4d:
                    ff:4f:d6:c2:27:76:7b:d7:65:2c:91:f3:c6:b7:47:
                    d8:07:7a:b0:27:78:3b:e6:df:15:20:65:36:5c:24:
                    88:75:4e:93:83:33:f4:58:85:3f:0a:5b:53:4f:8a:
                    f5:51:bb:b8:53:e8:a6:94:0c:6b:6e:26:a4:83:fc:
                    b1:87:a2:67:c6:ee:f1:4d:ca:f3:06:37:f2:86:f8:
                    51:fa:ab:7b:e3:a9:32:bd:8a:02:1e:87:35:d8:75:
                    b8:84:67:0b:fc:14:a1:bc:2e:a4:62:15:49:5e:ea:
                    41:00:1b:b3:45:2a:91:c3:ac:61:f1:2e:15:b2:1d:
                    0d:69:a8:4c:02:3c:6f:5a:49:93:b3:18:4c:e3:59:
                    84:31:97:89:c5:0d:56:4f:5e:c6:be:be:cf:13:50:
                    a2:33:bc:74:c2:54:eb:23:a1:58:53:ec:9d:ce:e2:
                    ec:ff:88:9a:d2:99:c6:8f:9e:76:11:e1:df:d9:e5:
                    16:38:bc:00:55:09:4e:b3:b8:4a:e4:bc:8f:bf:f4:
                    be:41:bb:1d:15:4b:6b:34:d0:da:ee:8e:45:e4:ce:
                    4b:1a:ef:66:a2:27:ba:a4:81:5a:a5:3a:cb:16:83:
                    1d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2E:D8:90:78:84:D8:AD:AE:C6:1A:28:22:B3:1E:A5:DF:E3:E6:85
            X509v3 Authority Key Identifier:
                keyid:B4:E2:20:BF:CE:22:90:AA:2D:6F:88:ED:7A:AE:30:DE:89:15:C9:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/tOIgv84ikKotb4jteq4w3okVyUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tOIgv84ikKotb4jteq4w3okVyUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC415/77AADAAA74E111F18E45FBA380EE528E/39D27246750511F1B847DD7F6CA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.74.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:cd:45:d1:99:5d:5d:e9:55:7b:a9:29:11:96:d8:a5:40:98:
         73:e1:49:59:15:00:30:bf:18:0b:cb:23:03:f7:ba:63:b7:1b:
         e7:3a:b7:87:da:3d:43:df:ef:55:02:3b:c0:33:c8:f2:c1:c6:
         8c:cb:34:58:84:14:1f:1e:5c:82:aa:30:56:4e:f1:1b:90:5f:
         11:34:65:0b:22:60:b5:29:46:51:e0:58:91:1e:14:ad:af:d3:
         92:54:84:37:fb:c4:58:7f:6b:f1:9f:37:3b:25:6c:84:fe:71:
         0f:b4:51:45:83:83:b6:fd:9d:f6:b6:cb:a6:5c:18:87:ab:82:
         76:a9:9d:0c:ee:2c:94:82:41:c7:a1:34:ed:4e:ca:7f:66:74:
         1c:36:59:6e:65:e9:c0:23:53:c9:05:99:80:97:3a:97:01:10:
         88:02:60:76:bb:42:ee:55:3c:07:2f:24:0b:05:f0:b0:db:e3:
         10:07:f4:63:b1:25:c7:a4:69:2a:be:68:dd:28:3f:96:4c:1a:
         04:3c:67:72:3a:58:a7:76:d9:ca:a8:21:48:f9:f0:02:a5:35:
         3d:67:3f:84:73:2f:69:9d:75:8a:76:f9:34:41:92:a9:ca:06:
         ae:cc:83:28:77:bb:bb:19:b8:69:7e:67:15:85:d0:16:3b:32:
         b5:6e:7b:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:29:10 2026 by rpki-client