Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/55701668973111F1A86A43863311F970.roa
File:                     55701668973111F1A86A43863311F970.roa (raw, json)
Hash identifier:          0fnwHD1e8+xguealFicHUassztcIDudaKbeSOw/qYWs=
Subject key identifier:   A3:48:71:33:97:59:48:83:32:0E:CF:C4:02:6A:29:6E:E8:D4:B6:56
Certificate issuer:       /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
Certificate serial:       06C7
Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/55701668973111F1A86A43863311F970.roa
Signing time:             Thu 13 Aug 2026 16:11:55 +0000
ROA not before:           Thu 13 Aug 2026 16:11:55 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     42960
IP address blocks:        39.109.56.0/21 maxlen: 24
                          39.109.100.0/22 maxlen: 24
                          39.109.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl
                          rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 22:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1735 (0x6c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F
        Validity
            Not Before: Aug 13 16:11:55 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a7deccb-b10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:34:39:a0:79:90:ef:76:52:61:71:65:19:ae:
                    45:51:76:d0:9e:49:54:92:37:e5:f0:7c:b2:2e:f5:
                    c2:c9:30:bd:e9:97:7e:df:78:a7:f1:21:96:cc:1b:
                    c2:e6:e2:99:9e:16:b4:8b:60:96:01:9f:ee:02:c8:
                    ae:5c:b8:07:c1:3f:a6:a7:11:37:c6:fa:49:fb:63:
                    a8:98:08:8b:6d:bf:df:45:43:de:da:db:72:e9:ef:
                    29:97:92:fd:0b:f1:fa:7b:c8:fb:c8:25:87:35:37:
                    d6:60:a1:07:90:4d:93:34:06:f1:65:e7:e3:05:a0:
                    51:35:18:b0:9f:71:19:c2:07:05:6c:d5:5e:2b:24:
                    e3:f3:17:a0:73:ba:6b:4c:24:4f:8d:85:11:30:0c:
                    aa:f5:cb:f8:57:4b:2a:60:4f:f6:f5:9c:f8:ee:29:
                    59:6b:44:93:06:3e:f7:0e:60:6e:df:1e:48:a4:e5:
                    e6:4c:43:37:59:20:b3:37:b9:e5:27:62:2f:ae:c9:
                    c1:41:24:3d:09:79:33:88:a2:b1:d0:2a:58:2b:17:
                    40:ce:88:b6:b3:cd:1e:51:74:8c:ed:b7:ab:d7:76:
                    cc:67:2b:3c:b6:69:c1:6e:6c:d1:58:95:97:65:f6:
                    30:0d:1b:bb:28:a3:41:9f:0a:12:0e:3b:57:15:91:
                    5f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:48:71:33:97:59:48:83:32:0E:CF:C4:02:6A:29:6E:E8:D4:B6:56
            X509v3 Authority Key Identifier:
                keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/55701668973111F1A86A43863311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.109.56.0/21
                  39.109.100.0/22
                  39.109.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:3b:50:70:35:d5:f6:7c:8d:98:84:00:b5:6e:67:12:91:89:
         5a:e0:b1:e3:2a:ae:ff:9b:e1:c8:54:80:c7:47:d1:58:b7:94:
         9e:97:df:5f:a8:e4:61:2c:69:d6:60:06:1b:2a:63:7f:7c:a7:
         b6:9f:02:93:be:7f:a9:9a:79:81:a2:14:7b:c6:f5:ba:6c:bd:
         be:98:fa:0c:69:5d:f4:a3:9f:7c:b2:06:20:07:ef:a4:95:f6:
         c5:cf:f7:51:93:8c:55:70:c5:7b:22:34:67:ff:71:58:8b:1d:
         13:a0:c5:a8:ee:b9:ab:b7:25:4b:f0:ae:c0:b7:4e:e5:c1:30:
         d8:18:33:7c:ca:6d:e7:8d:ae:26:93:0b:19:35:94:6c:fb:7d:
         64:41:ec:2e:59:cb:32:eb:3b:da:00:20:95:c3:a5:16:a0:63:
         6b:e0:8e:c0:ba:2c:c9:c7:b9:68:b5:21:81:7f:45:29:bf:e7:
         f3:a5:4d:7b:45:97:80:b5:2a:39:ed:11:68:d7:da:a1:33:36:
         be:3c:47:69:be:91:2d:ab:bf:63:87:74:b1:3e:51:0b:f5:d8:
         05:23:11:6e:f5:dd:ab:d3:8c:9f:45:16:3e:fa:a5:1b:89:2d:
         40:2a:cc:ee:59:56:1e:a5:b5:9a:19:5d:7f:18:d4:bc:e6:e5:
         8b:cd:b0:07
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICBscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUY1RjcxMTAvBgNVBAUTKDBBMjc3RDI2QTlDMjQwMkI4QTFDRDQ1Nzc5MzVFNEYz
QzI1OUMxOUYwHhcNMjYwODEzMTYxMTU1WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTdkZWNjYi1iMTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3zQ5oHmQ73ZSYXFlGa5FUXbQnklUkjfl8HyyLvXCyTC96Zd+33in8SGWzBvC
5uKZnha0i2CWAZ/uAsiuXLgHwT+mpxE3xvpJ+2OomAiLbb/fRUPe2tty6e8pl5L9
C/H6e8j7yCWHNTfWYKEHkE2TNAbxZefjBaBRNRiwn3EZwgcFbNVeKyTj8xegc7pr
TCRPjYURMAyq9cv4V0sqYE/29Zz47ilZa0STBj73DmBu3x5IpOXmTEM3WSCzN7nl
J2IvrsnBQSQ9CXkziKKx0CpYKxdAzoi2s80eUXSM7ber13bMZys8tmnBbmzRWJWX
ZfYwDRu7KKNBnwoSDjtXFZFfTwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKNIcTOX
WUiDMg7PxAJqKW7o1LZWMB8GA1UdIwQYMBaAFAonfSapwkArihzUV3k15PPCWcGf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjVGNy80NEZDRTU2OEM3
ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FDdUtITlJYZVRYazg4Slp3
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NpZDlKcW5DUUN1S0hOUlhlVFhrODhKWndaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUY1RjcvNDRGQ0U1NjhDNzg0MTFFQkFENEM5NjU5QzRGOUFFMDIvNTU3MDE2Njg5
NzMxMTFGMUE4NkE0Mzg2MzMxMUY5NzAucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQDJ204AwQCJ21kAwQCJ21sMA0GCSqGSIb3DQEBCwUAA4IBAQBbO1Bw
NdX2fI2YhAC1bmcSkYla4LHjKq7/m+HIVIDHR9FYt5Sel99fqORhLGnWYAYbKmN/
fKe2nwKTvn+pmnmBohR7xvW6bL2+mPoMaV30o598sgYgB++klfbFz/dRk4xVcMV7
IjRn/3FYix0ToMWo7rmrtyVL8K7At07lwTDYGDN8ym3nja4mkwsZNZRs+31kQewu
Wcsy6zvaACCVw6UWoGNr4I7AuizJx7lotSGBf0Upv+fzpU17RZeAtSo57RFo19qh
Mza+PEdpvpEtq79jh3SxPlEL9dgFIxFu9d2r04yfRRY++qUbiS1AKszuWVYepbWa
GV1/GNS85uWLzbAH
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:20:25 2026 by rpki-client