Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/B3795CBC64F211ED9AEC046FC4F9AE02.roa
File:                     B3795CBC64F211ED9AEC046FC4F9AE02.roa (raw, json)
Hash identifier:          +L8evKQDJ3nBMOn/L1rAEvoX4ISe7vPvaP460knk1K8=
Subject key identifier:   3D:A3:89:06:7F:35:F0:82:D5:48:66:EC:71:B6:0F:3B:D5:66:3F:16
Certificate issuer:       /CN=A91B5CEA/serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5
Certificate serial:       02C1
Authority key identifier: 44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/B3795CBC64F211ED9AEC046FC4F9AE02.roa
Signing time:             Fri 31 Jul 2026 02:50:59 +0000
ROA not before:           Fri 31 Jul 2026 02:50:58 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     133606
IP address blocks:        185.126.46.0/23 maxlen: 24
                          185.242.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl
                          rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 01:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 705 (0x2c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5CEA, serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5
        Validity
            Not Before: Jul 31 02:50:58 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6c0d92-13e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:20:c8:ef:21:6d:19:6f:0f:dc:e7:8c:fa:f1:
                    72:67:70:0d:8b:32:5f:91:a3:f5:20:82:a7:af:c4:
                    25:6a:97:ef:f7:50:4d:e6:55:a2:eb:a5:d1:fc:e3:
                    ca:0f:f8:63:46:9b:17:22:5c:a6:8c:89:0f:d1:89:
                    5b:74:c3:36:71:94:94:b8:fc:e8:1d:1b:72:a7:1e:
                    d3:e4:cd:25:2c:29:b0:e3:72:be:62:4a:66:c3:72:
                    39:9c:b6:cd:e8:3e:c8:cd:e0:1e:5d:15:06:5d:8c:
                    d2:ea:08:73:f2:c4:ee:bb:e8:97:ac:66:8e:8c:16:
                    ce:c0:f3:c9:c3:7b:2e:39:5a:6f:48:c2:26:47:4d:
                    db:13:43:3a:c3:df:4a:93:24:10:2b:6f:c4:60:96:
                    2a:75:a1:32:ce:12:e1:65:c2:69:c4:82:70:c7:2f:
                    22:04:f5:2a:67:dc:2c:44:29:39:e6:18:7a:03:4c:
                    b4:c3:f7:21:a1:cb:2a:88:6e:62:82:8c:25:6f:90:
                    23:cf:0b:2e:19:f5:a3:cc:3b:37:9b:30:87:4e:1d:
                    e3:f9:15:f5:a4:41:0f:1a:51:96:2c:4f:21:d7:10:
                    94:16:59:25:e9:9f:bb:f2:10:cf:b7:69:58:e0:f7:
                    a4:57:ba:1c:a7:d3:41:88:a8:ca:bb:89:80:2a:7c:
                    6b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A3:89:06:7F:35:F0:82:D5:48:66:EC:71:B6:0F:3B:D5:66:3F:16
            X509v3 Authority Key Identifier:
                keyid:44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/B3795CBC64F211ED9AEC046FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.126.46.0/23
                  185.242.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:4e:ae:d7:23:d4:87:2a:ba:a2:c9:2c:4d:f1:40:f9:47:27:
         3e:ec:23:f2:c9:fe:21:4f:3c:40:03:90:c1:dc:bb:aa:f9:f1:
         29:de:dd:7c:1c:13:1b:90:4d:f5:e7:df:a1:34:a7:86:6c:ae:
         aa:90:50:06:51:16:41:67:b8:9d:ff:eb:82:7f:ce:b9:12:5e:
         a3:f5:35:b8:e5:71:5e:13:84:7f:d6:7f:13:97:61:54:62:81:
         6e:5a:9e:d7:80:8b:15:df:9c:60:5d:63:60:a1:6c:0c:64:48:
         31:9a:78:72:34:e5:59:14:ca:70:e5:5c:18:d0:a9:e6:0a:52:
         d3:b3:37:1d:fd:d7:05:b0:67:67:e9:f5:f1:bf:10:eb:3a:a9:
         79:0f:eb:0f:20:40:cb:3c:3d:f5:71:79:c6:81:e1:7e:47:2b:
         53:6a:98:99:26:e7:ee:08:2d:6e:03:20:22:15:43:dc:d6:c7:
         20:38:11:b6:ce:4f:73:5c:31:10:2f:0f:91:28:48:10:de:10:
         db:9b:60:9e:81:7e:78:cc:70:b9:7a:78:2d:9a:e9:95:43:41:
         0c:b7:eb:48:52:aa:8d:f7:5e:10:35:d0:58:69:24:21:a9:76:
         14:70:49:85:11:7e:9b:84:0d:6b:02:63:ab:53:96:dc:1c:08:
         18:0a:5b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:47:40 2026 by rpki-client