Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB63F/83808F58B8B311F1B544707E6911F970/78E19FBEB8B411F18AE204C36911F970.roa
File:                     78E19FBEB8B411F18AE204C36911F970.roa (raw, json)
Hash identifier:          Pd3Up6J/VM6P5nw9or+XKeLAdKiTmjb2F+2kUrPW/po=
Subject key identifier:   32:2F:66:F0:C1:2B:99:14:8A:7C:B4:51:97:DB:4A:98:10:E1:B4:1D
Certificate issuer:       /CN=A91BB63F/serialNumber=6B3FCB32DE3337D2D90EC8CBB0A20242857AD11A
Certificate serial:       02
Authority key identifier: 6B:3F:CB:32:DE:33:37:D2:D9:0E:C8:CB:B0:A2:02:42:85:7A:D1:1A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/az_LMt4zN9LZDsjLsKICQoV60Ro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB63F/83808F58B8B311F1B544707E6911F970/78E19FBEB8B411F18AE204C36911F970.roa
Signing time:             Fri 25 Sep 2026 07:41:10 +0000
ROA not before:           Fri 25 Sep 2026 07:41:09 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     154835
IP address blocks:        192.146.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB63F/83808F58B8B311F1B544707E6911F970/az_LMt4zN9LZDsjLsKICQoV60Ro.crl
                          rsync://rpki.apnic.net/member_repository/A91BB63F/83808F58B8B311F1B544707E6911F970/az_LMt4zN9LZDsjLsKICQoV60Ro.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/az_LMt4zN9LZDsjLsKICQoV60Ro.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 09:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB63F, serialNumber=6B3FCB32DE3337D2D90EC8CBB0A20242857AD11A
        Validity
            Not Before: Sep 25 07:41:09 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab62595-092e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:11:04:bf:1b:7c:37:7c:ed:d6:15:fc:47:37:
                    c5:37:e4:4f:c0:4b:e3:7d:dc:e8:89:3a:f3:3a:fb:
                    2c:1f:a0:ea:55:39:0f:ca:f5:d5:14:d4:f5:49:2f:
                    26:ca:bf:6d:d8:2e:e1:23:e6:9d:8f:63:67:48:4c:
                    ed:1e:dc:0c:08:50:b7:71:ca:fe:6d:bd:4b:1d:07:
                    2a:cc:5b:cd:13:91:6b:40:ef:b2:40:2b:69:77:cf:
                    df:b1:03:9d:58:b8:71:e5:68:fa:a2:c9:53:95:17:
                    d5:7e:e3:4d:c8:22:69:0d:00:fb:2b:a0:15:96:bb:
                    84:7c:5f:b0:19:da:de:88:b7:11:1e:fe:99:38:9a:
                    e9:92:56:8f:0b:d9:10:e1:ed:4f:05:21:be:d1:72:
                    77:ed:69:df:73:b1:56:61:e4:04:55:2c:8b:1a:a6:
                    45:e1:63:dc:19:89:dc:b2:a0:cb:d2:fc:8c:74:0c:
                    cc:4e:cf:86:1c:cd:9c:0a:23:3f:1c:ad:e0:7f:db:
                    e3:d6:4c:5c:01:a4:db:9e:45:a4:c7:e3:20:f0:46:
                    03:8b:72:cc:0a:04:f9:b6:9c:d9:d8:ed:82:f8:ea:
                    18:d2:06:46:27:51:4e:be:80:8a:de:4b:bb:44:85:
                    ee:6b:20:55:78:bb:8a:71:ed:a5:78:50:0f:4d:3e:
                    72:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2F:66:F0:C1:2B:99:14:8A:7C:B4:51:97:DB:4A:98:10:E1:B4:1D
            X509v3 Authority Key Identifier:
                keyid:6B:3F:CB:32:DE:33:37:D2:D9:0E:C8:CB:B0:A2:02:42:85:7A:D1:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB63F/83808F58B8B311F1B544707E6911F970/az_LMt4zN9LZDsjLsKICQoV60Ro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/az_LMt4zN9LZDsjLsKICQoV60Ro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB63F/83808F58B8B311F1B544707E6911F970/78E19FBEB8B411F18AE204C36911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.146.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:a6:01:b8:df:78:64:e3:25:d9:a2:13:73:0d:1f:e3:0c:1b:
         71:c1:39:0f:48:f6:4a:e0:c1:3e:df:91:de:1c:b7:80:6f:ee:
         5d:48:38:f2:a7:98:64:a1:15:55:d6:6a:17:8a:a8:3b:6a:34:
         bb:ca:aa:0d:6d:38:98:d9:ad:ad:00:70:05:02:b5:35:62:99:
         10:6c:88:f3:49:e4:8a:67:18:4b:88:1b:8f:e6:4c:1f:fc:6c:
         7b:ff:9f:a1:64:df:93:0a:cc:50:43:71:fd:15:17:c4:88:a2:
         2c:0f:14:d4:5e:e2:8a:37:88:a4:1b:33:9a:1c:dd:64:59:93:
         96:9e:ca:94:3c:f9:c5:e1:51:3f:a4:2c:5a:bb:76:de:d3:d5:
         a7:d4:20:2b:d8:68:8a:73:ce:59:bc:2c:80:59:b5:8f:b8:28:
         28:c2:14:a3:34:05:52:d8:ab:98:a3:9d:09:67:91:2b:d1:db:
         3b:15:fa:be:33:fa:a3:31:67:4e:9d:ea:92:7e:b1:0c:57:4a:
         02:d7:1e:7e:ff:d8:59:60:1a:3b:e7:6d:a6:4c:57:5f:85:fb:
         71:85:04:87:92:88:f3:7a:40:2d:4b:a2:40:44:53:84:1a:09:
         8e:b0:b4:e8:1b:d3:bc:62:49:d9:6c:09:01:2d:4f:a5:d0:39:
         c8:fd:99:52
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:28:13 2026 by rpki-client