Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/7CD480F64E4D11EAAE4CAC65C4F9AE02.roa
File:                     7CD480F64E4D11EAAE4CAC65C4F9AE02.roa (raw, json)
Hash identifier:          ojTPEYFv2UCv6Hj4B8GAB1i8kg1ryqJgTi7BI6aOcAQ=
Subject key identifier:   D3:6F:EF:E4:17:CC:19:EF:84:ED:E3:27:A9:7F:B7:BA:D4:7D:93:7F
Certificate issuer:       /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial:       1525
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/7CD480F64E4D11EAAE4CAC65C4F9AE02.roa
Signing time:             Fri 16 Oct 2026 17:32:52 +0000
ROA not before:           Fri 16 Oct 2026 17:32:52 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     45607
IP address blocks:        123.49.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 16:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5413 (0x1525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
        Validity
            Not Before: Oct 16 17:32:52 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6ad25fc4-3e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:e1:ee:ff:e0:7b:8b:e2:d2:20:52:6a:04:
                    e1:c0:68:bf:a9:34:c3:70:06:4f:ee:50:52:33:3a:
                    af:cf:a9:4f:55:eb:af:ae:14:e8:a4:ab:91:e6:c9:
                    1e:56:ae:f5:b9:5a:6a:e2:64:51:05:47:0d:5b:14:
                    12:9c:d8:0d:06:5a:5e:8d:52:51:e5:57:f3:da:e9:
                    3f:77:04:09:52:3e:8c:d9:93:02:8f:74:e4:d9:e2:
                    33:75:2d:63:86:d4:ee:53:c0:a5:0c:f0:60:ee:15:
                    d8:76:0a:cd:93:e6:c5:14:4d:d7:9e:fd:25:2e:d3:
                    86:ba:e8:ff:fa:6e:08:8e:b7:84:c4:56:7a:df:de:
                    70:3f:42:f0:69:51:05:e5:59:45:d9:ab:8a:c2:bd:
                    7b:2d:bc:6d:95:9b:23:2c:f9:22:69:82:e7:39:e1:
                    e1:2a:58:e2:2c:55:4a:97:a3:76:81:58:00:78:4b:
                    a9:50:22:35:6c:ce:25:d5:66:e8:b2:8d:96:47:81:
                    5e:f9:18:97:a4:24:53:b3:c1:f3:72:c9:a4:34:0e:
                    3d:9c:34:b0:42:58:3d:35:bf:e2:db:4f:81:b0:ad:
                    b4:6d:13:c3:13:84:07:21:cd:be:00:5f:87:be:5b:
                    6b:9b:6b:da:0b:b4:72:8f:a5:02:0d:3b:c3:87:58:
                    28:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6F:EF:E4:17:CC:19:EF:84:ED:E3:27:A9:7F:B7:BA:D4:7D:93:7F
            X509v3 Authority Key Identifier:
                keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/7CD480F64E4D11EAAE4CAC65C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.49.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:12:36:e5:46:d0:1e:78:d8:52:58:4c:f9:b7:14:0c:08:b4:
         6c:2a:12:d3:cb:84:a8:9a:ea:7e:09:4a:72:2d:7b:36:f9:d3:
         94:fa:fd:7b:e4:1d:8b:21:b6:b4:21:c5:72:aa:bf:de:c4:60:
         0e:78:4b:4a:6a:66:be:21:9b:d7:95:78:76:5f:18:12:58:2c:
         ee:a1:64:9d:70:8a:8d:c5:2e:a1:80:5b:7a:02:1f:1d:2b:12:
         ca:53:fe:97:23:4a:0f:40:90:1b:8c:4b:3c:37:41:bd:aa:0b:
         ee:a0:0b:c1:84:c4:09:e8:5e:4f:64:aa:a4:69:bc:16:38:62:
         86:86:83:f4:88:e6:ca:83:b5:09:7e:3d:b1:ad:ef:ed:eb:c5:
         ba:65:17:75:87:6a:4e:7f:4b:49:d6:d1:82:bd:c4:0f:20:f1:
         55:40:8a:43:6d:32:6d:7e:c6:75:ea:05:2d:a8:4f:7e:d5:14:
         f0:6b:bb:29:51:8c:56:5d:da:70:d7:e8:ed:75:79:eb:43:77:
         13:f7:49:8f:70:c4:b5:30:9c:42:9c:e7:c0:c2:1b:38:d5:84:
         3a:22:c5:22:59:a6:18:cb:b5:7c:ed:15:95:a1:20:1c:b5:3c:
         dc:43:a4:b6:25:c4:5a:c4:25:16:fb:8b:6f:e6:f7:1b:fb:5c:
         67:c0:12:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:43:48 2026 by rpki-client