Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/79734D6AB9EB11F095C2C735C4F9AE02.roa
File:                     79734D6AB9EB11F095C2C735C4F9AE02.roa (raw, json)
Hash identifier:          QR8q+ALVePxBSGtk9U7glKgvftSJmjU/0bwUblLugJQ=
Subject key identifier:   E7:2D:44:85:EA:90:30:3E:CF:C5:DD:82:04:CE:2C:66:03:59:56:B8
Certificate issuer:       /CN=A91BFE76/serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
Certificate serial:       6D
Authority key identifier: BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/79734D6AB9EB11F095C2C735C4F9AE02.roa
Signing time:             Thu 14 May 2026 21:39:46 +0000
ROA not before:           Thu 14 May 2026 21:39:45 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     154279
IP address blocks:        138.252.8.0/23 maxlen: 23
                          138.252.8.0/24 maxlen: 24
                          138.252.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl
                          rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE76, serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
        Validity
            Not Before: May 14 21:39:45 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a064121-5b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b6:a2:cd:16:9e:d9:94:98:e5:1b:86:62:3c:
                    8c:b1:82:b7:3e:54:76:c4:10:4a:22:44:d4:60:62:
                    46:ec:f9:43:93:1b:3c:cf:c3:43:9d:8c:2c:65:f2:
                    62:b8:cc:80:11:fd:c3:c9:02:52:fe:0f:7e:ac:f2:
                    59:24:d2:13:5d:29:40:25:a0:87:c2:a1:d7:b3:c3:
                    2c:7b:ba:b9:76:39:0f:41:73:74:e1:fd:87:17:5a:
                    27:01:4d:fa:b4:de:a7:69:e7:ef:7b:f0:27:a1:28:
                    dd:01:37:d2:11:c6:84:ca:79:b5:99:62:1c:a9:96:
                    36:5e:e2:99:b3:7f:3c:33:7f:24:75:4f:1c:e7:2d:
                    32:94:e9:80:f5:5d:92:64:25:df:6e:f5:dd:b5:00:
                    86:2f:c5:49:50:60:6a:4e:59:e9:a1:1b:da:7c:b8:
                    3d:ce:d7:b9:29:5d:77:41:89:bd:d0:ad:7b:49:41:
                    17:93:f4:83:22:ea:77:1e:66:8e:85:af:a5:b8:d6:
                    92:06:06:e4:b9:43:38:2f:22:c2:0d:88:76:18:c9:
                    04:95:b3:06:76:e9:95:64:27:c9:29:79:37:e1:73:
                    07:7e:42:c1:ae:d0:db:ad:44:7c:26:e6:70:7c:61:
                    ad:e0:22:02:7e:4a:6f:38:0a:3d:fa:a1:60:0d:ee:
                    14:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2D:44:85:EA:90:30:3E:CF:C5:DD:82:04:CE:2C:66:03:59:56:B8
            X509v3 Authority Key Identifier:
                keyid:BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/79734D6AB9EB11F095C2C735C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:22:dc:e8:c8:44:e9:b2:01:a2:43:f2:4f:36:c7:c6:3d:05:
         49:2c:2d:fc:f7:49:5a:dd:cb:ca:88:2e:53:cf:c9:18:62:83:
         33:3e:7a:a0:cd:b4:8d:e5:71:6d:38:c9:de:17:2f:d2:cc:33:
         ac:c5:da:2b:51:4b:6b:d8:52:a5:cd:ec:de:43:15:93:df:b3:
         59:e9:82:76:96:ac:ab:1c:fe:4e:d5:8f:f4:a9:4e:f0:7c:08:
         6c:cf:31:0c:a8:2c:aa:4a:80:e8:d2:32:8d:6a:97:9d:03:80:
         8a:c0:af:64:13:73:1d:ac:c9:17:aa:0f:d3:3c:ac:8d:ca:84:
         b1:48:8d:60:41:38:46:14:c8:e4:2a:82:f8:4f:4c:18:6c:ad:
         98:36:77:14:9b:7b:9c:b6:01:70:f6:c1:06:4d:3c:de:29:e4:
         8d:f3:cb:dc:ac:c1:5c:44:02:5f:65:b6:7b:e1:59:70:7f:f2:
         e9:d7:39:ee:48:ca:88:64:b2:b7:9c:a7:c2:da:8f:42:b7:f0:
         2e:13:7b:67:1b:bd:fc:36:8f:aa:d5:0c:6d:48:d6:23:e3:a9:
         02:3f:b0:1a:c8:4d:d4:10:06:a6:e9:45:6e:0c:eb:90:46:db:
         ed:47:13:00:3f:8d:8d:4f:62:d2:a7:d6:e2:af:dd:37:c3:36:
         6c:b4:7a:63
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
RkU3NjExMC8GA1UEBRMoQkQ4RTNDQzJBOTNENURCQ0Q4NDI3NTA5NzM4QTMxNEJG
OTBDODg3RDAeFw0yNjA1MTQyMTM5NDVaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMDY0MTIxLTViODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCftqLNFp7ZlJjlG4ZiPIyxgrc+VHbEEEoiRNRgYkbs+UOTGzzPw0OdjCxl8mK4
zIAR/cPJAlL+D36s8lkk0hNdKUAloIfCodezwyx7url2OQ9Bc3Th/YcXWicBTfq0
3qdp5+978CehKN0BN9IRxoTKebWZYhypljZe4pmzfzwzfyR1TxznLTKU6YD1XZJk
Jd9u9d21AIYvxUlQYGpOWemhG9p8uD3O17kpXXdBib3QrXtJQReT9IMi6nceZo6F
r6W41pIGBuS5QzgvIsINiHYYyQSVswZ26ZVkJ8kpeTfhcwd+QsGu0NutRHwm5nB8
Ya3gIgJ+Sm84Cj36oWAN7hSVAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU5y1EheqQ
MD7Pxd2CBM4sZgNZVrgwHwYDVR0jBBgwFoAUvY48wqk9XbzYQnUJc4oxS/kMiH0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGRTc2L0Q5RTRDNENDQjky
NzExRjBCODBFQzQ1RUM0RjlBRTAyL3ZZNDh3cWs5WGJ6WVFuVUpjNG94U19rTWlI
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvdlk0OHdxazlYYnpZUW5VSmM0b3hTX2tNaUgwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RkU3Ni9EOUU0QzRDQ0I5MjcxMUYwQjgwRUM0NUVDNEY5QUUwMi83OTczNEQ2QUI5
RUIxMUYwOTVDMkM3MzVDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGK/AgwDQYJKoZIhvcNAQELBQADggEBAFIi3OjIROmyAaJD8k82x8Y9
BUksLfz3SVrdy8qILlPPyRhigzM+eqDNtI3lcW04yd4XL9LMM6zF2itRS2vYUqXN
7N5DFZPfs1npgnaWrKsc/k7Vj/SpTvB8CGzPMQyoLKpKgOjSMo1ql50DgIrAr2QT
cx2syReqD9M8rI3KhLFIjWBBOEYUyOQqgvhPTBhsrZg2dxSbe5y2AXD2wQZNPN4p
5I3zy9yswVxEAl9ltnvhWXB/8unXOe5Iyohksrecp8Laj0K38C4Te2cbvfw2j6rV
DG1I1iPjqQI/sBrITdQQBqbpRW4M65BG2+1HEwA/jY1PYtKn1uKv3TfDNmy0emM=
-----END CERTIFICATE-----
Generated at Tue Jun 2 22:04:38 2026 by rpki-client