Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/04594232DEA011EE91181415C4F9AE02.roa
File:                     04594232DEA011EE91181415C4F9AE02.roa (raw, json)
Hash identifier:          r0uDvba6DftUN0N3BUlL384UPeW2DqBJfJ5rm2wQtaQ=
Subject key identifier:   28:58:12:09:55:3C:7E:E4:F4:2C:7D:7F:13:44:06:47:5C:80:BF:73
Certificate issuer:       /CN=A91C7B15/serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584
Certificate serial:       02BC
Authority key identifier: 58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/04594232DEA011EE91181415C4F9AE02.roa
Signing time:             Fri 28 Aug 2026 22:13:06 +0000
ROA not before:           Fri 28 Aug 2026 22:13:06 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     37988
IP address blocks:        195.114.14.0/23 maxlen: 23
                          195.114.126.0/23 maxlen: 23
                          195.114.126.0/24 maxlen: 24
                          195.114.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 700 (0x2bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B15, serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584
        Validity
            Not Before: Aug 28 22:13:06 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a9207f2-da10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:5b:71:77:72:72:a8:79:5d:74:93:9a:ec:
                    78:d0:ed:d8:ea:0c:e5:37:36:fa:22:d5:d2:69:39:
                    88:e3:c8:d4:7c:92:99:08:d2:40:3b:eb:29:55:55:
                    1f:8b:6f:f9:29:74:8c:19:14:ba:5e:75:b4:c1:37:
                    6a:91:1e:69:b0:01:a8:26:a4:90:cd:3b:e6:9f:f5:
                    e1:c2:45:f7:4a:78:f1:60:c8:67:7d:55:87:0d:ac:
                    b7:bd:ac:a8:89:29:37:60:10:3b:b1:3d:24:34:dc:
                    d5:40:28:a8:a2:15:d6:43:68:b9:d4:0d:ec:6b:69:
                    da:5c:9c:b7:0e:bb:59:62:6b:1c:86:22:25:2e:44:
                    52:5d:2f:5d:a9:5a:d9:df:e2:16:14:d9:fa:2d:04:
                    8e:ce:19:3b:42:55:f0:d4:26:f8:a3:f5:dd:a9:45:
                    9c:70:2c:5f:e4:20:2c:58:9a:1b:31:21:22:1b:5b:
                    7b:1e:cc:e6:c7:b2:29:e8:d3:8d:38:44:dc:8d:ba:
                    a3:b3:54:8d:9f:da:e8:d5:7c:f0:41:27:78:ba:ce:
                    bc:a5:37:87:e9:da:1d:35:48:77:d0:09:92:a5:95:
                    17:66:8b:93:d8:a3:60:1a:3b:65:ab:aa:06:d0:e8:
                    1f:9b:f2:bc:0a:b5:2e:34:48:69:a5:6e:bb:75:27:
                    93:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:58:12:09:55:3C:7E:E4:F4:2C:7D:7F:13:44:06:47:5C:80:BF:73
            X509v3 Authority Key Identifier:
                keyid:58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/04594232DEA011EE91181415C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.114.14.0/23
                  195.114.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:99:b7:2f:df:93:a1:cc:b1:40:4d:d3:31:80:44:75:c2:bc:
         d1:2c:24:2e:bf:e8:75:55:3a:1a:b6:2b:c1:50:9a:c1:28:54:
         45:37:42:89:d6:13:a3:2f:c1:b8:bb:fa:04:92:e6:4f:2b:32:
         3e:93:a9:cd:74:15:4d:ea:cf:df:e5:87:18:c2:47:0b:c3:97:
         08:14:38:7a:3a:a2:e3:e1:8c:f8:6d:4f:14:ac:f0:31:3a:7e:
         a9:80:d0:95:d5:f9:a7:1d:e6:66:42:4e:ef:83:24:ec:21:c4:
         2e:a6:19:98:11:ec:aa:42:05:9a:94:75:3d:45:11:21:5b:60:
         21:cf:f4:76:c8:22:7a:76:49:1b:82:37:ec:18:ca:c8:74:ce:
         b2:24:db:ff:fb:4a:c6:7d:0e:a9:85:9d:67:d7:ae:53:33:b5:
         b2:9a:c1:aa:9b:6f:31:4a:ee:af:cc:5e:20:a9:1e:63:2e:f8:
         28:93:3c:92:61:f8:ee:b7:47:e7:32:c4:d3:bd:da:33:fc:47:
         4e:f2:16:07:2d:42:47:1a:f6:53:a9:3b:3a:39:d7:3c:8d:fc:
         ef:1f:fd:ae:9f:d7:dc:5e:4f:a8:f9:35:35:9d:55:a4:7f:49:
         a0:10:39:3f:b7:75:55:56:f6:2e:57:28:d7:b7:4e:f2:cf:99:
         5e:d0:be:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:02:51 2026 by rpki-client