Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/F74BBA0E307C11F09D502B0DC4F9AE02.roa
File:                     F74BBA0E307C11F09D502B0DC4F9AE02.roa (raw, json)
Hash identifier:          6PumaaWqeEWlSvcpp1tovC+UqR/XcnLSAY4hmR5KoDY=
Subject key identifier:   53:14:04:37:36:1A:DA:CE:0D:F1:3A:21:58:F6:FD:5D:E0:87:4A:CE
Certificate issuer:       /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
Certificate serial:       019F
Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/F74BBA0E307C11F09D502B0DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:43:34 +0000
ROA not before:           Mon 21 Jul 2025 05:41:38 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     133045
IP address blocks:        148.195.145.0/24 maxlen: 24
                          148.195.230.0/24 maxlen: 24
                          159.73.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl
                          rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 04:21:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415 (0x19f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D73BB, serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5
        Validity
            Not Before: Jul 21 05:41:38 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a59406-58e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:e1:fd:df:a9:22:a1:3c:6d:23:ea:76:d2:
                    7b:d4:ae:5d:7f:8d:1c:b3:21:e0:83:2e:d6:62:5a:
                    a3:e7:0d:09:4a:db:aa:c4:bb:e4:b3:ed:c8:0e:56:
                    4a:78:85:4b:77:fe:6e:32:dc:7e:f2:55:e4:0a:0a:
                    1e:54:ae:d8:37:cb:19:45:74:18:29:bf:1e:e6:88:
                    b8:0a:fa:0b:7b:c3:28:7c:2d:04:23:ab:a3:e4:db:
                    ba:28:95:d1:84:b1:ad:a2:eb:81:38:07:5b:75:d0:
                    25:54:4b:6f:2e:e1:98:16:e5:5c:c7:c9:92:f0:ff:
                    e2:7b:de:63:7f:1f:2e:a9:eb:95:85:c6:23:58:c9:
                    06:db:99:30:ed:16:f3:47:33:eb:e2:c2:8a:9f:3b:
                    9c:53:34:63:1b:0f:22:1b:90:0f:42:1e:a6:1a:7d:
                    5a:bd:1f:dd:3f:8f:75:65:ce:8a:6c:e0:84:43:9e:
                    c1:a6:52:cb:de:b2:d2:8f:7f:cc:dc:dc:e6:01:c1:
                    de:ee:d1:a2:6e:5b:d3:2c:46:b7:ff:ec:b2:72:87:
                    52:ec:f2:2c:1f:df:64:f6:7e:88:7b:e6:31:90:9c:
                    98:81:63:1b:7f:6d:12:4d:77:db:89:10:00:b2:ae:
                    7e:49:96:48:17:7c:93:2a:86:df:84:40:ab:f7:25:
                    46:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:14:04:37:36:1A:DA:CE:0D:F1:3A:21:58:F6:FD:5D:E0:87:4A:CE
            X509v3 Authority Key Identifier:
                keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/F74BBA0E307C11F09D502B0DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.195.145.0/24
                  148.195.230.0/24
                  159.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         91:97:bb:83:cb:2b:d6:29:7f:58:ed:53:94:64:f1:48:32:a1:
         46:28:d6:f1:7d:ad:12:33:c4:1d:ed:b6:fd:79:1f:d0:e7:3e:
         af:c1:e7:05:90:33:ef:f8:07:ac:cb:d6:47:04:a2:86:e1:e5:
         ce:be:b8:29:c7:6b:8e:ab:b6:2f:69:2a:b4:58:9c:c3:0b:17:
         c7:b6:e4:7f:58:8a:4a:75:ab:c0:fb:a5:be:ba:4d:6f:c8:34:
         a7:e6:72:a8:c8:dc:0b:dc:b8:2c:6e:f8:79:9d:c8:ec:51:31:
         1c:a7:e2:ff:55:78:86:fc:d0:5e:35:28:c1:68:34:e7:26:f6:
         66:1d:91:14:6c:72:9b:d7:19:d5:1d:78:24:8b:00:cb:91:80:
         84:f5:4a:dc:64:b9:70:85:7d:38:a4:ea:31:40:63:9a:0f:0f:
         07:b0:93:af:f7:c4:15:80:2b:c0:2e:b5:89:a0:f4:fc:95:b2:
         cf:f2:a5:9f:e0:58:a6:2a:28:1d:80:bf:18:29:f8:69:e5:99:
         4b:64:8f:78:f3:ea:59:28:8a:b6:d7:29:a9:9e:02:5f:6a:df:
         30:21:86:a0:36:f3:e9:a3:d5:08:d3:b1:a6:98:c0:a5:7f:55:
         1f:3d:2b:ae:ec:d3:ea:b2:97:90:04:0a:be:65:36:df:a6:87:
         77:60:a9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:19 2026 by rpki-client