Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/792023A8E0DD11EE86DB926AC4F9AE02.roa
File:                     792023A8E0DD11EE86DB926AC4F9AE02.roa (raw, json)
Hash identifier:          4gjKi2/J4gdMF9qCPU0QoCnTz/IPP0XSqH8g8egd1HI=
Subject key identifier:   2C:41:F4:94:28:78:61:70:EF:25:10:5B:60:48:87:20:02:FD:1E:79
Certificate issuer:       /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
Certificate serial:       13D3
Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/792023A8E0DD11EE86DB926AC4F9AE02.roa
Signing time:             Wed 26 Aug 2026 15:10:33 +0000
ROA not before:           Wed 26 Aug 2026 15:10:33 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     38255
IP address blocks:        2001:255::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 14:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5075 (0x13d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D61, serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
        Validity
            Not Before: Aug 26 15:10:33 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a8f01e8-a3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0f:33:8f:b6:76:6a:18:57:aa:3f:b8:ed:1c:
                    5d:70:e4:d3:7c:a3:d5:44:bf:32:74:c6:3b:a5:fa:
                    76:6f:41:1b:28:c1:03:4d:9e:bb:55:eb:35:aa:75:
                    ef:99:20:c4:12:3e:8c:ac:e0:23:95:0d:5e:a0:8a:
                    9c:8d:db:ce:a1:72:d4:c5:08:99:e7:75:55:ed:93:
                    f5:ea:53:a9:e2:d3:05:18:4e:89:e9:f3:a0:18:06:
                    6f:2d:01:6f:bb:45:20:ed:4b:a3:04:95:36:00:51:
                    e5:df:12:df:9e:84:91:39:eb:71:e9:5e:30:e1:6e:
                    10:8d:18:3c:f7:c7:de:9d:af:87:81:64:14:76:aa:
                    d0:71:1d:36:27:2d:7c:f4:41:ff:e4:b8:31:38:c9:
                    cb:99:97:68:b6:1b:42:bc:f6:6b:a2:40:2a:26:d9:
                    50:05:be:e0:0e:db:3a:03:7a:5d:e1:29:a1:55:2a:
                    8f:93:10:2e:30:98:e1:0d:4a:35:3d:bc:dd:21:5b:
                    55:1d:fd:35:02:f6:eb:5f:98:7a:77:d1:e4:b7:54:
                    c6:f7:b1:11:b7:a8:ef:d9:3c:7b:d2:d7:06:a5:25:
                    51:14:bf:79:19:81:42:01:a9:93:c6:7f:47:79:93:
                    c6:41:a0:c3:f3:6b:6e:c4:5d:0e:5e:40:d8:a6:66:
                    97:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:41:F4:94:28:78:61:70:EF:25:10:5B:60:48:87:20:02:FD:1E:79
            X509v3 Authority Key Identifier:
                keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/792023A8E0DD11EE86DB926AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:255::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:24:5d:4b:da:0a:62:46:b8:58:7c:0f:9a:31:6d:08:18:4d:
         66:ec:32:41:a5:4c:0d:7b:49:21:12:57:1b:ca:e4:38:9e:7c:
         38:97:10:ce:ff:d6:c7:d2:c2:51:9f:a3:a7:32:8c:1c:63:55:
         27:5f:c5:15:85:03:3d:6f:fe:ca:76:0e:f9:45:a1:fa:aa:88:
         f5:ac:23:10:f5:a5:ab:28:bb:e3:6c:fe:50:f2:b0:9a:ad:2b:
         a5:2e:9b:37:95:cf:45:ae:5a:f7:e4:ff:93:76:b5:b6:12:c9:
         30:68:03:cf:ad:32:1e:7f:9e:c3:48:9a:cf:24:bd:7e:8f:1e:
         4c:27:46:63:aa:0c:b8:47:9f:a0:cb:33:e6:96:81:72:52:dc:
         6d:de:38:48:80:cd:a3:cd:24:b5:fe:c0:52:91:7f:b2:b1:c4:
         f1:48:da:8f:57:f0:ae:8b:3b:26:32:31:d1:38:ba:c1:81:7c:
         9e:12:ad:02:3d:33:ad:22:fe:53:40:74:17:bb:9d:f6:03:3a:
         95:c4:01:ac:f0:26:69:13:ab:49:54:14:d1:ec:9c:76:14:db:
         a3:57:2b:bc:36:c0:85:c5:bc:62:f7:95:aa:04:fd:c2:49:51:
         86:cc:b8:5c:16:16:cf:82:95:b5:73:c3:ad:e4:6b:f5:75:54:
         2e:d8:93:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 14:05:44 2026 by rpki-client