Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/10B39A4C5A0D11F1B23D20139E833773.roa
File:                     10B39A4C5A0D11F1B23D20139E833773.roa (raw, json)
Hash identifier:          9wfXnJqRIzWPW1ECL+07dH1j6EFMDhOBulwuQPOnKCQ=
Subject key identifier:   E0:09:82:A0:CE:88:5A:A7:0B:02:6C:9F:FC:D3:99:F6:9A:EF:CD:FE
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       0883
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/10B39A4C5A0D11F1B23D20139E833773.roa
Signing time:             Wed 27 May 2026 20:45:59 +0000
ROA not before:           Wed 27 May 2026 20:45:59 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     153259
IP address blocks:        156.59.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 21:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2179 (0x883)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: May 27 20:45:59 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a175806-fda3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5e:ff:87:90:b9:22:c7:9b:35:1e:74:2a:94:
                    c4:46:7f:87:39:1a:f5:f3:56:11:34:8f:0a:47:6a:
                    f4:c6:2d:b4:13:c8:84:2b:7f:07:4f:6a:66:37:56:
                    32:f6:6c:12:fb:7f:1a:89:14:1d:50:32:77:72:84:
                    54:ab:13:e1:80:f8:cb:5b:2e:a7:7e:91:ca:a6:0b:
                    be:24:a5:a9:d9:d0:f2:87:46:d6:5d:f5:c9:0b:eb:
                    7a:16:0e:1e:02:f9:ba:e2:9f:e9:b7:1a:5c:64:d4:
                    bc:af:93:42:b9:15:4f:2c:30:da:8e:ee:e9:07:cc:
                    02:15:ad:7a:c8:cd:ea:8e:03:92:6c:20:b3:41:9f:
                    9b:6c:db:78:cd:00:ce:e4:c4:5c:c1:65:0c:82:e1:
                    9d:20:95:6e:d5:4d:ca:41:08:5a:62:51:9f:a8:fb:
                    94:48:48:44:c9:92:90:2f:2c:da:dc:ca:f1:53:98:
                    91:50:20:0e:30:84:db:72:ca:a9:ab:2f:ee:d0:89:
                    6a:61:fb:84:d5:14:ce:8b:24:36:c1:a4:36:e4:9a:
                    d1:4c:12:a2:48:a6:2c:6f:0c:c4:84:ed:f3:c1:5e:
                    fa:6d:85:29:54:92:55:eb:84:23:58:10:b7:96:c8:
                    50:e1:f9:72:58:32:97:c6:2f:38:a4:e9:7a:fc:c8:
                    e8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:09:82:A0:CE:88:5A:A7:0B:02:6C:9F:FC:D3:99:F6:9A:EF:CD:FE
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/10B39A4C5A0D11F1B23D20139E833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.59.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:61:02:eb:40:da:64:a7:49:4a:1e:42:60:1f:38:32:d7:c1:
         8f:15:24:54:90:9f:39:27:43:8c:4a:ce:31:6d:a9:7f:04:1f:
         4d:9e:8d:5b:65:19:6e:8b:40:b1:f7:83:cb:4e:46:52:a8:57:
         6f:7f:84:11:b1:3b:58:93:6d:ef:77:36:b9:4e:b4:1f:ba:d5:
         ec:33:a9:62:8b:4d:84:b8:24:f9:61:b3:fb:b0:4b:49:13:be:
         c2:33:06:85:a3:00:e1:4d:d5:54:2f:d2:64:99:b8:e8:d6:f7:
         88:34:f1:54:5a:fb:54:36:c9:31:36:35:f3:16:a0:e1:1b:a1:
         95:0a:02:ae:93:9b:8d:ff:b2:58:5f:a4:e6:86:c1:00:de:ee:
         3b:08:9b:62:06:f7:4a:9a:29:e9:e9:94:79:c6:3b:32:2f:9c:
         5a:05:f3:fa:cc:a0:e5:93:a4:44:76:57:bf:68:66:b0:95:2c:
         2e:79:eb:ee:67:db:ff:db:6c:c8:08:7a:60:91:c7:6b:11:c1:
         e7:aa:a7:53:1f:a5:06:34:c0:71:58:f2:e3:24:6a:dd:6e:bb:
         7a:3f:67:c8:bd:0d:3f:cb:ba:98:09:07:51:a5:13:01:ac:45:
         2a:10:6d:d4:d1:81:3b:09:fb:12:0b:f9:bb:b0:8c:d0:d0:1d:
         78:43:a3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:45 2026 by rpki-client