Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/A45471ACC4ED11EE8A67C739C4F9AE02.roa
File:                     A45471ACC4ED11EE8A67C739C4F9AE02.roa (raw, json)
Hash identifier:          erd/byvZQbud2olu7o9OIZ0H+fhYsFHIOFSRXbecrlg=
Subject key identifier:   1C:8B:60:3D:F4:93:D1:BB:BA:3D:DB:73:BA:2B:2B:18:FC:C9:A8:71
Certificate issuer:       /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
Certificate serial:       0824
Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/A45471ACC4ED11EE8A67C739C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:54:28 +0000
ROA not before:           Thu 24 Jul 2025 22:34:38 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     24429
IP address blocks:        156.59.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl
                          rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 21:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2084 (0x824)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3
        Validity
            Not Before: Jul 24 22:34:38 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48b63-a153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:47:84:82:39:69:fd:66:51:83:70:12:be:22:
                    48:ec:4d:29:95:85:5a:82:9f:8f:8b:83:8c:03:a2:
                    2f:fe:d4:14:41:cd:2d:e8:17:48:bf:a3:be:d1:de:
                    34:da:58:23:24:63:5b:0d:7a:17:71:d7:b5:eb:ec:
                    be:eb:27:08:69:7c:1c:3c:a6:2f:6e:08:1f:0f:3a:
                    40:f6:a9:58:eb:17:6f:7d:6c:f4:ea:ff:87:f2:0f:
                    f0:dc:d8:cb:33:7d:d5:32:d8:9d:bc:c1:60:d6:23:
                    79:fe:82:53:b9:d3:45:22:9e:9d:d1:96:96:0d:9e:
                    f1:50:21:0a:2d:fa:e3:f3:86:eb:14:75:b6:d5:00:
                    83:f1:e9:7c:f9:08:94:61:b0:79:22:a9:72:84:86:
                    7a:4c:c5:6f:e3:02:e8:ef:e6:b6:ba:dd:41:6f:91:
                    0e:23:ad:fe:66:01:b8:6d:72:ee:96:35:56:22:19:
                    00:90:d1:5a:77:e0:a7:8a:a0:42:73:c5:e6:91:9c:
                    b2:86:69:27:b8:2a:73:f5:7c:97:af:e1:84:0b:2a:
                    5e:8a:33:a6:af:c7:26:7e:26:1c:64:a3:ab:03:63:
                    9f:ab:e0:c1:b7:27:60:48:6f:0d:f8:9e:b9:c1:bc:
                    74:53:21:11:52:64:c0:b1:6c:4f:40:39:43:e0:2d:
                    08:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8B:60:3D:F4:93:D1:BB:BA:3D:DB:73:BA:2B:2B:18:FC:C9:A8:71
            X509v3 Authority Key Identifier:
                keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/A45471ACC4ED11EE8A67C739C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.59.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:10:e3:31:68:9a:d5:c8:d2:81:bc:df:dd:d2:a8:e2:af:8a:
         f7:aa:ee:7f:64:3d:3f:99:f5:09:5d:7b:49:ee:61:c1:a2:ef:
         3a:37:07:fe:df:88:8e:88:35:6b:7b:88:a2:e6:72:da:6b:63:
         93:83:8a:f1:dc:3a:94:c0:0b:25:a3:7c:19:60:2e:e2:cc:13:
         92:ee:bc:7b:7c:37:d6:8c:03:f4:52:85:81:16:05:e9:ea:ad:
         32:63:d2:fd:22:1f:39:03:75:a1:b2:5c:2a:01:12:fa:d5:48:
         22:d7:aa:94:3b:dc:71:f1:18:41:58:e6:fe:ed:b0:aa:7f:ec:
         98:bc:bf:89:d5:ed:21:92:a3:ec:3c:1d:cb:5f:7c:b4:98:b1:
         5e:fa:7c:d6:d3:65:ba:c1:69:f5:b2:4c:2d:52:aa:37:8c:05:
         ef:ef:55:6e:cb:43:01:57:3e:06:15:49:4f:4b:17:c7:31:a6:
         be:25:f0:ab:38:29:f8:85:11:06:6f:d7:0f:63:a2:bd:09:43:
         ef:5e:5b:5e:02:cf:72:b3:a0:4c:89:e9:08:93:05:6e:e7:70:
         45:75:b9:ab:9b:aa:1e:a3:93:c8:13:4b:cb:6a:1d:53:d8:a8:
         bd:c7:f8:ef:b8:85:aa:6e:6b:97:b9:f9:1e:be:33:43:d8:c0:
         c8:df:15:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 00:04:42 2026 by rpki-client