Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/32701246850511F19B0544DB68A30FBC.roa
File:                     32701246850511F19B0544DB68A30FBC.roa (raw, json)
Hash identifier:          lRJz8Jm02V4m/7gp5At9XI7RM1aeGiqZoYJHPf5CB2U=
Subject key identifier:   07:4A:C1:CC:01:7E:6D:DF:80:74:8A:50:DA:0F:2A:91:A3:2E:DC:90
Certificate issuer:       /CN=A91F69AC/serialNumber=630C0275D1519C3EE4BAA7ED9FDB7452F3E10C4B
Certificate serial:       03
Authority key identifier: 63:0C:02:75:D1:51:9C:3E:E4:BA:A7:ED:9F:DB:74:52:F3:E1:0C:4B
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YwwCddFRnD7kuqftn9t0UvPhDEs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/32701246850511F19B0544DB68A30FBC.roa
Signing time:             Tue 21 Jul 2026 13:07:59 +0000
ROA not before:           Tue 21 Jul 2026 13:07:59 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     23884
IP address blocks:        78.142.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.crl
                          rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YwwCddFRnD7kuqftn9t0UvPhDEs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 13:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F69AC, serialNumber=630C0275D1519C3EE4BAA7ED9FDB7452F3E10C4B
        Validity
            Not Before: Jul 21 13:07:59 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a5f6f2f-5e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:88:dd:73:6a:2c:db:32:10:05:a5:6d:eb:06:
                    b6:5e:9d:36:ba:11:c3:f8:7f:3d:7b:32:c7:14:7b:
                    b8:95:db:70:a5:10:ee:9d:8e:56:0b:15:4b:fd:98:
                    32:bb:53:bd:c1:28:92:48:54:b2:d7:cf:a5:87:08:
                    84:a1:d6:e7:5d:07:80:9b:2e:39:db:76:bc:91:a1:
                    2b:b4:8b:d8:d5:61:52:df:2e:56:90:6a:67:18:39:
                    07:8d:57:0e:6f:0b:a0:fb:c0:91:9e:89:b6:ee:00:
                    9f:de:91:a5:6b:10:1a:5d:5f:47:3c:fe:85:70:a1:
                    6a:bb:99:50:e8:ab:ff:ec:89:53:dd:b6:73:2d:7f:
                    19:9c:de:3a:71:df:ed:dc:5e:48:f8:15:a9:a5:34:
                    46:c8:d0:af:ff:e4:c6:a2:de:fe:cd:ad:2d:d6:84:
                    12:ee:56:e1:ee:04:79:a8:80:10:8e:20:32:37:ce:
                    c6:db:e5:5c:35:60:f8:8b:f2:9e:ad:af:d3:7d:fe:
                    a6:96:e2:9d:ff:c8:84:be:9e:06:73:f6:de:55:2c:
                    62:2a:5b:61:b7:1e:93:95:a4:f4:92:76:6d:95:92:
                    af:e9:94:04:65:29:92:96:1e:99:a7:6c:7e:c3:2d:
                    2e:66:2a:4d:57:37:b1:39:98:1f:02:95:57:eb:0a:
                    67:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4A:C1:CC:01:7E:6D:DF:80:74:8A:50:DA:0F:2A:91:A3:2E:DC:90
            X509v3 Authority Key Identifier:
                keyid:63:0C:02:75:D1:51:9C:3E:E4:BA:A7:ED:9F:DB:74:52:F3:E1:0C:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/YwwCddFRnD7kuqftn9t0UvPhDEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YwwCddFRnD7kuqftn9t0UvPhDEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69AC/FD0D3C10848111F18D9ED8E67FA30FBC/32701246850511F19B0544DB68A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.142.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:33:08:41:75:32:0a:c6:74:94:ed:e0:9c:99:c5:f3:bd:9f:
         4c:04:11:40:0f:d2:54:aa:28:c1:1e:9c:83:3a:9f:76:58:9a:
         fc:63:39:27:d6:48:f9:7d:5b:06:31:ee:76:3d:ae:71:e0:aa:
         47:a8:99:a7:ed:8f:44:74:a7:9e:ac:af:13:63:cd:01:b6:4c:
         6c:12:26:4e:32:19:69:f1:7e:bc:5f:f8:ec:8e:eb:c5:0b:d0:
         50:5b:37:1f:f2:f5:a0:50:1e:49:be:e5:ea:a9:43:df:84:e6:
         22:56:04:0e:47:04:32:95:0e:a7:d3:1f:71:b5:20:4d:57:d6:
         cb:27:b0:6e:6e:ad:5b:b4:93:63:cb:ac:83:42:85:a3:8d:a6:
         34:36:68:ec:24:a9:61:86:b6:56:80:f4:5d:02:52:ba:74:df:
         60:32:e9:0c:78:5d:7e:2c:7f:2c:67:94:f5:2b:b1:c6:2f:05:
         d3:95:a2:3d:50:9b:1c:40:8b:d0:88:22:45:85:20:06:4c:26:
         db:19:27:05:60:f0:64:95:d1:55:52:a6:61:5f:f1:86:65:fd:
         97:04:4d:0f:97:db:4a:a9:56:8f:d2:f8:90:2d:3b:aa:80:22:
         5b:38:40:4d:ce:47:0b:2b:47:06:03:4d:a6:6f:0b:af:01:4b:
         2c:d2:09:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:39 2026 by rpki-client