Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8AE1E18AAB3411F085D6B647C4F9AE02.roa
File:                     8AE1E18AAB3411F085D6B647C4F9AE02.roa (raw, json)
Hash identifier:          OySAnBdwJTi3IVmTSx/cuL36extS6/mFNWKp68Yeodg=
Subject key identifier:   F9:3B:AB:97:21:F9:44:A2:BA:8A:63:63:69:76:63:BA:53:40:B3:2A
Certificate issuer:       /CN=A91100B2/serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Certificate serial:       07
Authority key identifier: BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8AE1E18AAB3411F085D6B647C4F9AE02.roa
Signing time:             Fri 17 Oct 2025 08:49:14 +0000
ROA not before:           Fri 17 Oct 2025 08:49:14 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138160
IP address blocks:        79.109.0.0/24 maxlen: 24
                          79.109.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
                          rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91100B2, serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
        Validity
            Not Before: Oct 17 08:49:14 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68f2030a-57a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ab:37:ea:10:a5:b8:a0:a5:45:ec:42:4f:3c:
                    b4:84:a4:59:7f:59:ea:df:38:4e:fb:62:26:27:46:
                    3e:88:46:24:ce:01:e5:4b:85:a4:ae:fc:c7:96:ab:
                    8a:44:9e:22:fc:f8:90:b7:31:55:97:ce:a3:25:ab:
                    74:80:2b:d5:aa:a8:4d:e3:5e:36:5f:3f:dd:d7:9b:
                    2c:99:fa:b5:51:e3:12:dd:89:da:31:ba:0c:ef:a4:
                    be:6b:dd:e1:bb:a1:89:39:18:83:9e:46:82:75:53:
                    36:5e:11:a6:62:9e:4d:80:b1:54:88:c1:97:b8:46:
                    39:e4:5a:a3:c8:c7:fa:36:5e:5a:5c:d7:af:88:ad:
                    62:f0:20:aa:52:e0:9b:94:58:52:8a:25:07:a8:ae:
                    02:68:76:89:b0:44:d0:f6:fc:b2:79:45:ee:6d:ca:
                    fc:07:ef:12:d1:3e:f0:5d:c5:88:33:bd:4c:62:92:
                    b6:9c:09:aa:c2:d8:a6:d8:07:35:1f:c6:ca:fa:d2:
                    43:09:e1:08:6e:4c:84:27:02:49:d7:91:11:b8:c6:
                    5b:e4:35:51:60:a7:03:99:f7:64:ad:7c:2b:c9:ce:
                    75:0f:74:68:7a:88:bb:20:2b:f3:76:d3:9e:c8:dd:
                    c4:90:14:34:36:bd:1d:e3:15:26:84:7e:28:99:15:
                    d3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3B:AB:97:21:F9:44:A2:BA:8A:63:63:69:76:63:BA:53:40:B3:2A
            X509v3 Authority Key Identifier:
                keyid:BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/8AE1E18AAB3411F085D6B647C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.109.0.0/24
                  79.109.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:ed:ab:c3:b2:f8:9c:96:28:99:d4:34:54:a1:c0:ad:07:1e:
         49:d3:23:9c:14:42:3f:e7:7b:fe:a2:aa:df:1f:fd:0f:6d:da:
         01:6f:38:43:62:f2:94:fb:7d:40:8b:8e:3e:17:af:c7:d2:e1:
         91:39:85:f8:d1:ab:37:96:b1:52:82:59:23:d3:28:f3:ee:0f:
         cb:35:fd:a3:3d:29:0a:69:27:54:53:cd:70:44:8e:45:9b:c1:
         b4:6a:25:95:c2:8b:10:ca:1b:72:b4:4e:e1:1d:08:f4:2f:97:
         ed:76:6b:81:6f:d0:85:2b:da:4b:02:ee:ae:0c:e0:a8:7a:84:
         41:2e:14:c6:bb:71:41:7c:d2:96:e9:dd:c4:b9:63:c2:08:8d:
         d7:0d:e8:18:3d:29:34:1f:21:5b:30:50:1c:4f:ca:10:d1:3d:
         bc:b5:7d:8d:54:c9:94:53:f7:80:42:48:cc:32:e2:56:48:0a:
         e6:c7:16:d8:c7:ff:78:da:5d:8e:02:88:66:2b:59:ce:b4:5a:
         bc:f4:de:0d:e7:83:0d:63:5a:93:32:9d:01:55:5d:71:67:86:
         f0:c8:ac:44:d0:f9:94:fc:ba:b6:2f:2f:c8:ad:3a:2a:de:e9:
         ba:05:0d:30:d9:69:66:ee:ed:3a:bf:2b:a8:1b:18:9a:06:79:
         48:36:c8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:48:30 2025 by rpki-client