Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/79F7221E892911EF896D1145C4F9AE02.roa
File:                     79F7221E892911EF896D1145C4F9AE02.roa (raw, json)
Hash identifier:          4HsEjdA6ll0rAi2M5nFxa1SGJVN7pNCKPiFzJN7imik=
Subject key identifier:   03:72:B7:F8:96:02:D2:47:9D:0D:20:19:D3:FB:0A:B4:A1:8E:E2:58
Certificate issuer:       /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Certificate serial:       01C8
Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/79F7221E892911EF896D1145C4F9AE02.roa
Signing time:             Fri 01 May 2026 04:36:34 +0000
ROA not before:           Fri 01 May 2026 04:36:34 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     45179
IP address blocks:        43.239.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
                          rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91348C9, serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
        Validity
            Not Before: May  1 04:36:34 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f42dd2-f61a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:21:37:7a:dc:70:bf:ab:fe:b5:84:4c:5e:8e:
                    2a:d9:c3:58:9f:47:13:ce:73:31:57:36:67:64:8c:
                    e6:47:e7:3b:e6:8a:0d:f5:37:dd:52:b3:ed:d4:f9:
                    27:64:fa:17:7a:3c:80:bb:fb:29:b1:59:8b:7e:94:
                    e5:2b:24:e9:83:07:72:b0:99:b5:cf:77:2e:2a:e0:
                    67:20:8c:4f:27:19:07:bf:00:fe:d1:27:39:ff:5c:
                    24:c3:65:6f:d9:e0:57:dd:35:9d:9d:ba:a8:02:50:
                    61:9c:eb:70:85:04:2f:60:b3:e8:e4:65:9d:0b:82:
                    b8:b1:05:30:c0:16:7f:8e:4d:ec:8b:9c:68:04:8f:
                    eb:ed:d7:be:af:6b:cc:c5:d6:da:c0:98:07:bb:f2:
                    1c:e9:97:ea:db:0e:8f:e7:88:0e:ab:1a:e7:b2:f4:
                    a7:17:f2:23:03:f3:27:c0:45:9d:a2:fd:7e:f0:89:
                    89:0a:43:1d:4b:25:d3:9e:68:96:49:97:e0:53:71:
                    df:58:8b:0c:39:0c:84:2f:61:77:4a:8d:43:f1:a7:
                    1a:39:8a:60:39:21:6c:04:b8:b2:c9:df:5b:4e:3b:
                    f9:1f:f2:39:23:b5:1d:2d:30:42:f6:43:29:34:0e:
                    42:6a:3e:d5:67:1e:04:4c:a4:97:82:a7:a6:f0:13:
                    33:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:72:B7:F8:96:02:D2:47:9D:0D:20:19:D3:FB:0A:B4:A1:8E:E2:58
            X509v3 Authority Key Identifier:
                keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/79F7221E892911EF896D1145C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:b2:88:33:c3:90:71:69:e1:5d:cf:f0:03:40:ee:2d:bf:bc:
         8e:02:28:77:92:75:65:ac:33:9b:56:51:d7:53:13:3d:18:4c:
         95:a0:1b:5e:f2:2c:c0:28:e5:94:cb:ba:c7:14:be:1b:7b:a8:
         93:2b:3d:1c:98:d8:fd:7b:6c:e0:b8:20:38:5a:42:2b:a3:16:
         c0:6e:04:84:65:c6:ef:57:a3:59:0a:b0:40:6f:17:5e:4a:e1:
         0a:15:02:89:58:ff:c0:51:aa:82:b2:f8:37:b8:f2:2b:74:e3:
         a0:d0:dd:c7:56:a2:83:3c:f6:db:5b:40:a3:08:77:65:01:ab:
         90:fb:fe:07:a5:84:ce:86:74:69:38:a7:e8:85:c8:b9:22:59:
         1d:4c:94:ff:3b:20:49:8c:2d:6e:08:6c:2a:8a:be:b6:94:9f:
         e3:02:bb:ff:45:5d:91:53:4f:ff:13:0c:b0:4d:f8:d8:31:b6:
         1e:30:e4:b0:78:69:1d:54:16:b2:3c:d3:9b:40:df:b3:11:a8:
         f2:63:59:95:dc:72:36:1a:e8:fc:b4:25:fe:09:27:79:e5:ce:
         d4:f3:1e:d1:38:63:5a:45:bf:e9:ed:db:cd:0f:80:a4:cd:c7:
         a2:75:0d:72:11:82:09:5c:6f:e5:95:67:cf:9f:27:95:22:24:
         a1:05:d7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:15:55 2026 by rpki-client