Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/E3BDB79A422211F1A3DEFE36CE833773.roa
File:                     E3BDB79A422211F1A3DEFE36CE833773.roa (raw, json)
Hash identifier:          4cNB8HR7jBBzIhB59PKYMVnaRTQ1HFFB4LDOqYX8Kic=
Subject key identifier:   F6:3E:1E:67:AE:32:85:B9:4B:97:64:25:52:0C:83:25:C0:34:E3:4E
Certificate issuer:       /CN=A91AC5BC/serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64
Certificate serial:       04
Authority key identifier: F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/E3BDB79A422211F1A3DEFE36CE833773.roa
Signing time:             Mon 27 Apr 2026 10:21:44 +0000
ROA not before:           Mon 27 Apr 2026 10:21:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149513
IP address blocks:        206.109.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl
                          rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC5BC, serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64
        Validity
            Not Before: Apr 27 10:21:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69ef38b8-0070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c6:63:22:6a:e0:a8:c0:3b:fb:67:c8:41:e3:
                    c8:0c:d5:a6:74:c5:a0:30:b1:9c:da:39:c8:0b:b9:
                    0c:e4:59:8d:0f:9e:48:21:bc:5f:cf:6c:01:a6:be:
                    52:41:0f:a0:55:5f:d2:54:82:c4:fa:a4:04:df:6c:
                    1a:2c:e9:a4:20:7b:ff:a2:eb:6c:eb:25:04:f3:96:
                    76:cb:76:d8:3d:ce:16:72:69:d2:e0:19:0a:77:c5:
                    97:b8:16:f4:87:29:0e:fc:49:27:f3:65:63:08:a9:
                    ed:fd:60:49:b6:0e:88:4e:ce:02:f9:7e:5b:ce:b7:
                    e3:3f:e9:0c:60:70:56:22:88:12:d6:8d:3a:0f:4c:
                    ed:bc:11:80:b7:de:c9:fc:5d:d3:56:47:db:ae:2c:
                    59:c8:0d:dd:7e:ae:64:d5:bc:3e:f6:bf:60:a8:4d:
                    9e:c5:14:a0:3a:7c:25:fc:75:7e:1c:1d:c8:02:b5:
                    0b:c6:95:5d:0c:99:9d:6e:87:da:1a:77:0d:97:ee:
                    cb:1f:33:9b:f8:78:ae:28:47:69:17:4a:50:fc:9e:
                    82:20:b7:3d:1e:ab:95:d6:84:c8:3d:5c:06:8e:ce:
                    34:e7:c1:a8:74:56:72:85:18:91:da:a6:cf:5c:25:
                    d9:02:9a:c9:62:0b:aa:2d:ed:09:b5:78:1f:f4:e5:
                    36:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3E:1E:67:AE:32:85:B9:4B:97:64:25:52:0C:83:25:C0:34:E3:4E
            X509v3 Authority Key Identifier:
                keyid:F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/E3BDB79A422211F1A3DEFE36CE833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.109.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:91:cf:d8:26:4e:54:4b:cf:64:35:0f:de:c1:46:18:a3:24:
         17:a3:78:3d:79:a8:f0:a8:00:54:9f:7e:c5:5a:08:25:17:50:
         8d:d2:af:23:9e:d2:f2:95:ea:de:d9:ac:1b:92:76:f1:59:29:
         8f:9f:2e:6e:a7:fd:63:f9:90:18:7f:cb:e7:87:93:49:7d:46:
         6e:a9:82:9d:ee:ea:33:bf:57:b9:ad:a4:6d:a8:78:e8:7d:5a:
         c0:8b:8b:49:f0:dc:03:cf:4f:08:2f:6d:df:cc:cb:2e:ba:66:
         fd:db:3a:ec:45:4b:46:bc:38:89:f9:2c:d2:15:94:d3:62:c7:
         3a:cf:82:60:4c:3d:99:03:58:e1:2d:e0:2e:a3:29:d6:73:28:
         03:da:fa:23:cf:48:73:e5:97:ab:49:ec:27:bd:45:f3:f6:48:
         2d:bd:78:5f:7b:a6:f9:2d:14:91:1c:74:a5:6c:6a:be:87:b5:
         41:4c:17:d0:24:f0:da:51:3c:c3:74:1f:23:dd:36:a5:5e:37:
         5c:3e:11:32:8d:f0:f6:e7:f3:72:d0:99:32:92:7a:4f:b4:bd:
         63:d5:8b:fd:d2:0a:7d:f9:42:ff:25:af:9b:d7:91:34:4a:70:
         11:49:73:cc:2b:09:b7:68:17:1f:04:07:c5:e1:1d:80:36:c2:
         00:28:44:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 10:39:52 2026 by rpki-client