Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/08A46B6A1B5111F18293DF0B253D8C67.roa
File:                     08A46B6A1B5111F18293DF0B253D8C67.roa (raw, json)
Hash identifier:          paY1IgZglY+7jUPQLryJgAPBr5lC+wefahWE0iv9Cwo=
Subject key identifier:   84:72:96:06:B4:67:EB:E6:B6:EF:FD:90:FE:E5:CF:2F:DD:70:2B:8A
Certificate issuer:       /CN=A91AE7C5/serialNumber=DF71F62A86301AC6D3ACA409832CC3A9D99C9A11
Certificate serial:       4D
Authority key identifier: DF:71:F6:2A:86:30:1A:C6:D3:AC:A4:09:83:2C:C3:A9:D9:9C:9A:11
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/08A46B6A1B5111F18293DF0B253D8C67.roa
Signing time:             Thu 23 Jul 2026 10:35:35 +0000
ROA not before:           Thu 23 Jul 2026 10:35:35 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     140959
IP address blocks:        151.158.191.0/24 maxlen: 24
                          151.158.191.4/32 maxlen: 32
                          151.158.191.100/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.crl
                          rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:35:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE7C5, serialNumber=DF71F62A86301AC6D3ACA409832CC3A9D99C9A11
        Validity
            Not Before: Jul 23 10:35:35 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a61ee77-d9b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ad:d9:73:98:d7:ad:bf:97:a3:8e:15:80:4b:
                    3c:af:9b:50:5f:c1:08:cd:69:57:f2:2b:53:2c:2e:
                    03:0c:8a:ea:d8:5b:20:f6:e9:2d:b3:38:49:a7:d3:
                    99:51:f9:1f:e3:0c:c7:1e:81:8e:2c:b0:be:51:58:
                    1d:67:76:25:54:27:e5:f6:43:27:f2:70:6c:01:98:
                    46:87:d6:20:97:59:0c:3f:f8:42:3b:e5:82:b9:aa:
                    99:05:da:da:d4:63:86:32:62:9c:5d:58:61:f0:c3:
                    8d:61:bc:36:f3:36:7e:68:89:d2:8f:ad:e8:ce:56:
                    7e:37:e2:8d:d7:43:68:5b:a7:8b:ae:c7:2a:3b:89:
                    1d:b2:1e:87:60:b8:5d:21:28:42:02:bd:d8:d4:d5:
                    e7:2c:a8:02:f9:13:2f:7a:56:1c:10:ea:ec:e2:d6:
                    c9:ce:20:24:d8:4b:6a:42:39:3c:73:64:34:c2:7e:
                    f4:96:46:a5:a3:4a:24:25:1d:34:2c:d3:a2:ff:e3:
                    f3:89:02:8c:20:6c:5f:ae:17:dc:54:76:bd:d0:bd:
                    2c:3b:33:59:f4:50:62:c7:d8:79:37:32:0c:fa:85:
                    da:21:5c:47:94:35:ff:e8:2a:ec:3a:d9:ea:76:df:
                    95:0b:1d:a6:04:4c:5e:82:92:fa:60:f9:43:d1:8b:
                    51:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:72:96:06:B4:67:EB:E6:B6:EF:FD:90:FE:E5:CF:2F:DD:70:2B:8A
            X509v3 Authority Key Identifier:
                keyid:DF:71:F6:2A:86:30:1A:C6:D3:AC:A4:09:83:2C:C3:A9:D9:9C:9A:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/08A46B6A1B5111F18293DF0B253D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:8d:0e:52:83:44:c6:c1:a8:74:b2:d6:0e:39:d0:42:47:df:
         6b:11:ca:b0:5b:4c:fb:ff:56:b1:99:46:3a:8e:b6:cd:54:9d:
         57:a5:df:73:6c:23:92:ae:82:4e:46:46:2c:36:ad:4e:af:c9:
         b4:72:48:90:ba:de:3f:9c:85:0d:7f:83:51:fc:89:3a:49:ec:
         04:18:90:6b:b8:18:6f:8d:a2:64:33:2b:2f:4d:da:4f:fe:01:
         a2:4b:55:c4:08:4b:8b:84:dc:c1:73:9d:10:dc:d7:eb:8b:68:
         31:b0:22:f7:30:65:65:62:01:d9:18:03:ac:f6:3a:36:e9:4b:
         82:69:48:8d:2f:e8:fe:05:6d:40:af:67:bb:ca:eb:5d:b6:b4:
         56:d9:e7:9b:01:72:24:c0:ec:e6:fd:81:24:3a:c8:03:30:91:
         62:6d:25:75:7a:f1:85:ee:13:33:3e:7d:c6:a2:ce:0d:d6:87:
         86:50:9e:9a:f8:b6:06:09:b9:fa:f2:c0:cb:0c:a4:b0:ce:d8:
         ea:01:2d:b5:9f:84:bc:6b:2b:2b:5c:55:1a:f0:b1:6e:5d:fe:
         d6:9e:fd:7e:45:c2:d6:a2:f0:12:13:5a:54:75:0d:c8:43:08:
         93:ff:02:70:f1:25:08:60:34:8c:6e:1c:46:a3:d7:fb:04:f8:
         1a:78:71:0f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:06:32 2026 by rpki-client