Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/929F2FE6D9A911F189ADEAB62166CEF9.roa
File:                     929F2FE6D9A911F189ADEAB62166CEF9.roa (raw, json)
Hash identifier:          4np3j9v3ZUPftNMdnm6ZtRAx4c9D80ld0akGsLEr088=
Subject key identifier:   94:83:B4:66:77:5B:E0:75:9F:6E:0C:99:B7:CC:96:26:99:7C:00:70
Certificate issuer:       /CN=A91AEEAA/serialNumber=3B0A443C509864294FB4BE479053661803F1AFE1
Certificate serial:       70
Authority key identifier: 3B:0A:44:3C:50:98:64:29:4F:B4:BE:47:90:53:66:18:03:F1:AF:E1
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OwpEPFCYZClPtL5HkFNmGAPxr-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/929F2FE6D9A911F189ADEAB62166CEF9.roa
Signing time:             Fri 06 Nov 2026 06:16:16 +0000
ROA not before:           Fri 06 Nov 2026 06:16:16 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     18229
IP address blocks:        151.158.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.crl
                          rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OwpEPFCYZClPtL5HkFNmGAPxr-E.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 08:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEEAA, serialNumber=3B0A443C509864294FB4BE479053661803F1AFE1
        Validity
            Not Before: Nov  6 06:16:16 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6aed70b0-b202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b5:d0:eb:c2:0d:03:26:63:18:d1:c3:98:2c:
                    71:06:11:6e:ba:bd:74:42:a8:c2:27:5a:0e:57:1f:
                    2c:c4:a2:f5:53:11:d8:cc:85:a1:be:2a:eb:0a:b4:
                    32:54:ed:76:0c:66:a9:56:1e:61:a6:40:b3:8a:6d:
                    97:f2:f1:a0:02:da:6b:06:79:c4:a8:89:96:57:59:
                    06:4b:26:37:e2:b2:e7:2c:0b:ca:c7:2c:47:9c:a0:
                    2b:ac:39:a8:03:00:46:ee:1f:76:0e:55:d8:92:3f:
                    73:e5:90:dc:2f:15:92:a5:d8:d1:2d:62:6d:e9:40:
                    b8:8c:ca:b9:d6:aa:7b:b4:e3:db:08:e1:3c:f2:6a:
                    af:fe:b7:f8:1c:95:b1:23:9e:7a:d5:6f:7f:14:ed:
                    0b:45:ea:4c:0b:54:29:55:01:46:72:cc:fb:dd:8e:
                    a0:52:1c:e1:6c:06:59:bc:a7:88:d5:1d:7c:46:c3:
                    17:89:f0:e0:25:c1:eb:e1:72:1c:7f:f6:21:c0:37:
                    e1:9a:e8:24:06:db:83:4d:e9:5f:92:a1:b8:b1:24:
                    33:14:d5:98:81:be:9d:22:a6:61:60:d5:16:32:cd:
                    c6:92:d3:1f:2f:46:df:82:d4:9e:3e:ee:08:ba:09:
                    2e:c8:f7:68:3d:98:39:7d:70:95:ac:4f:56:9d:3c:
                    b6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:83:B4:66:77:5B:E0:75:9F:6E:0C:99:B7:CC:96:26:99:7C:00:70
            X509v3 Authority Key Identifier:
                keyid:3B:0A:44:3C:50:98:64:29:4F:B4:BE:47:90:53:66:18:03:F1:AF:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/OwpEPFCYZClPtL5HkFNmGAPxr-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/OwpEPFCYZClPtL5HkFNmGAPxr-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEEAA/EB78DEC2325211F185E814C9B5833773/929F2FE6D9A911F189ADEAB62166CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:78:b9:55:62:b8:9e:cf:17:c5:02:ae:6d:7b:01:30:93:c9:
         9a:97:30:f2:a5:06:6b:33:bb:c4:c5:f0:e2:4a:27:c3:6c:f2:
         a4:c1:33:8a:0d:12:ff:48:f8:bc:37:e7:91:17:08:4e:b8:1a:
         5d:a0:a2:4f:7e:ce:67:40:90:6f:68:bb:ef:5a:91:fc:36:21:
         0f:5a:b4:4c:a5:fc:e6:36:14:6b:b5:84:4e:42:78:0b:ac:31:
         f7:5c:2c:bf:ec:f6:93:73:14:d6:44:93:01:14:01:13:5b:ca:
         44:60:8c:08:89:33:d8:77:88:a4:c5:06:07:7c:bb:cd:ed:1c:
         e7:6a:7c:58:66:14:bc:c3:5a:d3:2d:70:58:50:29:12:38:a2:
         91:c1:8a:6d:7a:08:fe:8b:f0:3d:41:e0:63:6a:e0:a7:a9:8d:
         0f:6c:db:45:e3:d5:90:99:57:a1:47:92:66:bd:c0:ff:af:9b:
         7a:7b:dc:59:bb:b7:82:7f:06:81:22:88:45:18:2b:09:e3:57:
         f1:d3:5d:01:55:30:cf:90:ae:cd:8b:01:6f:3c:40:99:9d:d9:
         d2:23:b2:44:6b:d1:1c:14:a3:00:7f:ec:67:fe:5d:7e:53:4b:
         c4:2a:da:f5:a4:00:59:f8:70:fa:52:14:b1:e0:a2:d5:27:56:
         ce:4d:58:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:13:52 2026 by rpki-client