Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/34509C1AF49D11EFBD8ACC0EC4F9AE02.roa
File:                     34509C1AF49D11EFBD8ACC0EC4F9AE02.roa (raw, json)
Hash identifier:          A4JCozIWp8wr/poP9Jp6dNkVfMHGLYtzZMkqHhGl4c8=
Subject key identifier:   D7:22:E7:8E:04:94:83:A1:68:D4:12:6B:69:A6:C0:92:7C:57:68:94
Certificate issuer:       /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
Certificate serial:       01E4
Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/34509C1AF49D11EFBD8ACC0EC4F9AE02.roa
Signing time:             Mon 09 Mar 2026 03:37:00 +0000
ROA not before:           Mon 09 Mar 2026 03:37:00 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     134748
IP address blocks:        192.245.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl
                          rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:56:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484 (0x1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8
        Validity
            Not Before: Mar  9 03:37:00 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69ae405c-f5e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a9:8d:7f:de:af:86:d1:f5:f0:a1:20:0a:de:
                    85:b7:f2:a2:f2:54:99:4e:cf:7d:5e:c9:84:10:53:
                    b4:88:81:d4:58:e0:78:f8:1e:09:30:11:28:09:4f:
                    e9:7c:8c:6e:4e:54:31:a2:3c:40:cd:b6:d7:78:93:
                    1b:4f:b6:a5:a0:1d:3d:a8:ec:c2:d1:49:2b:9b:5f:
                    a1:b2:76:e5:a6:ca:e7:ae:7c:db:d6:70:0b:7e:11:
                    10:6a:01:d9:5b:4b:ec:ec:11:ac:a5:04:5a:49:d2:
                    a3:c7:c6:3b:ec:86:bc:1e:89:f9:60:39:1f:26:27:
                    57:34:f5:6e:ef:57:c1:1d:a9:df:44:04:8f:73:1f:
                    33:03:cf:be:1b:3a:d3:6a:47:bc:c2:2f:b3:84:64:
                    94:fe:be:d8:e3:66:cd:4c:0f:6b:bd:e0:16:30:c0:
                    a3:00:c3:ef:86:12:93:57:1f:16:49:03:7e:10:54:
                    8e:25:ab:50:00:bd:29:1c:eb:7b:e0:45:06:0e:e0:
                    07:90:5d:fb:83:03:5c:3b:38:97:b8:43:3e:85:72:
                    91:26:77:2c:6a:44:14:9d:ff:31:ab:ba:68:d0:88:
                    15:59:ba:d5:04:2e:83:50:09:02:ff:15:10:2a:a6:
                    72:b9:45:ac:35:2e:dd:c8:1f:39:b0:c0:6d:47:30:
                    66:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:22:E7:8E:04:94:83:A1:68:D4:12:6B:69:A6:C0:92:7C:57:68:94
            X509v3 Authority Key Identifier:
                keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/34509C1AF49D11EFBD8ACC0EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:dd:89:3d:6b:36:ee:55:c4:3a:1d:d1:c2:5e:35:87:77:bc:
         97:cc:4e:bf:ec:b0:72:0a:9a:95:90:fc:79:57:5b:f2:d2:62:
         a1:fc:25:d7:05:d2:a7:84:6e:60:15:4d:cb:4e:c4:69:a6:9c:
         18:ad:29:ba:20:95:a4:eb:98:18:66:3e:a4:13:29:0b:65:5f:
         99:cc:b9:e1:c5:fe:fa:a5:89:92:6e:dd:15:84:5d:b5:4e:62:
         fc:af:dd:f3:85:4c:24:d2:23:71:e8:c8:47:4f:1a:bf:e8:dc:
         14:4f:8e:84:be:22:58:43:f8:4a:1e:a0:07:28:35:1b:9a:7a:
         43:8d:85:13:9d:10:0c:56:46:e3:06:c2:b0:ab:81:a8:8e:9a:
         9e:75:e3:cc:e8:1f:95:51:51:03:0f:e7:eb:81:72:15:9d:20:
         66:da:73:f5:60:7e:dc:e8:9b:5f:9b:f5:f5:ac:3f:3c:6d:b5:
         a3:60:db:17:a2:89:c9:8d:83:de:69:cd:d1:2b:39:2e:46:c9:
         a9:3d:06:f5:16:a9:41:de:d0:b2:f0:7c:7a:3a:28:23:47:35:
         6d:f5:12:47:cd:51:0d:20:19:44:37:29:48:67:02:19:91:73:
         9a:22:6e:e1:f6:32:5c:9b:b1:08:24:4a:c0:dc:a9:3a:36:84:
         eb:77:67:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:57 2026 by rpki-client