Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/C04EDAAECCF711F1A5936D4EFB65CEF9.roa
File:                     C04EDAAECCF711F1A5936D4EFB65CEF9.roa (raw, json)
Hash identifier:          RrFXrGn4cexrnUafgrowUQtMu1KC4eI6wNqSE2DXR6E=
Subject key identifier:   E1:A3:C7:BF:E4:0D:9D:1E:3F:C0:58:7C:78:98:14:E7:99:17:C6:C3
Certificate issuer:       /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial:       09E1
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/C04EDAAECCF711F1A5936D4EFB65CEF9.roa
Signing time:             Wed 21 Oct 2026 02:33:08 +0000
ROA not before:           Wed 21 Oct 2026 02:33:08 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     212879
IP address blocks:        169.136.64.0/24 maxlen: 24
                          169.136.72.0/24 maxlen: 24
                          169.136.133.0/24 maxlen: 24
                          169.136.145.0/24 maxlen: 24
                          169.136.146.0/24 maxlen: 24
                          169.136.147.0/24 maxlen: 24
                          169.136.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
                          rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2529 (0x9e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
        Validity
            Not Before: Oct 21 02:33:08 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6ad82464-cd0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:6c:a0:75:b3:80:8e:75:83:00:0b:21:84:
                    d2:9e:91:96:7b:5a:21:f5:82:51:ce:97:01:07:93:
                    56:69:e3:dd:e3:2c:91:e3:d3:40:20:ef:80:da:24:
                    bb:1a:ba:d0:60:b7:cf:e3:c8:dc:f3:e1:3e:09:64:
                    bd:86:0b:b7:15:6f:05:11:ec:55:ca:5e:95:fc:70:
                    f5:7c:22:d0:a9:f6:3d:0d:be:67:67:7d:11:6a:b8:
                    50:bb:d8:94:e7:88:6f:ca:29:ce:af:72:02:e5:e4:
                    b1:c9:74:37:b8:ba:97:e2:72:c3:42:a6:f3:d0:ec:
                    dc:36:a4:d4:69:e6:7c:49:08:d3:8e:37:57:84:17:
                    9a:9f:64:1c:9a:e7:60:23:f5:28:a4:e6:61:96:f3:
                    0d:9e:4a:3f:47:20:3d:10:37:6c:5b:b7:e1:43:01:
                    11:15:b4:8d:b8:98:5c:e2:cf:e1:9d:77:e7:ad:1a:
                    ec:11:ed:cb:0d:dd:0b:95:c0:c7:83:25:05:6f:44:
                    22:51:27:73:83:83:9b:c2:96:42:3a:a1:45:93:65:
                    8d:f4:6e:ef:97:00:12:88:41:06:ae:d7:68:6c:69:
                    90:94:ae:16:64:12:50:09:c4:b6:fb:fd:3a:1c:35:
                    00:eb:32:34:23:59:23:21:6d:03:60:4a:ec:2b:f6:
                    9d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A3:C7:BF:E4:0D:9D:1E:3F:C0:58:7C:78:98:14:E7:99:17:C6:C3
            X509v3 Authority Key Identifier:
                keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/C04EDAAECCF711F1A5936D4EFB65CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.136.64.0/24
                  169.136.72.0/24
                  169.136.133.0/24
                  169.136.145.0-169.136.147.255
                  169.136.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:ca:83:ea:94:da:0f:da:73:4d:15:6e:76:d0:23:3f:96:92:
         eb:c6:2a:b1:e9:76:1a:b7:46:3c:39:6a:c5:f8:61:be:7e:b0:
         7d:fd:e8:1f:cd:d7:74:d5:92:8b:bb:7f:da:1c:a2:ce:a2:cd:
         c9:6d:5d:e0:c4:c7:6c:b9:ce:eb:3a:c3:3d:1f:25:8d:7f:81:
         81:14:31:2c:03:0a:4f:5f:f7:8f:06:24:de:88:04:55:36:d0:
         28:8a:5e:06:82:75:b6:d0:3e:30:5f:00:b5:74:ef:b3:cc:39:
         c2:ce:82:4c:4a:d2:25:fe:ad:49:81:5b:f2:66:52:f7:e1:3a:
         a9:2e:da:99:8e:0e:5b:0e:de:b4:ed:a5:5a:26:7a:0e:43:81:
         1f:ff:9f:8a:8b:0e:b6:19:e3:49:ae:29:98:69:86:86:90:87:
         16:cd:09:e4:15:ef:86:33:d8:b1:4f:b3:74:77:7d:45:4b:29:
         98:3a:3a:52:32:c0:9f:19:6a:24:69:87:ac:32:77:b4:cb:3c:
         44:03:98:a0:d3:db:26:65:69:38:37:3f:c1:24:d9:35:be:90:
         3c:1e:c5:66:a5:c9:b0:17:78:29:a5:87:01:17:69:66:5a:35:
         98:5a:a4:fe:7f:66:dc:74:5c:27:44:77:ec:53:2b:3e:74:ed:
         31:aa:33:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:08 2026 by rpki-client