Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/79FC546E326611F08478D72AC4F9AE02.roa
File:                     79FC546E326611F08478D72AC4F9AE02.roa (raw, json)
Hash identifier:          mp6UKxB2b1zXxB5aLbTsGKHkEwH64+Ff1FghIf0l4Tc=
Subject key identifier:   4C:3C:26:3C:A1:A5:44:7A:3F:5C:20:32:87:3C:03:BB:23:87:6E:B8
Certificate issuer:       /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
Certificate serial:       024D
Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/79FC546E326611F08478D72AC4F9AE02.roa
Signing time:             Wed 15 Jul 2026 04:28:51 +0000
ROA not before:           Wed 15 Jul 2026 04:28:51 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     151467
IP address blocks:        103.229.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl
                          rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 589 (0x24d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9C42, serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
        Validity
            Not Before: Jul 15 04:28:51 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a570c83-891a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2e:a3:26:54:83:bc:6a:d3:87:0a:02:a9:63:
                    15:1b:1f:ad:cf:50:9e:d0:43:0e:55:ea:d4:64:e1:
                    26:31:23:92:1a:2b:1a:e3:de:c2:16:4b:e6:64:98:
                    8f:11:9b:da:f0:b2:eb:87:0e:02:ab:d6:0d:0c:bc:
                    90:66:93:ce:10:7e:71:33:54:e2:38:17:98:8a:3f:
                    39:51:0f:1e:a0:38:f7:f4:22:f2:e9:01:9c:27:57:
                    cc:7a:78:cb:82:7b:df:a3:4e:6d:f3:07:c2:a6:21:
                    ee:37:0f:64:6e:f0:f3:37:40:4e:90:3b:67:b6:81:
                    47:f5:06:fb:7a:42:57:8d:2a:88:e4:f6:02:9c:89:
                    08:f4:73:b1:a4:d3:2d:d6:1b:3d:11:4c:cf:01:1f:
                    82:c4:d3:82:7b:3a:f1:3c:63:36:8e:c0:5f:6c:23:
                    0b:69:e1:e6:60:f6:d1:b3:3c:2b:83:f4:7f:4a:b6:
                    55:06:62:33:cd:20:b2:99:93:42:b7:45:11:89:34:
                    87:08:7d:85:54:fc:c9:87:c7:a2:dc:e4:41:a8:81:
                    84:f3:9b:d3:d0:03:6b:74:5b:05:47:38:ea:2c:bb:
                    db:46:12:dc:8e:c2:cd:1a:b5:54:67:6b:15:12:8a:
                    7a:1a:e6:56:1d:8e:1b:7c:0a:c6:2e:3e:0b:b9:de:
                    a2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3C:26:3C:A1:A5:44:7A:3F:5C:20:32:87:3C:03:BB:23:87:6E:B8
            X509v3 Authority Key Identifier:
                keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/79FC546E326611F08478D72AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:3b:00:df:45:86:37:31:0d:24:ca:c5:c4:4b:41:9b:04:f6:
         9f:e2:c7:f6:37:f6:7f:dc:95:fe:90:a4:1f:60:e4:b2:a2:a7:
         bd:89:5b:5a:cf:5b:44:e0:51:b6:31:c8:bd:02:d5:ce:08:9f:
         ec:a8:cc:77:9f:18:07:7b:f0:8c:76:81:2a:00:c5:08:22:23:
         f8:35:e3:a2:91:56:7d:dd:7b:c7:c9:aa:4c:0c:67:31:03:75:
         80:f5:59:70:e0:61:12:29:76:65:5d:60:e4:69:99:5c:0b:ce:
         78:d1:47:a5:41:5b:f0:44:7e:3c:49:51:17:d9:8b:a6:b1:73:
         b9:2d:3c:74:61:d3:d9:df:37:94:58:2e:40:92:df:6a:06:4b:
         51:3c:a4:36:50:1b:93:0e:a8:df:97:75:34:4d:ca:cf:f8:57:
         e6:a7:f3:a0:88:9e:c9:c6:18:d0:fd:a1:ac:ce:06:d2:4b:b0:
         48:25:a7:fd:1a:72:9b:8b:28:27:fd:93:e1:33:dc:a1:d3:52:
         43:a5:53:ea:ec:27:21:eb:a9:62:84:59:0c:58:c2:ec:68:b5:
         88:3b:f4:b3:ca:da:8f:fe:6c:0a:3c:a8:0b:4e:c0:3a:41:e3:
         b8:a2:d5:cb:1f:bf:68:3f:cb:57:8e:86:c9:af:3a:f8:e9:5d:
         b2:b3:59:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:04:18 2026 by rpki-client