Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/79AF67622C3C11EE81B24651C4F9AE02.roa
File:                     79AF67622C3C11EE81B24651C4F9AE02.roa (raw, json)
Hash identifier:          MOo6ysw+eJIqeER1QE6gwsHoJJj6Kqs69ruABg8PuRw=
Subject key identifier:   8E:B1:8C:3F:C3:4D:03:B6:C0:02:35:B8:19:3E:09:B5:3B:B2:DF:71
Certificate issuer:       /CN=A9137ABC/serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34
Certificate serial:       2AE0
Authority key identifier: E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/79AF67622C3C11EE81B24651C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:10:15 +0000
ROA not before:           Mon 06 Jul 2026 15:10:15 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     17552
IP address blocks:        134.196.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10976 (0x2ae0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34
        Validity
            Not Before: Jul  6 15:10:15 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc557-80cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:29:fb:a8:6f:a2:01:a9:39:64:21:b9:d4:bd:
                    58:2c:4e:59:65:29:0b:89:92:cf:6e:73:b6:aa:2a:
                    e4:e6:23:b5:f9:0c:38:e7:fd:f1:2c:ce:d6:0f:3c:
                    eb:30:61:02:48:9f:d4:57:97:54:66:bf:47:16:50:
                    9a:0c:45:17:e9:9c:eb:cf:c7:95:28:03:eb:14:3f:
                    58:26:fa:18:0e:3f:f4:81:20:50:45:1b:f8:fa:45:
                    ad:62:74:56:98:25:46:63:b4:15:2d:b7:de:66:fd:
                    59:cb:b6:7b:b4:e1:d8:79:9a:7c:18:97:a8:b8:97:
                    5a:05:22:84:f6:9c:97:e2:17:d7:7b:b8:40:1f:30:
                    c6:3f:e0:ce:75:21:60:65:40:17:21:f1:21:ba:51:
                    ab:ca:e0:19:5c:67:9b:e5:03:0c:f8:14:53:ed:83:
                    29:cf:c8:ed:b6:25:31:3e:3f:59:64:b1:94:54:a2:
                    43:86:5a:a3:1d:f4:53:28:46:e7:93:98:b0:a3:12:
                    0a:80:53:6a:79:fb:1c:0e:78:e6:31:26:5f:5a:42:
                    b3:68:7a:c0:95:ff:dd:83:25:a7:1d:55:32:98:da:
                    a1:ed:90:b6:f0:6a:96:15:e4:f5:71:c3:b7:a7:a3:
                    5d:3b:d0:93:5c:d7:a0:e1:e1:0b:cd:b0:d7:28:28:
                    48:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B1:8C:3F:C3:4D:03:B6:C0:02:35:B8:19:3E:09:B5:3B:B2:DF:71
            X509v3 Authority Key Identifier:
                keyid:E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/79AF67622C3C11EE81B24651C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.196.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         54:fc:ab:1e:d1:b1:ee:14:73:a5:89:9b:13:37:d8:a4:01:97:
         b0:49:15:87:c1:50:ee:dc:76:9e:76:a5:3e:78:c3:55:46:79:
         56:f2:5d:ce:8a:5c:b8:4f:05:3c:8f:4a:67:b1:74:ec:16:87:
         5f:4d:c3:78:e6:7f:9d:e6:08:f2:f3:3a:28:ce:59:eb:fa:32:
         9b:bd:36:72:cc:30:2e:92:a1:45:db:98:ec:cf:2a:33:42:6c:
         d3:5e:9e:67:71:6d:87:a9:29:19:ba:13:58:32:24:51:51:67:
         1e:c6:f5:0d:34:3d:df:ff:38:e9:e1:aa:7a:c3:55:3f:b2:f2:
         fa:9b:a0:65:dd:05:d1:1d:68:c4:b1:43:6b:9a:b4:74:98:a4:
         7c:1d:a3:d6:2a:f7:81:25:46:24:2b:85:d1:c5:33:6b:66:8f:
         70:77:dd:d8:03:4e:82:80:51:e3:fb:15:e3:82:76:95:9f:ec:
         f4:62:05:55:89:fd:81:3b:1d:cf:28:e4:71:0e:4f:a8:ec:d8:
         c8:26:23:5e:2b:3f:c5:ba:8b:6e:c9:0a:22:25:c3:fc:f5:cd:
         b1:fa:29:7d:2d:b5:1c:4b:ae:cb:c2:10:19:d8:08:f4:ef:7d:
         a0:0d:63:75:dd:95:c6:81:6f:b2:11:eb:a0:ed:1f:a9:5d:49:
         82:49:67:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:23:01 2026 by rpki-client