Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/AA36D97EFC7511EE9C9CD67CC4F9AE02.roa
File:                     AA36D97EFC7511EE9C9CD67CC4F9AE02.roa (raw, json)
Hash identifier:          ZOW+e6hIHzkmr+e6qFgnn41jrQPPj4OwONpdz5HcpDw=
Subject key identifier:   39:DF:B3:9E:79:1D:1A:20:A4:F8:4E:B1:DC:62:8D:32:A8:91:62:F2
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       02E0
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/AA36D97EFC7511EE9C9CD67CC4F9AE02.roa
Signing time:             Mon 22 Jun 2026 06:33:18 +0000
ROA not before:           Mon 22 Jun 2026 06:33:18 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     152694
IP address blocks:        161.82.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 03:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 736 (0x2e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Jun 22 06:33:18 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a38d72d-0be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:23:0b:1e:0b:ac:8d:2b:6a:60:2b:70:67:3d:
                    6a:92:93:2d:13:2e:45:ab:4d:56:c3:09:67:3f:e3:
                    be:c3:0b:9e:42:34:94:cb:47:0f:a6:f2:59:b7:4b:
                    b6:75:61:bc:2d:d9:b9:52:07:98:0d:2d:4a:93:b1:
                    be:d8:b7:51:09:0f:99:f7:f4:49:43:ee:c0:9d:34:
                    82:c4:84:12:58:30:4d:1d:f0:80:81:87:32:ca:70:
                    57:b1:54:f9:9e:3b:f1:44:18:bf:d1:80:e1:46:05:
                    d4:a2:52:a7:99:cb:93:c4:f5:1c:b8:85:50:14:f4:
                    46:86:2e:aa:68:c3:5c:f1:b7:56:de:b4:94:23:15:
                    db:5a:c3:cc:3c:88:2b:85:35:b8:58:e8:64:1e:be:
                    a1:39:97:9b:54:fe:db:6d:f3:89:b4:ae:23:64:be:
                    a9:87:2d:63:07:1c:a9:6c:c5:99:b9:e1:ee:6e:cd:
                    b1:05:f3:35:8c:a6:c4:08:b6:cc:9b:db:6f:8e:b3:
                    b3:02:7d:40:fd:27:60:ef:57:71:85:6d:1c:f4:56:
                    92:67:d0:74:2b:41:11:28:fe:a4:d0:b9:ea:ee:52:
                    b0:10:39:15:a9:88:02:73:e0:2f:11:97:ed:72:7b:
                    93:d1:d6:42:a1:ac:b8:7d:11:aa:55:67:e4:1c:3d:
                    7a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DF:B3:9E:79:1D:1A:20:A4:F8:4E:B1:DC:62:8D:32:A8:91:62:F2
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/AA36D97EFC7511EE9C9CD67CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.82.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:72:31:44:ce:14:99:6c:1a:20:eb:59:f9:61:99:1f:21:6d:
         67:dd:3f:1e:5f:8c:69:38:e9:24:2c:db:c4:0d:bf:6d:8c:b3:
         88:fb:70:7b:16:31:14:5f:c2:d2:c3:ef:11:ea:10:41:bd:63:
         13:bf:45:68:f6:3e:8a:73:eb:3c:f4:47:dc:ee:83:a3:51:68:
         1c:83:67:5f:ac:d3:18:31:03:de:bc:cf:ff:0b:02:28:2e:ac:
         8a:4d:ec:da:2e:42:22:01:63:62:e1:aa:8e:2e:85:b3:b7:aa:
         ae:cc:8f:bf:69:dc:29:c1:64:10:a1:10:47:ce:10:16:3a:02:
         7a:cb:ac:f3:fa:59:34:c7:51:23:e6:27:fe:73:31:4f:4d:40:
         0b:2a:21:14:1e:92:a0:04:7f:f0:9f:22:6f:b0:84:26:09:5e:
         5c:33:b4:60:91:62:f4:70:b0:92:5a:b0:35:a1:57:bc:8f:b1:
         1a:f2:ca:cc:24:79:9f:bd:19:2c:20:bf:3d:9f:ee:b7:fc:5e:
         ad:1b:a9:d3:24:60:11:14:4d:a5:fc:a9:b7:5a:1e:5c:59:a3:
         cf:56:b2:f9:cb:35:59:17:29:af:9c:56:02:8e:88:e4:30:6c:
         e8:0d:15:5a:76:59:33:d0:66:df:7f:79:70:90:0a:80:49:97:
         4a:61:a6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:54:33 2026 by rpki-client