Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/D79FB38AAB6511F1A0EA4F9E3B11F970.roa
File:                     D79FB38AAB6511F1A0EA4F9E3B11F970.roa (raw, json)
Hash identifier:          /w9cMLFs3AmXiKviME1yYbjMu1F1JmT7vGZdeuDc8m8=
Subject key identifier:   72:33:74:68:5B:DF:09:CD:B5:11:1C:D7:C8:C8:36:B5:F4:E0:D0:45
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       0E41
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/D79FB38AAB6511F1A0EA4F9E3B11F970.roa
Signing time:             Tue 08 Sep 2026 09:15:32 +0000
ROA not before:           Tue 08 Sep 2026 09:15:32 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     199524
IP address blocks:        218.208.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3649 (0xe41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: Sep  8 09:15:32 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a9fd234-066e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:05:12:1e:19:01:cb:dc:7a:80:78:d4:18:c4:
                    b9:5c:23:b4:85:09:93:c3:aa:92:81:7e:40:1a:d8:
                    d1:b2:89:de:3c:e6:3a:ca:20:17:2d:5a:49:14:b5:
                    ff:cf:be:96:45:59:c3:55:ab:54:20:70:c8:d3:2b:
                    76:36:98:70:f9:a6:6e:4c:42:17:ac:f9:8d:c4:85:
                    08:a6:a1:17:67:3e:ef:31:49:17:4a:9f:40:c6:9f:
                    65:48:29:8f:c5:d6:66:58:c3:cd:6d:04:bf:82:42:
                    01:20:4e:96:d8:b3:e5:84:4a:c0:b5:32:52:42:6a:
                    21:52:ef:95:12:47:0b:4d:9b:fa:4c:46:e9:93:09:
                    24:cf:67:dd:a5:a4:dd:2e:65:91:f3:12:79:5e:6b:
                    53:ef:89:08:c5:f2:b4:4f:4b:ae:84:51:e5:f7:66:
                    af:ff:59:75:9c:26:db:f3:6d:23:1d:82:56:e9:ba:
                    b7:b7:09:c8:69:af:7d:bd:0c:0c:39:8c:a4:73:c6:
                    f7:a6:b5:1c:f4:77:bb:fd:67:35:4c:64:92:c5:bb:
                    5f:3d:ee:67:04:93:ef:97:1e:68:73:31:5f:8d:36:
                    5d:24:ee:a6:68:ec:6e:06:e7:b1:db:78:49:f8:5a:
                    d1:e2:68:bb:81:a6:41:a5:30:f7:88:97:a8:08:1d:
                    ee:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:33:74:68:5B:DF:09:CD:B5:11:1C:D7:C8:C8:36:B5:F4:E0:D0:45
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/D79FB38AAB6511F1A0EA4F9E3B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.208.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:be:7a:0f:4b:7d:c9:37:af:3a:9e:46:47:11:a4:89:de:94:
         bb:37:16:30:cf:ff:33:e3:e8:42:13:88:cd:0e:aa:76:5b:5b:
         ed:98:c0:e5:8c:12:dc:73:14:e6:80:5d:7c:2c:e2:b4:93:ae:
         fe:4c:ce:c9:39:ca:de:eb:b6:8e:9f:87:6b:1a:84:89:ba:5c:
         ed:19:1d:f8:dc:0c:2e:83:13:a6:a9:15:de:78:30:92:41:51:
         bf:bd:ab:c0:d6:53:2d:a8:54:e8:6b:e8:5e:4b:04:49:7a:75:
         c5:3a:b0:f9:4d:57:fc:cf:70:ba:63:46:b3:e4:29:d2:6b:a4:
         58:53:be:a5:49:a4:86:b8:5c:80:12:e1:44:21:b3:15:c4:da:
         af:e9:94:ef:ee:1c:62:85:c0:e3:77:e1:ff:22:84:6d:a1:65:
         06:c4:2b:d9:78:90:86:88:15:da:13:e8:e9:fb:89:32:14:07:
         61:cf:d6:df:f1:06:80:77:f5:f0:b2:96:8b:99:b6:63:24:1a:
         5a:4d:02:af:18:96:d2:5b:67:26:ba:98:f5:8c:20:f3:56:2e:
         21:19:c0:dc:1e:46:88:78:2f:59:0d:71:10:95:52:8d:a3:93:
         00:01:4d:10:84:f2:00:36:2a:67:bc:a8:f5:c4:f9:87:c4:29:
         85:59:f8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:45:54 2026 by rpki-client