Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/39E2E2326AB211F1AD02B3F4A147A888.roa
File:                     39E2E2326AB211F1AD02B3F4A147A888.roa (raw, json)
Hash identifier:          G1Hlr/rHIQ0S04hSoxt84tCzDTSCe59VGh3JefnKY08=
Subject key identifier:   0B:40:1E:8B:72:0D:11:8E:EA:14:38:CA:1D:9C:86:AB:DE:28:B9:C8
Certificate issuer:       /CN=A912A3C4/serialNumber=93D4189848D2F098B4B359EBD052EB8983D50EA0
Certificate serial:       02
Authority key identifier: 93:D4:18:98:48:D2:F0:98:B4:B3:59:EB:D0:52:EB:89:83:D5:0E:A0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k9QYmEjS8Ji0s1nr0FLriYPVDqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/39E2E2326AB211F1AD02B3F4A147A888.roa
Signing time:             Thu 18 Jun 2026 01:08:33 +0000
ROA not before:           Thu 18 Jun 2026 01:08:33 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     38887
IP address blocks:        168.151.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.crl
                          rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k9QYmEjS8Ji0s1nr0FLriYPVDqA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 20:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A3C4, serialNumber=93D4189848D2F098B4B359EBD052EB8983D50EA0
        Validity
            Not Before: Jun 18 01:08:33 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a334511-d371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:22:92:d4:e4:43:8b:54:1e:68:68:5e:96:fe:
                    6f:6e:ef:ab:a0:ef:c5:e8:04:92:da:bc:35:ce:f4:
                    dc:50:5a:76:11:36:7d:a7:3d:89:48:ce:54:90:66:
                    5c:12:68:9e:fc:ae:9b:8c:63:85:72:91:3f:89:58:
                    cd:28:f8:0b:19:66:de:3e:08:dd:d0:7d:9c:6b:8f:
                    3f:aa:9a:11:88:21:bf:7f:89:c1:f7:51:32:fe:50:
                    23:36:07:32:a8:60:8f:c6:26:5b:6d:cb:a4:99:b2:
                    3a:4f:0c:c4:55:8d:c2:ea:14:36:c5:ee:37:31:68:
                    28:ab:09:1f:bb:42:d8:0a:d1:1e:ac:df:2f:0f:a5:
                    bd:85:01:02:9e:dc:0b:e9:3c:1a:46:74:82:35:83:
                    87:30:80:9a:d8:c5:09:12:05:2d:ac:cd:5c:80:8f:
                    3e:1f:e1:e8:fc:ed:48:54:4b:a5:a5:14:ed:36:18:
                    66:64:75:93:b3:6e:5f:5a:a9:45:24:89:33:45:89:
                    a4:a0:3d:1c:2b:57:1c:11:af:bb:c9:a0:07:eb:2d:
                    e0:6e:a6:93:ce:4b:31:19:18:c4:72:6f:ea:63:65:
                    14:a4:f8:f3:a7:b0:e1:14:58:d6:6f:f5:a0:07:06:
                    65:d1:14:d8:87:77:b3:d2:f4:27:b6:99:c2:63:2e:
                    f8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:40:1E:8B:72:0D:11:8E:EA:14:38:CA:1D:9C:86:AB:DE:28:B9:C8
            X509v3 Authority Key Identifier:
                keyid:93:D4:18:98:48:D2:F0:98:B4:B3:59:EB:D0:52:EB:89:83:D5:0E:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/k9QYmEjS8Ji0s1nr0FLriYPVDqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k9QYmEjS8Ji0s1nr0FLriYPVDqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3C4/05C0AFC86AA011F1B6274719B1EE528E/39E2E2326AB211F1AD02B3F4A147A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.151.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:3e:00:56:b8:47:be:94:3b:10:7d:04:9f:ea:59:25:d4:69:
         cf:91:5a:e7:fb:2d:5a:b0:6e:ac:8a:d5:a7:eb:ed:93:5d:05:
         89:ac:1f:96:45:9d:60:82:e2:5f:59:bd:d0:f2:5d:5f:6a:9c:
         d5:4e:9c:11:ab:5c:58:d0:3e:23:41:bc:85:f0:1c:ff:0e:31:
         fc:76:b2:79:64:ed:55:6a:f4:84:85:bd:84:b9:f1:bc:96:d2:
         31:0f:46:12:0a:0a:cc:f9:04:70:35:c0:66:7c:1f:08:57:44:
         cd:fe:50:8a:ac:02:7c:c0:0f:67:ca:68:3f:60:1f:7a:65:3b:
         c8:8f:66:d7:25:c3:e9:d5:d2:2f:25:e8:33:a0:d7:ce:d2:b4:
         ec:a4:4a:6c:b7:c8:13:3c:01:3f:18:c9:d9:48:06:96:78:48:
         5e:0e:92:1c:0c:e9:66:0b:87:89:b9:0e:db:57:55:e7:ee:96:
         1a:10:6c:f3:16:1b:01:49:6a:d0:bb:a4:b2:89:26:5d:e3:70:
         bd:c1:71:b3:a9:f3:6e:14:5b:8a:1e:da:11:b8:b6:55:77:a3:
         3b:4f:45:ca:a8:de:ed:c0:81:1e:ac:cd:78:77:7d:3a:b9:8f:
         4f:8d:a1:f6:14:75:84:22:06:87:4a:b7:4a:75:3a:56:29:b4:
         96:81:86:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:28:49 2026 by rpki-client