Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/EC8209420EB411EFAE1CF63BC4F9AE02.roa
File:                     EC8209420EB411EFAE1CF63BC4F9AE02.roa (raw, json)
Hash identifier:          NbnrpuPdjaJ9/qwyVFj1+pG7R+Jwde17taoEW0C3p7w=
Subject key identifier:   21:17:EE:0F:94:29:6E:4D:A4:08:DD:0F:00:9E:A7:AA:4B:5E:61:51
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       36FD
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/EC8209420EB411EFAE1CF63BC4F9AE02.roa
Signing time:             Thu 30 Jul 2026 15:11:13 +0000
ROA not before:           Thu 30 Jul 2026 15:11:13 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     38599
IP address blocks:        58.181.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14077 (0x36fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: Jul 30 15:11:13 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6b6991-9d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:70:ec:67:b0:5f:6e:b1:23:55:c8:77:62:66:
                    a1:c5:43:4d:27:e3:c8:d7:1f:fe:0a:46:eb:b9:cb:
                    70:8e:d1:c8:74:cf:4b:45:27:04:86:2b:fd:89:79:
                    7e:72:3c:b8:bc:86:4b:a9:f9:01:1d:dc:05:4e:74:
                    ea:06:43:7c:f0:02:a3:33:55:e7:83:b1:25:dc:68:
                    4e:95:db:c4:87:40:e2:29:60:94:6f:a2:69:65:dd:
                    0d:36:13:e2:8c:cb:59:d8:b4:6e:17:67:00:66:dc:
                    e6:d5:2a:d9:f9:a9:ff:6a:ca:a4:62:93:50:89:9f:
                    b4:fe:bf:fb:6a:d5:ab:68:a3:ca:4b:1f:f0:cc:7f:
                    50:61:b3:67:25:5a:28:dd:c5:f4:7e:dc:47:96:f3:
                    72:be:b8:0f:83:2f:fa:a7:0b:1c:58:8b:48:de:45:
                    f6:6e:4d:6a:e2:1a:e9:8d:0b:36:25:19:e2:bc:e8:
                    67:ff:29:cd:26:f6:d9:30:37:1c:6a:08:84:a8:29:
                    ab:98:3c:1f:41:86:99:44:04:b1:3b:41:2a:5d:38:
                    84:3d:45:df:9b:4e:0b:fe:4e:46:ab:db:91:58:4e:
                    cc:e8:35:0a:d3:e4:9e:66:65:c0:1a:3c:f4:c4:9f:
                    84:45:23:63:39:8c:0c:a9:f2:6b:54:d4:d2:a2:3b:
                    8b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:17:EE:0F:94:29:6E:4D:A4:08:DD:0F:00:9E:A7:AA:4B:5E:61:51
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/EC8209420EB411EFAE1CF63BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.181.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:cb:e7:54:91:e2:eb:c8:5d:94:6c:9d:4b:20:65:9a:d6:d3:
         cc:99:6d:d4:24:f4:d7:6d:8d:f8:4f:be:4b:f2:e2:ee:36:28:
         f2:c4:cb:82:56:9e:ca:93:61:4e:44:1d:a5:65:0f:bc:7e:de:
         59:12:42:4f:bc:6d:d2:1c:2e:77:9b:a4:e1:6e:d9:1a:56:e1:
         e7:d1:c2:69:19:f1:ef:ca:5e:c4:29:72:b1:fa:13:b2:73:31:
         5e:88:d2:66:36:2e:4d:11:86:f3:fc:8d:75:34:71:5b:c9:33:
         ba:f8:15:1d:e7:0e:01:54:b5:af:11:0b:4b:eb:38:07:bc:7b:
         b3:90:a1:ad:a6:56:e3:93:d3:29:8c:e6:d5:7d:00:b5:90:14:
         f4:09:7f:d7:3e:d7:ec:a2:47:8c:b4:fa:78:cf:6b:b3:ed:76:
         3a:da:8c:13:91:a4:2d:7d:39:92:ef:8c:45:e7:f8:0e:d1:db:
         34:cf:8d:4d:8f:32:6c:6b:b0:39:5c:c0:2e:e0:3a:7f:0b:a9:
         f4:12:33:64:56:9f:82:67:3f:62:8c:6f:e3:80:18:dc:ef:ea:
         23:c7:bc:86:0f:f5:2e:1d:cb:a6:96:13:be:9b:ef:b5:1b:6e:
         04:8d:c6:cc:ff:7a:8e:1a:ed:16:c7:51:67:6b:f3:7f:2b:69:
         f5:fd:98:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:18:39 2026 by rpki-client