Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/976C4E84F72711EFB800B84BC4F9AE02.roa
File:                     976C4E84F72711EFB800B84BC4F9AE02.roa (raw, json)
Hash identifier:          0t2XzLmuMEGFlYc47wOulhyO7Ix5VKiALYfApcVZOOM=
Subject key identifier:   B6:AD:AD:43:18:7F:99:1A:1B:2F:3A:C0:92:5F:97:F0:15:31:F7:9D
Certificate issuer:       /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Certificate serial:       0541
Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/976C4E84F72711EFB800B84BC4F9AE02.roa
Signing time:             Fri 03 Jul 2026 00:25:30 +0000
ROA not before:           Fri 03 Jul 2026 00:25:30 +0000
ROA not after:            Sun 01 Nov 2026 00:00:00 +0000
asID:                     136272
IP address blocks:        2400:c7c0::/32 maxlen: 32
                          2400:c7c0::/34 maxlen: 34
                          2400:c7c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
                          rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Jul 2026 00:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1345 (0x541)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
        Validity
            Not Before: Jul  3 00:25:30 2026 GMT
            Not After : Nov  1 00:00:00 2026 GMT
        Subject: CN=6a47017a-d10b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6d:5d:93:f6:66:50:15:a2:50:64:c4:31:a8:
                    cc:ca:55:93:0c:09:f4:81:48:2a:2c:4d:06:24:85:
                    48:d2:b3:97:f6:16:38:29:e6:c7:92:60:4e:d9:a6:
                    77:ad:c5:07:70:7e:54:92:20:3c:a0:9d:80:1e:1b:
                    92:a2:b3:07:24:94:10:20:49:4d:34:78:d7:3f:53:
                    15:44:22:46:d9:bb:37:d7:4e:00:a8:78:f0:d3:e1:
                    45:8d:eb:8b:03:ac:f6:3f:bb:ca:38:fd:1b:11:15:
                    51:4d:e6:9f:e7:a8:74:d5:c4:99:c4:57:bf:c8:e1:
                    f1:84:1a:54:17:c9:b4:9a:4e:ff:08:5f:09:8f:a1:
                    60:c1:7d:60:71:2d:15:04:a1:af:b9:ce:0f:c3:4a:
                    28:5d:dd:85:ae:09:ba:d7:cd:c2:4d:04:f5:06:a1:
                    a4:8f:27:54:94:6c:21:72:26:06:9c:48:54:ae:c9:
                    a1:e8:44:30:d3:b7:de:2a:aa:ed:ad:8b:43:4b:5f:
                    88:ac:93:70:b9:8f:90:20:76:55:7e:10:0c:2a:6d:
                    cd:2f:c1:94:3c:c3:80:4d:13:57:2a:fb:e0:04:0c:
                    dd:04:fe:f7:73:f0:a4:fb:3e:c2:5f:e0:2a:66:58:
                    9e:7a:56:da:36:95:0c:fb:55:1b:95:a4:6c:1f:8a:
                    07:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:AD:AD:43:18:7F:99:1A:1B:2F:3A:C0:92:5F:97:F0:15:31:F7:9D
            X509v3 Authority Key Identifier:
                keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/976C4E84F72711EFB800B84BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:c7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:e0:26:4e:07:f2:18:84:30:65:3c:5d:18:fc:d3:1f:67:80:
         3a:52:64:99:3f:ee:f4:6c:19:9a:a0:a9:b8:37:f8:b5:b9:16:
         99:4e:f5:36:df:5f:70:3c:27:34:f0:bf:ac:47:98:36:08:3d:
         d3:58:7b:ef:07:df:48:1d:1b:cb:dd:68:19:0d:99:d3:12:75:
         e9:11:f5:3a:40:f8:44:2d:08:da:d8:af:82:02:db:30:8e:f5:
         0b:9b:4e:38:52:5e:0c:88:d5:53:97:b5:10:a6:0b:df:3c:5a:
         e8:ef:bb:30:cf:d2:c1:e1:28:03:c6:26:0d:46:f5:7d:e1:ae:
         51:8a:e5:f7:13:5c:ee:42:40:a5:7a:e2:74:01:47:e1:fe:bf:
         d5:b7:ac:b1:16:5a:2b:c2:99:01:40:c9:f0:58:28:d1:2c:6b:
         0e:4a:d1:93:35:94:5a:3a:e9:f4:aa:e6:dc:e0:28:bb:6e:e3:
         c4:10:25:b8:6f:31:06:e5:59:d8:fc:49:8c:3b:db:b8:fe:e0:
         83:79:8a:60:49:76:70:7f:76:10:61:7f:d2:3c:00:83:75:9c:
         ba:b8:e1:df:d3:5f:e1:f7:38:ba:7b:3f:5b:00:c9:e9:d1:06:
         f5:d0:62:75:a7:f1:13:3d:cf:13:0f:12:de:85:3f:52:af:4a:
         24:c5:cd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 13:11:24 2026 by rpki-client