Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/7F77220A143811EE97A64D19C4F9AE02.roa
File:                     7F77220A143811EE97A64D19C4F9AE02.roa (raw, json)
Hash identifier:          UaUfBSgIdj9KKGl52SHu3L34u8bPrTfYu+3DtVvRz+c=
Subject key identifier:   6E:FB:F0:6C:E6:C8:4D:B1:C8:44:35:B3:09:E7:D1:1C:03:BE:69:8E
Certificate issuer:       /CN=A916D36A/serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
Certificate serial:       195C
Authority key identifier: FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/7F77220A143811EE97A64D19C4F9AE02.roa
Signing time:             Sun 30 Aug 2026 16:32:44 +0000
ROA not before:           Sun 30 Aug 2026 16:32:44 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     38551
IP address blocks:        2407:e500:c::/47 maxlen: 47
                          2407:e500:e::/47 maxlen: 47
                          2407:e500:10::/47 maxlen: 47
                          2407:e500:12::/47 maxlen: 47
                          2407:e500:80::/47 maxlen: 47
                          2407:e500:90::/47 maxlen: 47
                          2407:e500:a0::/47 maxlen: 47
                          2407:e500:b0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl
                          rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 16:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6492 (0x195c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D36A, serialNumber=FEA4B96F3983F769C73397456C12B90F64246C7C
        Validity
            Not Before: Aug 30 16:32:44 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a945b2c-dbb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a5:67:55:38:13:43:42:64:cd:85:41:d5:3d:
                    54:30:31:18:eb:41:51:e3:e2:ba:48:14:41:80:19:
                    f8:a4:b7:9c:a1:c1:12:a0:67:c6:ff:dc:55:e1:05:
                    1a:43:ab:18:1c:75:0b:c7:35:ef:0f:3d:fd:4c:bf:
                    61:76:83:0d:93:3b:03:cd:b6:53:e6:e7:76:52:39:
                    4e:92:40:5c:c6:7c:e6:27:c1:7e:fb:14:ad:81:26:
                    1e:fc:ee:9e:d0:53:e4:db:49:17:7e:ff:f8:cd:ca:
                    86:e7:5c:7b:e9:28:e8:fc:09:a3:13:45:cf:46:44:
                    97:3b:78:81:6b:18:60:41:d5:25:1a:3a:bb:23:0e:
                    f6:0d:88:86:fa:67:ab:5e:92:14:fe:2f:88:0f:fa:
                    e0:31:db:39:90:4e:33:4d:11:69:8e:3e:02:6d:20:
                    8f:17:df:84:90:14:a1:9e:68:18:a4:f9:1d:c5:de:
                    a4:04:c9:88:6d:2b:69:26:39:54:52:3c:67:5e:45:
                    f0:ed:cf:28:15:dd:36:25:68:7a:6d:17:74:5e:bd:
                    ac:90:bd:f5:9f:47:ef:2e:60:fe:ce:25:0e:93:3b:
                    21:9d:29:31:e2:75:8e:7a:8c:2a:a3:54:d3:e1:d4:
                    d8:a5:14:f6:14:0f:30:52:10:53:62:63:40:1a:e3:
                    6e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FB:F0:6C:E6:C8:4D:B1:C8:44:35:B3:09:E7:D1:1C:03:BE:69:8E
            X509v3 Authority Key Identifier:
                keyid:FE:A4:B9:6F:39:83:F7:69:C7:33:97:45:6C:12:B9:0F:64:24:6C:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/_qS5bzmD92nHM5dFbBK5D2QkbHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_qS5bzmD92nHM5dFbBK5D2QkbHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/37ABD708AA9A11E7BAC41252C4F9AE02/7F77220A143811EE97A64D19C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:e500:c::-2407:e500:13:ffff:ffff:ffff:ffff:ffff
                  2407:e500:80::/47
                  2407:e500:90::/47
                  2407:e500:a0::/47
                  2407:e500:b0::/47

    Signature Algorithm: sha256WithRSAEncryption
         82:5c:7b:05:d9:a0:40:5c:29:8f:e7:fa:8b:4f:4e:16:a2:e6:
         b1:ac:77:14:6f:46:1e:9b:55:3d:2b:d5:13:31:70:13:eb:cf:
         fc:55:9d:ff:a1:ee:f6:d5:bb:55:fd:20:9a:24:d1:85:2b:e4:
         c1:8b:ff:fe:75:30:10:b9:4f:05:2e:52:f7:0a:3d:ba:0e:1c:
         b3:8b:fa:8f:dc:e5:5b:ef:f9:e4:a6:32:5b:96:d2:5b:30:07:
         25:7b:de:65:45:6a:34:c6:30:d1:cb:ea:55:61:e9:f4:0d:e8:
         5e:58:83:1f:c7:84:c4:7f:01:f1:9b:b5:9c:a3:09:d3:40:5c:
         e3:47:ba:b1:a6:c4:7b:0b:f9:00:42:fa:5a:40:af:4e:54:52:
         8c:0d:c7:b6:18:c7:ca:9d:26:97:e5:16:98:0e:0e:d8:07:b9:
         0a:b8:51:60:b3:d6:7a:72:11:e2:cd:da:6b:06:0f:e5:85:a3:
         1c:55:a6:e5:64:2b:47:c4:5f:88:7e:d8:a6:5d:2e:5f:a2:95:
         a7:05:44:c8:bc:5c:66:a7:32:7e:78:c0:71:a4:d5:65:9e:37:
         71:f3:2d:c0:55:39:2e:c5:03:bb:f3:a9:15:31:ec:19:1a:41:
         a3:95:ed:b7:5a:80:2f:14:cd:37:ba:fd:91:49:14:4e:2a:31:
         12:d3:75:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:49:12 2026 by rpki-client