Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/9C79DBD23E7911EBBFFAC96BC4F9AE02.roa
File:                     9C79DBD23E7911EBBFFAC96BC4F9AE02.roa (raw, json)
Hash identifier:          aVhexx8H4O1ah6UPgLMQpAuILA0ylRRun3N3rQAJ9MU=
Subject key identifier:   FC:8B:4C:58:29:F6:5E:3B:CB:5F:4B:54:37:2E:38:50:8D:3A:4D:F5
Certificate issuer:       /CN=A9172D91/serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
Certificate serial:       176A
Authority key identifier: E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/9C79DBD23E7911EBBFFAC96BC4F9AE02.roa
Signing time:             Sat 08 Aug 2026 17:29:59 +0000
ROA not before:           Sat 08 Aug 2026 17:29:59 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     0
IP address blocks:        36.255.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl
                          rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 16:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5994 (0x176a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172D91, serialNumber=E2EDE4A7EA972668A795B27BA9DC87F4B90DA897
        Validity
            Not Before: Aug  8 17:29:59 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a776797-417c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0b:8f:d9:b6:d4:8f:a3:3c:7f:e7:26:94:f4:
                    c2:e7:d3:df:ea:62:b2:1c:0e:8d:4c:99:a1:e5:8d:
                    19:0f:00:48:80:5b:d7:3f:d5:93:01:58:05:09:3c:
                    9a:96:28:8d:e0:92:a9:91:6d:f5:2f:24:94:f6:12:
                    89:53:75:db:00:e7:33:56:05:f1:21:34:6e:76:f2:
                    ec:d0:14:14:32:05:9b:37:7a:64:55:42:f9:fb:6e:
                    f7:c0:17:25:07:ed:ab:88:39:81:41:8c:5b:63:31:
                    81:95:16:ea:26:82:7e:bc:a1:d9:c9:85:35:00:20:
                    b0:c3:21:db:3b:7d:b4:25:11:b4:20:9d:8e:38:f2:
                    b9:76:30:37:32:ab:e5:5f:6a:db:39:85:1b:c3:ae:
                    cd:05:11:d9:b2:70:c4:1e:51:6b:3b:ec:d4:bf:e8:
                    4a:12:04:da:88:7f:cf:57:8a:2d:78:8d:2e:aa:2d:
                    f9:db:93:5b:11:ab:6d:73:ae:4b:1b:b4:6d:73:c1:
                    84:46:79:08:1c:78:2c:61:c6:81:e7:04:07:63:96:
                    0e:10:9c:33:45:f4:80:07:8d:1a:1e:ba:13:45:dd:
                    df:c3:13:97:23:f2:c9:29:5f:40:67:87:27:08:3b:
                    4d:a2:dc:2f:00:5b:4f:d7:9b:9c:fb:81:47:7f:22:
                    e7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8B:4C:58:29:F6:5E:3B:CB:5F:4B:54:37:2E:38:50:8D:3A:4D:F5
            X509v3 Authority Key Identifier:
                keyid:E2:ED:E4:A7:EA:97:26:68:A7:95:B2:7B:A9:DC:87:F4:B9:0D:A8:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/4u3kp-qXJminlbJ7qdyH9LkNqJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4u3kp-qXJminlbJ7qdyH9LkNqJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172D91/EA672A5C19E711E8B243D57CC4F9AE02/9C79DBD23E7911EBBFFAC96BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.255.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:8f:a7:67:b7:67:7a:20:66:fe:25:76:9f:fc:e6:93:d1:82:
         21:ff:70:5d:35:aa:eb:bc:a4:60:b4:67:c3:95:55:a1:11:41:
         82:e0:32:79:bc:7e:27:02:a3:3e:0d:72:cd:ec:ca:5f:31:59:
         10:17:88:81:1a:52:07:ce:57:05:10:00:b3:54:a6:e4:a0:34:
         ca:0d:d5:49:5d:e2:e5:a5:af:ca:f8:b6:92:b7:a2:ce:ee:4a:
         6c:61:47:93:de:c0:56:27:17:84:e6:a8:4e:09:31:2d:57:be:
         6a:c9:e3:8f:57:de:27:27:cf:fe:cb:4d:21:1e:c1:7c:6d:f6:
         fd:5b:09:d8:ad:f1:dc:c0:eb:a0:cf:2e:9e:d5:ad:c0:57:ed:
         b8:76:8e:0b:37:26:77:de:47:a4:12:13:af:20:41:51:2e:d3:
         9a:14:51:d6:21:e6:c7:78:97:94:3e:05:7d:a0:c9:41:5b:87:
         13:86:da:53:42:33:86:24:30:7d:f3:40:f2:cd:b3:34:40:d4:
         6c:00:de:8c:9c:c3:6d:5b:ac:57:f7:7b:43:66:0c:94:b5:b6:
         86:df:20:08:37:9c:93:bc:55:39:5e:c9:98:dd:d9:3e:e4:16:
         f5:9d:e2:2d:28:54:39:b7:3c:82:d8:00:75:77:86:2d:bb:d8:
         08:b9:db:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:33:11 2026 by rpki-client