Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/0044F6405A4211EBA729CB56C4F9AE02.roa
File:                     0044F6405A4211EBA729CB56C4F9AE02.roa (raw, json)
Hash identifier:          ATI8E4LKt1tDeuSmmOcUtMfprMiPriQnS5NikBuK6Ww=
Subject key identifier:   3C:FD:85:E6:44:23:E3:FE:73:63:2D:B7:7E:39:A4:B5:AE:67:59:33
Certificate issuer:       /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial:       0BA6
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/0044F6405A4211EBA729CB56C4F9AE02.roa
Signing time:             Wed 12 Aug 2026 19:38:44 +0000
ROA not before:           Wed 12 Aug 2026 19:38:44 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     132585
IP address blocks:        39.109.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
                          rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Sep 2026 19:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2982 (0xba6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
        Validity
            Not Before: Aug 12 19:38:44 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7ccbc3-0b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:44:81:64:4c:ee:0e:1b:a3:d4:b3:cc:bb:31:
                    31:73:e5:26:9a:dc:53:20:f6:51:59:b2:35:a0:e1:
                    cf:90:e3:3b:57:44:f7:1b:b1:f3:6e:01:b6:98:01:
                    fc:e8:8d:6a:0b:2a:57:45:aa:6d:90:76:44:59:3c:
                    e6:dc:b3:13:68:b7:db:9f:21:c7:81:22:a1:39:d7:
                    8a:99:13:51:b0:89:b2:f7:1a:42:82:c3:a3:51:fe:
                    68:d3:a7:9b:15:f1:38:bf:16:8b:49:1e:81:ad:b3:
                    ca:7a:9b:23:46:74:4b:c4:35:11:12:1c:2d:69:16:
                    a4:d9:52:4d:47:90:60:07:43:25:3f:98:d3:62:26:
                    23:80:89:55:85:09:55:12:d4:f2:c0:85:d0:86:86:
                    43:40:22:d9:52:8d:cb:f2:cc:79:2e:33:12:63:9e:
                    a3:b3:bf:0e:2e:a7:c1:dc:5c:5c:bc:19:22:e2:72:
                    85:c4:1b:37:4c:69:f5:d5:f2:b2:3c:1e:35:fb:92:
                    81:c2:28:65:ce:f8:06:f9:a5:d9:74:9e:a8:b0:89:
                    31:3e:ac:be:65:a7:82:97:ce:ad:42:18:50:4f:37:
                    97:be:ed:1c:16:91:bd:7f:83:80:4a:8c:0b:e5:8b:
                    f6:7b:04:e5:7f:05:90:78:64:bf:ff:36:f4:25:68:
                    c9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FD:85:E6:44:23:E3:FE:73:63:2D:B7:7E:39:A4:B5:AE:67:59:33
            X509v3 Authority Key Identifier:
                keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/0044F6405A4211EBA729CB56C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.109.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:39:f0:91:26:33:6b:98:59:79:e7:72:e7:12:40:d8:5c:d2:
         77:e1:ee:06:6c:3a:2d:44:d6:76:2f:2e:3e:1f:8c:74:92:4e:
         78:f6:5f:79:b4:bf:b5:0c:bc:3c:f8:ba:9b:dc:e7:37:bd:37:
         14:7c:4e:ca:6e:e9:9c:a3:e8:7b:71:15:1b:29:ef:f4:2f:8c:
         b5:7e:66:99:3c:2e:80:f9:de:8f:6e:f1:76:c7:e8:88:e9:15:
         63:9c:61:2d:57:96:10:d9:3d:e4:d1:09:72:a1:db:5c:11:01:
         40:1d:57:56:b0:32:cc:0f:96:48:fc:ae:fb:c3:cb:48:d5:40:
         5f:f8:95:6b:b6:35:a7:87:d8:d6:95:b9:3c:d5:d2:13:d1:42:
         f0:34:91:e1:f6:8b:2d:e6:f4:e4:8d:29:ff:92:56:b7:eb:ad:
         b9:4d:72:07:41:da:1f:b7:fd:ff:0d:8a:f7:f9:f9:da:0d:3f:
         7b:d1:f3:20:05:83:a6:80:97:87:ba:33:cf:3d:6d:8c:d8:a9:
         b5:42:84:18:8e:c1:6b:c1:4f:1f:52:c7:cb:88:ef:7d:50:f2:
         17:0e:ed:68:5e:65:66:ba:72:5f:00:b3:43:dc:84:38:9d:90:
         a8:7b:69:c2:33:3b:0c:8e:b9:27:37:31:e0:dc:da:cb:e6:8f:
         0e:c9:ca:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:54:58 2026 by rpki-client