Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/0CB23E10AB4F11EC85BF147CC4F9AE02.roa
File:                     0CB23E10AB4F11EC85BF147CC4F9AE02.roa (raw, json)
Hash identifier:          swLkF62W36YEhpiZJn5J+9WNnQAfcHEZNTTTGF43b+Y=
Subject key identifier:   8E:26:79:7B:FC:1F:3B:9E:04:D2:D8:20:F6:40:EB:3B:60:A6:1D:3A
Certificate issuer:       /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial:       0BAD
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/0CB23E10AB4F11EC85BF147CC4F9AE02.roa
Signing time:             Wed 12 Aug 2026 19:38:58 +0000
ROA not before:           Wed 12 Aug 2026 19:38:58 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     149628
IP address blocks:        39.109.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
                          rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Sep 2026 19:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2989 (0xbad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
        Validity
            Not Before: Aug 12 19:38:58 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7ccbd2-b97d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a3:d1:e5:63:f8:29:10:08:c2:60:9a:38:c3:
                    fb:8b:35:fb:5c:0f:23:0d:64:b7:9f:d4:72:fb:e9:
                    1a:b9:c1:cb:64:87:bc:1a:e1:82:58:5a:97:fd:42:
                    80:61:0c:df:e5:03:85:b5:d8:46:a7:68:1b:d4:59:
                    6d:7c:ba:05:ba:3b:80:05:83:49:84:0e:75:d7:42:
                    8a:6a:b8:4d:ec:34:63:c0:f0:bc:6d:54:88:a1:74:
                    c7:30:6a:6a:8f:c6:64:7b:5a:74:6b:ff:71:95:3d:
                    10:ba:6b:0c:03:9f:aa:7b:cc:8f:f7:8c:82:93:b7:
                    99:e2:35:11:61:73:07:5d:10:d8:90:3e:f4:f6:86:
                    bb:be:2d:6b:78:13:5a:dd:8f:77:73:a8:66:4e:ce:
                    88:37:34:29:75:77:9f:ea:b1:fc:71:b3:af:7b:86:
                    38:64:b4:79:3f:5f:55:84:68:8d:12:9c:6d:3d:2c:
                    21:89:1f:fe:b5:2c:1d:5c:57:28:23:dd:eb:bd:55:
                    6d:58:49:7b:d4:15:ed:fb:bb:a0:dc:ea:0b:7c:e9:
                    fc:73:c0:7f:18:d6:58:f9:04:f5:74:fe:cf:b8:47:
                    0f:d4:39:c2:2d:13:8b:51:72:bd:b1:05:57:6b:20:
                    10:d0:c9:a0:f2:0e:0b:3f:11:42:d4:c3:d7:ae:56:
                    f9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:26:79:7B:FC:1F:3B:9E:04:D2:D8:20:F6:40:EB:3B:60:A6:1D:3A
            X509v3 Authority Key Identifier:
                keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/0CB23E10AB4F11EC85BF147CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.109.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:2c:78:78:a4:06:73:ed:9e:87:2d:1a:23:3a:dc:3f:c2:1f:
         77:92:64:a8:de:70:06:ba:34:06:bd:4f:ef:92:f3:8a:3d:bb:
         92:e3:84:f1:53:bc:9a:49:ff:9f:ba:7a:43:53:5b:8f:f5:b6:
         71:e1:b6:6f:99:f0:44:f0:02:59:f1:b1:11:f2:ab:f4:31:53:
         e5:52:68:09:cc:6f:70:22:6b:36:77:c4:cb:a6:ed:08:83:06:
         15:03:fb:79:24:ee:d3:14:5d:fa:00:a3:bc:3d:7b:bc:9c:b3:
         eb:69:14:62:c8:0a:61:b7:38:80:33:9c:c5:fa:20:16:c2:75:
         dd:c3:a1:09:4b:b2:c9:85:ec:11:d4:da:e3:39:4c:44:22:4b:
         8f:f4:dd:d7:c7:d8:24:d2:a1:7a:c3:13:b1:7d:d3:8e:6e:c4:
         7c:30:62:7b:a4:08:15:f2:fe:0f:1a:56:dd:13:36:08:be:a8:
         56:b4:a0:f8:11:48:1e:74:d8:ba:0c:ac:36:2f:6a:45:67:46:
         8d:76:5b:07:67:72:a7:d0:f9:8e:50:58:29:5c:84:6a:bd:b0:
         5d:b5:c2:a9:0c:7a:4d:a1:0c:c5:44:50:0d:a2:62:ba:8e:ff:
         7c:08:be:d6:d1:e6:60:33:66:b5:9b:ba:e1:20:86:4f:59:96:
         d9:8c:40:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 04:28:09 2026 by rpki-client