Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/26400C8EC97611EFB28BD766C4F9AE02.roa
File:                     26400C8EC97611EFB28BD766C4F9AE02.roa (raw, json)
Hash identifier:          UuQlPTQUqEWbhmqpHgNnEn3hybDrTYbpE8O6YzTBu68=
Subject key identifier:   33:75:B0:F3:14:71:A2:95:E3:54:13:9F:71:01:30:B3:E5:2B:A3:27
Certificate issuer:       /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial:       0BA7
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/26400C8EC97611EFB28BD766C4F9AE02.roa
Signing time:             Wed 12 Aug 2026 19:38:46 +0000
ROA not before:           Wed 12 Aug 2026 19:38:46 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     132824
IP address blocks:        39.109.77.0/24 maxlen: 24
                          2403:e840:fffe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
                          rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Sep 2026 19:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2983 (0xba7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
        Validity
            Not Before: Aug 12 19:38:46 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7ccbc6-e97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ae:21:ae:2c:fe:72:53:a7:ba:80:93:0a:e2:
                    58:49:c0:35:17:26:37:d1:26:86:7c:60:c8:d2:03:
                    96:03:70:e4:a9:a1:0e:f6:f9:03:4c:28:34:75:20:
                    ca:2a:f9:f2:95:90:f4:87:45:b6:78:1d:f4:85:0f:
                    e2:e6:41:6a:90:d2:93:50:32:fa:c3:dd:5e:26:97:
                    83:b7:66:d3:bf:5b:93:36:4b:8b:37:19:f9:66:c4:
                    50:4a:ac:42:0e:a7:dc:21:78:b5:22:ce:05:1c:eb:
                    3f:04:1f:9f:09:62:a6:ff:9d:f8:ec:9a:33:ef:89:
                    3b:cd:f5:cf:51:3a:76:07:dd:52:86:d5:d9:d6:ef:
                    e9:1a:ce:cb:69:a3:1e:b1:a2:32:94:8e:fe:85:9f:
                    ad:c8:fc:35:e1:cb:55:74:09:68:ef:2f:f8:cd:3f:
                    8d:05:2e:a1:64:6b:cd:29:d1:97:8c:eb:b3:07:f4:
                    50:3e:5b:18:8c:46:93:37:3b:35:f5:f6:ac:d9:ca:
                    32:d0:9c:0d:b9:1c:60:09:40:70:ed:6d:70:ec:b2:
                    bf:9a:d7:fb:d5:99:f5:dc:3f:4d:14:ee:7f:3f:ba:
                    87:2e:04:ef:59:49:fb:dd:b5:f0:be:95:0a:74:1c:
                    62:8e:0c:89:50:29:65:ec:09:70:81:d5:60:c3:6c:
                    a1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:75:B0:F3:14:71:A2:95:E3:54:13:9F:71:01:30:B3:E5:2B:A3:27
            X509v3 Authority Key Identifier:
                keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/26400C8EC97611EFB28BD766C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.109.77.0/24
                IPv6:
                  2403:e840:fffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:90:c2:ef:0c:c8:57:e6:35:0c:3c:50:e3:0b:95:07:6c:b9:
         48:ca:58:2d:69:63:9f:fd:f0:8b:f1:b9:8e:16:1c:a4:5f:99:
         f0:c5:78:d5:64:ee:a0:57:9d:2d:5b:0c:91:9f:f9:bf:91:f2:
         7a:2c:d0:ce:8e:73:96:47:29:db:6b:83:37:dd:7f:60:d8:c4:
         d6:59:b9:ed:58:2d:e8:06:5a:28:b8:59:27:81:0c:c3:3f:09:
         58:f6:3e:f8:3a:7d:57:ab:3f:b1:01:3d:86:f8:a8:82:b2:ab:
         0e:44:1c:32:26:81:00:25:7f:ba:e1:6e:da:bd:04:c9:64:67:
         df:c7:22:33:a0:62:a0:8e:ff:10:dc:46:1f:a3:af:e2:ff:eb:
         04:88:6d:cd:b1:f4:47:2f:03:03:21:86:60:9b:75:15:e3:76:
         05:67:78:c9:55:76:e3:9f:8e:b9:20:aa:7b:70:f8:09:53:7e:
         7e:24:56:5f:bd:16:46:be:80:cc:b2:d5:22:55:98:16:e0:bb:
         7a:8a:a8:06:25:f2:79:8c:66:2e:03:b3:22:4e:67:7a:c8:8b:
         57:6d:b5:52:92:ba:7a:a4:0f:77:d3:66:66:bd:2a:8d:f0:f3:
         54:9b:82:56:55:5f:d6:40:65:ed:8e:29:e8:49:1c:08:f0:79:
         d4:00:33:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:00:03 2026 by rpki-client