Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/AAB43BD6247F11EE9CEA495CC4F9AE02.roa
File:                     AAB43BD6247F11EE9CEA495CC4F9AE02.roa (raw, json)
Hash identifier:          EarqUx/FVYltAoSVNdODoWwpte23NdNnn8UmCsSABy8=
Subject key identifier:   EB:A5:64:5D:3B:CA:C2:26:18:BE:FE:A3:5F:C6:EA:FF:C9:05:E5:24
Certificate issuer:       /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial:       0BAE
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/AAB43BD6247F11EE9CEA495CC4F9AE02.roa
Signing time:             Wed 12 Aug 2026 19:39:01 +0000
ROA not before:           Wed 12 Aug 2026 19:39:01 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     151466
IP address blocks:        39.109.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
                          rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Sep 2026 19:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2990 (0xbae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
        Validity
            Not Before: Aug 12 19:39:01 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7ccbd4-7e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ff:3b:43:3a:36:a3:33:7d:24:f7:ec:80:b2:
                    d0:85:a1:a9:3c:c6:86:24:42:44:30:ea:23:74:d4:
                    f9:b9:2d:98:57:04:fb:b8:e8:2e:db:45:48:7c:9f:
                    d7:e7:1d:08:17:91:14:ca:31:74:53:9a:2e:ab:91:
                    8d:9e:39:86:98:89:ad:11:22:ea:17:a5:be:58:92:
                    d1:c1:13:15:78:8b:22:a8:ef:93:58:50:e3:6d:86:
                    b0:c0:36:11:07:ce:8c:9b:ec:ff:1d:2b:ef:e6:6d:
                    29:09:23:24:99:0a:8a:15:bf:c0:11:23:cf:c0:1c:
                    22:93:77:5c:9e:35:b5:1c:96:54:39:92:c8:08:ba:
                    a7:6a:de:f8:a6:b4:13:fd:95:38:98:8b:5f:3b:b7:
                    71:54:de:3b:45:bf:27:b1:18:e7:7c:ba:51:0f:92:
                    d0:4c:c8:bd:05:84:a0:11:64:d7:31:70:f1:b5:c9:
                    03:68:a0:14:52:76:0c:fa:fb:ec:71:e6:7d:70:3d:
                    74:97:c9:aa:d1:a6:ce:1a:fd:af:ac:21:f9:58:4e:
                    c9:d6:dd:f8:ac:27:0b:11:bb:22:71:af:f7:15:09:
                    fc:ae:8f:13:e5:90:dd:ff:09:7a:e5:68:91:e1:d3:
                    3b:be:5d:b2:99:5c:59:14:bd:c9:4c:30:8e:13:ab:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A5:64:5D:3B:CA:C2:26:18:BE:FE:A3:5F:C6:EA:FF:C9:05:E5:24
            X509v3 Authority Key Identifier:
                keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/AAB43BD6247F11EE9CEA495CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.109.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:2c:b0:2a:1a:79:f2:6e:dc:ec:13:cb:8c:74:61:5d:d7:dd:
         40:68:e1:2a:79:f3:1b:3d:a5:b8:14:77:56:3e:5f:0b:6f:16:
         13:cc:fa:cf:b0:11:6d:3c:1d:b8:d0:56:41:7a:c8:45:c1:c3:
         d4:0b:61:c6:3c:2f:d1:c9:03:fa:b3:8f:61:73:ed:eb:33:03:
         88:5c:5f:93:78:24:12:03:38:ab:3e:f7:7f:91:84:7b:8f:ca:
         46:1a:4e:d4:7d:88:23:05:90:e6:70:74:9e:7f:df:c9:3f:31:
         0a:0d:71:0c:c5:d3:34:84:99:58:1b:f2:ae:63:f8:5e:39:39:
         f5:04:9d:c0:01:ad:25:39:a3:ca:d4:90:4b:ca:23:81:fa:71:
         6a:ee:50:81:3e:46:3e:5f:d9:b9:b1:61:0c:c9:47:48:d6:6f:
         fe:2a:3d:1d:b5:b9:8f:c2:f6:52:68:90:ac:28:5b:09:2c:db:
         a3:2d:d8:47:0b:13:0f:b2:5d:32:38:bc:e4:3a:25:c3:a7:87:
         8c:38:c9:84:bc:aa:4f:ec:6b:c5:f4:6d:65:d6:41:60:74:85:
         f4:22:80:d5:47:2e:bf:22:87:88:d0:26:9d:85:73:12:3d:49:
         e9:e2:7d:70:25:1e:77:1b:d0:07:9e:3c:c4:3f:41:ca:26:a2:
         f8:39:4b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:20:58 2026 by rpki-client