Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/E95058049A8C11F096D9A13AC4F9AE02.roa
File:                     E95058049A8C11F096D9A13AC4F9AE02.roa (raw, json)
Hash identifier:          c+jS9T730vF+5SWP52gID7wtIHfEyjgTtK22kEU0TtI=
Subject key identifier:   4E:DA:10:11:C6:75:E8:5F:E1:AD:FF:B4:0B:11:21:51:FC:39:64:CC
Certificate issuer:       /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial:       0BAF
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/E95058049A8C11F096D9A13AC4F9AE02.roa
Signing time:             Wed 12 Aug 2026 19:39:03 +0000
ROA not before:           Wed 12 Aug 2026 19:39:03 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     40605
IP address blocks:        39.109.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
                          rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Sep 2026 19:26:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2991 (0xbaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
        Validity
            Not Before: Aug 12 19:39:03 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7ccbd7-235b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4f:1c:5c:10:b5:82:de:f8:d3:a1:81:69:7b:
                    b0:5c:c8:62:44:42:49:fc:9c:72:8d:d4:30:11:9e:
                    45:8f:59:67:b2:cc:b0:2f:99:63:f7:c1:e0:4b:f6:
                    8a:db:f2:43:ec:23:83:78:43:f0:08:e3:89:a7:75:
                    7c:9c:e0:bd:46:4a:3c:9e:9a:f2:65:39:90:08:c4:
                    d5:fe:09:4f:d9:ca:5c:f6:ab:10:2b:96:e7:94:b4:
                    46:d9:6c:eb:c8:38:0e:90:92:b2:be:58:aa:ee:1e:
                    74:25:18:c9:5c:8d:57:1f:81:5a:ee:f2:49:16:84:
                    62:49:de:35:26:2d:df:3a:73:1c:46:15:73:5f:db:
                    a0:6a:b7:47:c3:89:66:8f:45:bf:04:0e:21:4a:4e:
                    71:cb:09:02:fb:4e:36:52:03:de:cb:4b:90:00:7f:
                    71:8d:1d:c4:a5:3f:3d:49:c3:f4:c7:29:c2:e3:fd:
                    df:8c:22:05:b8:08:0f:1b:e9:bf:34:79:18:18:20:
                    a6:e4:0c:34:a1:00:c5:f2:1e:7e:e0:6f:d6:eb:7d:
                    23:8e:3f:3d:ca:f4:8e:10:01:bf:40:14:03:c4:b5:
                    14:75:8b:ec:23:e2:66:a0:a3:95:95:86:c9:39:7a:
                    63:87:c2:96:c5:f9:33:e5:76:83:fc:32:0e:40:b6:
                    0f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DA:10:11:C6:75:E8:5F:E1:AD:FF:B4:0B:11:21:51:FC:39:64:CC
            X509v3 Authority Key Identifier:
                keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/E95058049A8C11F096D9A13AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.109.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:f3:48:e2:ed:d7:c5:ce:45:9f:0d:dc:49:ef:cf:64:dd:9a:
         fe:6a:df:9c:cf:00:5f:59:0b:4e:d4:45:47:1f:f4:2d:9a:bd:
         7e:5e:ee:f4:7f:0b:50:c7:6f:f0:0f:76:71:be:67:45:c4:9f:
         50:7e:2c:fe:7a:7c:f7:ad:e4:32:5b:9d:85:23:1b:9c:9b:97:
         14:49:46:33:02:11:d0:70:c3:12:73:98:50:8e:fc:78:cd:2d:
         24:05:24:2f:b9:5d:91:08:59:0c:9c:b9:ee:92:0e:f4:28:18:
         b2:20:af:d1:9e:97:30:86:01:bc:1a:84:f0:d9:ce:c6:9e:19:
         b4:4b:9d:a7:dd:b5:98:ea:59:d9:c7:3d:c3:27:0a:04:44:6f:
         80:46:3f:62:3b:f5:e9:1e:c2:d4:b4:31:b1:f1:d8:41:88:c1:
         01:38:48:97:72:c5:5b:9d:12:bb:fa:77:14:d4:a3:dd:89:5a:
         ce:81:74:b9:f5:00:a3:6a:4f:12:51:64:45:5b:63:f6:25:3d:
         6b:e3:d1:ae:f8:0b:a9:39:05:ba:58:46:79:a5:2c:71:f7:89:
         55:84:68:d3:be:75:63:51:9d:45:33:8b:76:93:fc:35:5f:66:
         aa:11:41:d5:21:ad:06:87:29:90:0a:fd:46:ee:e1:49:75:5f:
         7f:5d:fb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:20:43 2026 by rpki-client