Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/FBC7C3BC24DB11F18E6B9B14AD833773.roa
File:                     FBC7C3BC24DB11F18E6B9B14AD833773.roa (raw, json)
Hash identifier:          HaSFcTdyVltIF7SeiiWh8O/2wgEJqq3VXl8LlDRKgjI=
Subject key identifier:   47:3E:6C:81:7B:D1:15:62:C7:C8:A0:D4:5F:69:03:CF:14:E9:AD:29
Certificate issuer:       /CN=A9189D79/serialNumber=9FBBD23056168D1A517E996DC56F664A6EE52EA5
Certificate serial:       22
Authority key identifier: 9F:BB:D2:30:56:16:8D:1A:51:7E:99:6D:C5:6F:66:4A:6E:E5:2E:A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7vSMFYWjRpRfpltxW9mSm7lLqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/FBC7C3BC24DB11F18E6B9B14AD833773.roa
Signing time:             Wed 13 May 2026 09:42:25 +0000
ROA not before:           Wed 13 May 2026 09:42:25 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     133139
IP address blocks:        146.88.85.0/24 maxlen: 24
                          146.88.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.crl
                          rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7vSMFYWjRpRfpltxW9mSm7lLqU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189D79, serialNumber=9FBBD23056168D1A517E996DC56F664A6EE52EA5
        Validity
            Not Before: May 13 09:42:25 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a044781-fda2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:18:a4:b5:51:e1:22:af:cf:95:7a:d6:ee:a9:
                    d5:02:3f:f6:72:a0:b4:f2:45:9d:0f:b9:11:31:32:
                    b9:80:10:38:b9:d1:ca:73:ea:1e:1c:6d:de:ad:08:
                    de:26:23:ba:fa:14:41:8b:d0:a4:fb:ac:e5:f4:7d:
                    5c:ba:6a:d4:db:02:4c:3a:e8:8e:be:30:0a:31:31:
                    a9:b1:3d:3e:32:dd:d8:45:d1:a4:3e:e1:6b:61:90:
                    e8:f8:cc:0c:77:7b:e9:e0:b0:53:aa:b2:4f:a4:d6:
                    6e:00:b6:59:6f:ae:85:0d:64:e8:e9:83:65:cb:12:
                    ac:4e:d7:30:8d:49:a2:65:06:99:9c:bc:99:fc:47:
                    ab:e9:29:57:d8:d9:4f:c7:66:69:3c:77:58:4a:3b:
                    74:03:73:32:0d:8e:65:80:67:ea:e2:28:78:9c:da:
                    8a:ef:80:48:ba:c1:e7:8c:0c:9a:f6:91:a3:52:94:
                    5c:9c:d3:1e:a2:6a:26:87:84:b8:50:41:e8:0e:b6:
                    db:2f:f4:42:2a:2f:64:4a:e0:f3:b9:12:1e:35:8c:
                    f3:d6:a7:83:85:b9:ff:79:87:b9:a0:f6:df:64:a9:
                    7f:19:7f:3d:b8:3c:2d:b7:73:60:90:b0:a4:6f:69:
                    28:7b:af:59:d1:e8:e3:ac:09:be:44:05:3c:80:c8:
                    37:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3E:6C:81:7B:D1:15:62:C7:C8:A0:D4:5F:69:03:CF:14:E9:AD:29
            X509v3 Authority Key Identifier:
                keyid:9F:BB:D2:30:56:16:8D:1A:51:7E:99:6D:C5:6F:66:4A:6E:E5:2E:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/n7vSMFYWjRpRfpltxW9mSm7lLqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n7vSMFYWjRpRfpltxW9mSm7lLqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D79/381CA75C24DB11F1B1F5BBA5AC833773/FBC7C3BC24DB11F18E6B9B14AD833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.88.85.0-146.88.86.255

    Signature Algorithm: sha256WithRSAEncryption
         15:fc:38:4c:a2:0b:3a:d5:60:57:0f:6b:1c:e3:72:dd:6e:56:
         9f:18:f7:eb:f5:cf:8a:44:30:ed:b0:2e:83:e5:62:44:bd:3f:
         52:bb:7d:97:5e:21:3e:78:f8:51:32:11:91:a4:17:af:84:3a:
         f4:53:7e:fa:a6:cb:78:15:d7:d5:9f:09:e9:85:bb:6b:91:f6:
         3c:85:1b:b7:24:cd:06:a5:ad:7e:78:cf:1c:a8:f1:d7:af:a0:
         85:06:cb:02:98:69:5e:e3:51:fc:92:a5:1e:54:dc:4f:44:c6:
         67:78:f7:96:c1:ed:48:83:db:84:2f:b3:28:80:12:50:7b:3b:
         5d:b7:62:aa:70:19:7d:41:08:0b:d2:40:58:b1:59:1b:a5:63:
         0e:af:ac:65:ed:77:50:2d:52:32:2f:cd:5e:33:cd:65:b8:7c:
         cc:6a:c9:33:68:59:15:7b:bd:bb:19:64:cd:b3:06:dc:d4:fe:
         c1:a3:70:57:b9:b5:da:93:db:23:7f:99:e7:0f:be:af:47:02:
         1e:c6:8b:38:e3:c8:33:cc:cf:6e:74:3e:dc:f9:ec:25:a7:79:
         a1:21:ce:b3:6d:f0:01:84:b8:02:73:7e:35:03:2e:04:20:1b:
         aa:e2:37:01:13:d1:d9:1f:8e:10:c8:5b:76:e0:b1:4e:1d:60:
         d5:f1:00:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:39:42 2026 by rpki-client