Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/AB96EF3852CD11ECAB209C5FC4F9AE02.roa
File:                     AB96EF3852CD11ECAB209C5FC4F9AE02.roa (raw, json)
Hash identifier:          85+2M9Vs4x314HZvI0caNzpi2LtY+oROBZP1Q2xf7GM=
Subject key identifier:   21:BE:16:56:D6:8B:79:32:1C:28:B6:AB:03:05:5E:35:9C:ED:7A:E9
Certificate issuer:       /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial:       0C96
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/AB96EF3852CD11ECAB209C5FC4F9AE02.roa
Signing time:             Thu 16 Jul 2026 22:22:56 +0000
ROA not before:           Thu 16 Jul 2026 22:22:56 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     132591
IP address blocks:        240d:c010:50::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl
                          rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3222 (0xc96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157D67, serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
        Validity
            Not Before: Jul 16 22:22:56 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a5959c0-0e01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a5:74:f8:d9:bc:6b:a4:aa:5e:44:35:6e:94:
                    09:a0:71:b4:08:99:dc:cd:5d:e6:51:5a:af:f6:6a:
                    34:7d:56:89:56:7b:f3:b8:8d:7f:3f:26:da:67:99:
                    38:b5:6a:eb:ea:97:09:2e:df:95:ab:b4:67:af:f4:
                    bc:8b:d3:c6:5a:6b:25:26:98:ed:76:0e:9f:a4:3c:
                    f7:83:0f:18:8f:3e:0f:41:aa:ac:15:0d:1e:c3:10:
                    95:7c:4a:0d:79:46:60:b6:65:e8:50:e5:eb:c3:d9:
                    d1:99:4e:05:2f:05:fa:95:a5:86:e0:a2:0a:8c:93:
                    00:59:f6:e3:dd:54:6d:13:97:5b:07:44:bc:41:2e:
                    4d:49:ce:f2:2b:b4:da:2f:34:51:2a:94:99:0e:ad:
                    8b:3f:29:c9:e4:be:14:ec:e3:f2:d8:7b:eb:27:b9:
                    e6:6f:cc:d9:4f:6b:59:04:ee:78:68:da:60:08:64:
                    cd:ac:84:5f:76:69:1c:24:00:85:ba:a0:93:9c:10:
                    ad:97:29:49:92:13:f6:0e:f7:6f:88:33:87:f3:62:
                    a5:5d:9f:3c:79:b9:29:db:54:96:a8:1d:2e:2a:0a:
                    5d:ce:7f:4c:84:af:93:59:6d:6a:2b:d5:54:5e:a2:
                    09:96:b8:49:c5:f4:a6:9c:a2:2e:3c:a8:5c:bd:dd:
                    bd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BE:16:56:D6:8B:79:32:1C:28:B6:AB:03:05:5E:35:9C:ED:7A:E9
            X509v3 Authority Key Identifier:
                keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/AB96EF3852CD11ECAB209C5FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240d:c010:50::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:dd:b8:f5:cb:56:da:8d:3c:e0:ea:15:04:e3:b4:52:8d:24:
         0f:9e:0a:06:16:ea:66:09:e9:38:c4:c5:aa:b7:7e:82:3d:9b:
         a1:b6:c9:a2:78:0e:a4:b2:25:50:f6:f6:c7:d6:10:3b:18:0f:
         49:fa:5a:5e:12:ad:d9:c4:fc:98:de:c4:09:18:56:33:95:a7:
         8d:d4:74:9e:37:6e:d0:20:32:ba:92:3c:55:e4:2a:05:3a:8d:
         24:75:a0:aa:f8:25:58:1b:36:87:a2:d4:40:63:b3:fd:8c:af:
         24:73:57:5e:22:48:f2:75:10:17:4b:d9:99:2a:4b:0c:da:99:
         88:28:12:c7:f2:96:7e:75:d1:b8:ea:b4:02:df:12:9f:99:a3:
         bd:22:c0:ec:a3:b7:69:b3:cc:30:27:75:8b:d3:6e:37:b2:c8:
         9a:ca:44:b7:64:78:51:45:d6:c6:02:87:aa:c9:da:98:0b:4f:
         47:8d:40:eb:92:87:a5:93:84:49:c2:98:9c:db:e1:e0:52:9d:
         8f:3e:8f:72:85:71:4c:d9:30:80:d4:d7:e6:67:62:9d:d4:9a:
         e4:29:7f:df:bb:b4:4e:da:45:c8:01:2c:38:28:39:11:1a:fa:
         84:31:73:3b:e7:4e:63:88:78:e6:5e:0e:ac:54:c7:bc:d2:5f:
         04:a3:63:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:55 2026 by rpki-client