Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/30A238FA7C0311F192D3088B8FA30FBC.roa
File:                     30A238FA7C0311F192D3088B8FA30FBC.roa (raw, json)
Hash identifier:          X1FnYer6ian8Ac0sFfx3IyMLAtIA4fKJbnOQ0obiOyY=
Subject key identifier:   20:42:B4:1E:63:8B:A7:9E:C6:D4:F7:64:B7:A7:D6:F2:D4:65:3D:D7
Certificate issuer:       /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
Certificate serial:       0913
Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/30A238FA7C0311F192D3088B8FA30FBC.roa
Signing time:             Fri 10 Jul 2026 02:00:57 +0000
ROA not before:           Fri 10 Jul 2026 02:00:57 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     214483
IP address blocks:        2400:3280::/32 maxlen: 32
                          2401:a180::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl
                          rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2323 (0x913)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917190F, serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470
        Validity
            Not Before: Jul 10 02:00:57 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a505259-d027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:05:c6:02:8e:38:af:c5:d8:eb:59:b8:32:64:
                    54:32:35:f6:55:74:c7:34:f7:4c:f2:77:15:2e:39:
                    16:34:d6:22:82:d9:d7:78:c7:52:ef:34:98:7b:e6:
                    b3:0d:91:32:bb:5b:d6:b1:da:51:b0:e5:47:39:1a:
                    c8:6b:86:15:9c:0c:4d:94:5c:cf:15:e5:03:ee:f6:
                    d1:f3:ca:24:72:d9:cc:49:59:ea:69:86:d2:e1:b9:
                    7d:e9:2f:e5:75:43:3f:e6:8e:8f:9a:77:4d:62:06:
                    8e:4a:8b:05:51:98:1d:67:9f:99:af:e3:c3:6d:06:
                    5a:94:93:49:9c:96:ca:42:df:94:0e:e3:68:42:45:
                    9e:b8:40:5d:b7:02:e3:db:66:c8:b9:3c:af:b0:95:
                    ba:8d:6d:77:70:e1:26:b6:e0:3b:22:81:51:ec:c4:
                    75:44:58:8f:83:6d:1a:e1:db:54:2e:e4:7a:8c:f0:
                    0a:1a:50:c1:d4:f1:0e:a1:61:9f:38:37:71:17:50:
                    11:88:d8:9b:d8:27:1a:b8:cb:88:81:25:d1:5f:8e:
                    d4:5d:a1:fe:53:84:4a:f1:fe:b1:e4:5b:03:24:2a:
                    29:28:36:61:85:90:8d:ab:ec:3a:6c:3e:ff:69:cb:
                    a5:c4:40:c5:93:fc:e8:0c:6a:f4:62:80:77:18:af:
                    b3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:42:B4:1E:63:8B:A7:9E:C6:D4:F7:64:B7:A7:D6:F2:D4:65:3D:D7
            X509v3 Authority Key Identifier:
                keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/30A238FA7C0311F192D3088B8FA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:3280::/32
                  2401:a180::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:21:46:bf:24:31:c7:e1:3f:cc:cc:29:45:bb:e0:30:dc:42:
         12:c2:39:b9:3c:63:27:e6:20:01:fe:65:78:9e:ca:67:0b:24:
         3a:18:17:54:fc:54:80:65:b9:44:55:2e:34:1f:bc:5d:2a:4e:
         b7:9d:a5:88:07:bc:c0:91:82:06:da:5d:54:96:ee:56:28:fa:
         6b:9a:94:e4:a3:ef:ab:c1:58:b6:e9:9a:a4:ea:0a:34:43:15:
         99:a1:d0:6f:71:44:c8:65:2c:bc:4d:1f:61:51:20:ca:c9:58:
         23:a0:b0:5e:4e:00:77:8f:7e:60:11:18:99:33:79:8e:5b:45:
         1c:4f:c2:b0:b7:4c:2f:0e:46:66:84:48:47:c3:a0:cc:33:74:
         9e:73:03:76:77:9d:cb:59:6c:bb:3a:f3:4a:70:85:cb:99:3d:
         81:5a:cb:14:f2:dd:23:dd:da:9b:55:f8:ad:53:4d:94:ec:e3:
         5b:07:a4:a5:cf:58:c6:f2:a1:4a:12:fe:cb:35:f7:91:c5:77:
         9f:84:04:72:ed:3f:17:aa:79:57:46:9d:96:50:10:93:36:1a:
         bf:89:f1:17:9b:98:29:e4:fc:44:52:25:2b:b0:2a:da:d9:a9:
         9f:e9:4f:88:ce:f3:6c:f5:2b:bc:e8:c3:a4:18:e4:68:cf:23:
         66:55:56:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:31 2026 by rpki-client