Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/26400C8EC97611EFB28BD766C4F9AE02.roa
File:                     26400C8EC97611EFB28BD766C4F9AE02.roa (raw, json)
Hash identifier:          V8yBbFfZIBKjw3+SFiGyRaOs5FvmhOj17ktK8YLwfLU=
Subject key identifier:   9D:EA:21:3F:4C:7B:ED:8B:BA:51:76:A5:4C:90:E2:28:19:76:78:E9
Certificate issuer:       /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial:       0AC7
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/26400C8EC97611EFB28BD766C4F9AE02.roa
Signing time:             Tue 12 Aug 2025 20:31:12 +0000
ROA not before:           Tue 12 Aug 2025 20:31:12 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     132824
IP address blocks:        39.109.77.0/24 maxlen: 24
                          2403:e840:fffe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
                          rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 19:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2759 (0xac7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
        Validity
            Not Before: Aug 12 20:31:12 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=689ba490-0062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3a:fd:74:1a:30:0a:16:93:37:11:2f:48:eb:
                    38:65:53:b3:8a:cc:a3:fe:cd:e0:2f:d0:5c:fa:cc:
                    f3:9a:dd:c7:fe:d0:31:d8:9b:d5:91:e9:e3:de:b2:
                    81:8a:65:49:6a:8b:a8:15:f6:95:69:a6:09:04:dc:
                    9e:1f:75:51:04:b1:b0:73:b2:50:a1:a3:03:2f:05:
                    c5:ea:34:cc:a5:37:47:6d:8e:33:40:54:e4:91:f7:
                    0f:84:46:98:b6:b1:74:e1:23:bf:d1:d7:07:1b:58:
                    22:83:dc:bd:4d:0d:49:a3:30:99:08:c7:d4:88:31:
                    56:bb:92:45:89:47:a6:d8:d9:79:ec:ac:c8:c6:ba:
                    90:92:a6:8f:e1:ac:81:25:d9:94:e5:0f:ab:6f:51:
                    bd:35:87:24:b4:71:e9:9b:f9:d8:ff:a5:ca:3d:5f:
                    d0:7b:65:da:5f:d5:cf:81:07:c5:b4:af:2d:46:70:
                    64:cf:31:12:87:df:35:af:29:40:a1:df:72:7d:67:
                    d3:8f:e0:34:d2:80:0c:26:e9:fd:db:0a:04:3c:bc:
                    81:47:31:54:09:3e:a4:01:00:42:30:a8:b2:49:d1:
                    02:1c:ab:1f:f2:e6:4c:9e:42:85:6c:b0:2f:c6:30:
                    e1:b6:70:31:ad:b2:0b:a4:c0:15:09:8d:09:be:a7:
                    b1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EA:21:3F:4C:7B:ED:8B:BA:51:76:A5:4C:90:E2:28:19:76:78:E9
            X509v3 Authority Key Identifier:
                keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/26400C8EC97611EFB28BD766C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.109.77.0/24
                IPv6:
                  2403:e840:fffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:d1:5f:b5:40:a0:4e:33:93:7a:98:00:83:2d:ff:31:c7:56:
         21:f6:3e:bb:36:37:19:53:33:fe:f8:59:7b:81:54:f6:d5:fa:
         34:64:ce:95:6e:b6:4e:56:7c:49:34:5c:38:ef:8e:5f:7f:21:
         4f:4d:9f:60:29:96:b0:7c:31:92:4e:b6:fc:b3:cf:7d:8e:d8:
         01:6d:53:6c:06:b1:2f:80:4b:97:7b:d4:5e:f5:98:4a:7d:98:
         e3:5b:00:22:39:bb:c0:a3:c6:74:5e:c1:6e:6f:c1:96:0f:38:
         16:6d:50:db:ba:c3:bb:cb:4c:85:43:19:30:b9:7a:4b:aa:13:
         f9:98:3b:ca:41:4d:88:a1:87:65:bc:ef:b5:d2:7c:26:e9:40:
         dc:46:c9:ae:52:a2:ef:dc:9b:d8:7b:08:1f:58:46:cd:bf:b0:
         1f:a8:a0:ef:4c:ec:f2:e9:87:c9:24:3c:a4:03:85:67:55:4f:
         54:57:2c:51:d9:0d:fb:30:25:26:18:9f:4d:1f:68:a6:a0:88:
         2f:77:2c:74:b7:8b:2b:ff:38:f6:00:c9:fe:8e:4f:68:f1:7c:
         01:ae:ff:2d:21:61:e0:62:fa:0d:d2:76:ca:d6:25:c6:e6:7f:
         c0:dc:0d:2e:7c:0c:82:41:20:5a:81:24:7a:a8:7f:49:78:04:
         f4:3d:e7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:37:37 2025 by rpki-client