Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/AB532852B38911ED825BDC70C4F9AE02.roa
File:                     AB532852B38911ED825BDC70C4F9AE02.roa (raw, json)
Hash identifier:          30kBWOx1m1nSXGGOJPuoiodt0X6arWCmu2hhEcaPUOI=
Subject key identifier:   F2:2E:72:2F:D7:FC:EA:82:9A:5C:72:70:CD:86:E5:7C:F8:1D:42:C5
Certificate issuer:       /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
Certificate serial:       068D
Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/AB532852B38911ED825BDC70C4F9AE02.roa
Signing time:             Wed 16 Sep 2026 22:44:51 +0000
ROA not before:           Wed 16 Sep 2026 22:44:51 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     7387
IP address blocks:        202.79.176.0/21 maxlen: 24
                          2401:7800::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl
                          rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 22:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1677 (0x68d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189BB3, serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
        Validity
            Not Before: Sep 16 22:44:51 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aab1be2-d62b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a0:48:d8:dc:29:40:98:56:ac:1c:fb:5c:07:
                    dd:62:89:b0:1f:7c:75:04:a8:85:e6:25:14:76:e7:
                    17:f2:85:81:15:e5:ae:c6:2b:8e:9f:2b:46:1c:de:
                    af:04:15:79:2a:9d:ea:2f:fd:0d:dd:22:42:50:24:
                    41:c2:74:35:4d:48:a8:d7:06:c0:01:3b:4f:20:9f:
                    e6:ad:31:50:d1:f2:0a:a6:31:16:9b:32:92:94:97:
                    e7:be:21:6e:27:3e:c5:a5:19:8c:ff:a1:ca:77:36:
                    03:ca:f0:b8:18:98:9f:74:73:ff:db:0e:03:ca:02:
                    7d:74:d2:90:f7:d5:63:49:0f:56:05:31:85:39:e6:
                    46:18:42:fa:2d:74:4c:e4:93:30:7e:db:11:41:8d:
                    96:3a:73:70:c2:1e:81:6d:df:23:d1:ad:a3:ed:e5:
                    49:06:51:94:a3:29:1c:3d:8a:05:da:94:b3:fd:34:
                    6a:09:5b:ae:e0:8e:3b:f8:c7:9c:87:72:24:34:21:
                    ba:14:db:2a:bf:8a:5b:f5:fd:42:b3:86:4d:41:be:
                    c0:90:2c:5a:e1:9b:54:50:b8:bb:0e:94:91:d0:d5:
                    69:8a:ed:20:7e:9a:2d:10:ce:8e:22:87:9d:33:ff:
                    5a:81:e9:3e:58:87:70:ba:16:39:51:f4:38:c8:6a:
                    06:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2E:72:2F:D7:FC:EA:82:9A:5C:72:70:CD:86:E5:7C:F8:1D:42:C5
            X509v3 Authority Key Identifier:
                keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/AB532852B38911ED825BDC70C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.79.176.0/21
                IPv6:
                  2401:7800::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:a7:76:ea:f5:a8:64:6d:42:a0:1f:58:e6:ba:cf:59:4a:18:
         83:99:aa:44:12:08:99:4d:44:ea:2c:20:24:c1:44:ed:48:d4:
         2c:79:e6:11:70:e1:a8:78:78:2a:05:14:66:06:be:74:ce:cc:
         83:db:d3:fd:f1:ae:47:6d:95:80:37:a0:2b:29:aa:9c:c1:51:
         2e:fe:f0:18:6e:5f:d9:fb:08:94:f6:ac:d8:6f:25:d7:60:2b:
         5d:ba:62:66:b1:90:d8:e6:87:70:45:b0:5b:a1:3f:9a:33:76:
         20:88:32:e0:0f:83:da:75:c2:c9:9e:14:96:0d:71:79:f2:65:
         c4:6f:0c:d7:7f:7e:ec:cf:cc:1e:44:a6:a5:fb:96:7b:5e:e9:
         82:17:87:74:ff:9c:50:6e:5b:dc:69:39:69:1a:79:8f:84:e5:
         32:36:4a:d7:8a:08:fd:9f:e0:ea:bd:e4:f0:8b:a0:a3:84:6b:
         ff:b7:08:d6:e4:57:ba:42:06:7f:ba:03:be:1d:62:d3:eb:61:
         eb:2c:17:9a:e8:b9:2d:5c:86:2a:76:53:0d:e0:04:d5:2d:ca:
         99:5e:8c:c8:0a:bb:65:eb:e5:24:9f:1f:c3:6b:db:44:9f:32:
         b3:bd:10:b3:c2:11:cb:c8:2f:d9:c7:a6:13:8b:f9:6a:42:ed:
         ee:be:a9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:34:40 2026 by rpki-client