Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/5B76DF12820611EE8A06123AC4F9AE02.roa
File:                     5B76DF12820611EE8A06123AC4F9AE02.roa (raw, json)
Hash identifier:          tgWNFtii+Zc83iPIGPSMYRpyk9K7VuUWU7rCDmoIp90=
Subject key identifier:   F7:10:85:6F:06:07:2D:28:0A:93:35:B7:AF:25:3F:9C:00:D4:CD:02
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       02DF
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/5B76DF12820611EE8A06123AC4F9AE02.roa
Signing time:             Mon 22 Jun 2026 06:33:16 +0000
ROA not before:           Mon 22 Jun 2026 06:33:16 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     152102
IP address blocks:        161.82.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 735 (0x2df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Jun 22 06:33:16 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a38d72c-e72d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c9:f9:7f:9c:df:b4:00:17:bf:bf:0d:3e:cd:
                    f3:86:6d:d2:8d:0b:2d:90:8d:8f:28:9d:ee:b5:47:
                    07:2f:83:d5:a5:d7:00:77:4f:d3:36:0b:c6:43:ea:
                    1d:e9:97:5a:35:61:a2:9f:37:db:af:09:1a:f9:97:
                    4d:c3:ed:87:af:64:15:c2:ce:e4:45:77:39:df:6c:
                    61:fc:78:dd:d1:cb:c7:f3:45:45:fd:3e:af:82:1b:
                    39:6b:1d:af:e5:ab:e2:6e:d5:3d:5b:fd:54:e2:3f:
                    cb:c6:6f:d8:2c:0e:09:ca:f0:64:23:a3:19:82:de:
                    67:e9:af:58:01:f9:6a:55:3a:7a:11:08:bd:8e:c7:
                    cf:4d:a6:33:b2:1a:73:19:10:e0:73:a1:5e:9b:07:
                    19:ad:f9:9f:b3:31:32:97:2d:f8:88:1e:d8:9d:15:
                    83:c3:03:d9:bb:3c:65:e5:48:26:3f:05:dc:5f:2f:
                    ea:a9:3e:a9:ee:5b:ac:02:21:e3:f0:b1:c5:c5:1f:
                    d5:fb:bf:b1:f0:cf:ae:89:0f:5b:ec:a2:70:3d:18:
                    55:86:90:e9:ca:b5:56:0d:9a:12:51:e7:4f:2a:57:
                    37:72:47:f9:78:32:ef:f9:82:d9:4c:0b:e5:df:f3:
                    e1:f3:36:83:b4:7b:43:86:2e:4a:6e:9d:63:f9:bb:
                    ee:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:10:85:6F:06:07:2D:28:0A:93:35:B7:AF:25:3F:9C:00:D4:CD:02
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/5B76DF12820611EE8A06123AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.82.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:3d:a9:99:2b:98:98:fe:29:79:85:65:4d:0d:74:f7:6e:ed:
         a7:26:4b:0f:db:e4:2f:14:37:e7:78:67:b0:66:9b:24:1c:a4:
         f4:2f:ec:9f:d7:fd:60:7f:26:80:7a:12:02:f0:c0:1c:72:df:
         5a:ed:db:4f:41:fe:b3:2a:4a:12:0b:01:95:6e:c7:d5:e2:cf:
         00:50:91:b4:97:81:30:29:47:a0:75:f5:c3:7c:f1:24:54:9f:
         00:1f:a6:b8:40:b6:fe:33:37:87:01:93:7c:ae:ec:9b:28:76:
         50:ce:cf:da:ed:b9:87:33:55:f0:fb:c5:db:07:9f:dd:6d:f9:
         e4:48:5a:41:33:6d:5a:32:8d:df:09:81:63:59:3b:5e:9f:5b:
         87:fb:d7:72:ce:20:d7:b0:7d:d8:e5:fe:2b:83:4a:af:8c:cd:
         80:c6:e3:a1:a4:3f:01:73:32:b9:12:d1:d4:21:1b:5f:d5:c1:
         e7:5a:a2:9c:f6:a1:1e:94:d2:30:d0:5b:3d:9f:7d:a3:65:61:
         08:87:75:fc:87:8d:c2:76:04:08:a9:33:e9:54:2e:56:94:c3:
         ef:45:05:26:86:2a:1e:41:f4:d5:f6:43:4b:20:8d:6b:49:0e:
         d0:c1:4f:d8:c5:66:b6:fd:58:37:8d:53:51:23:69:e8:56:bc:
         0b:31:6e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:29:35 2026 by rpki-client