Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A309A0BA366311EEB376DC3AC4F9AE02.roa
File:                     A309A0BA366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          dt5esh4YiRNAZirmy+skM3OnPaDSuZwtvyic2vepcxs=
Subject key identifier:   CC:47:62:BA:FB:04:33:62:97:0A:E7:D2:A5:06:72:A6:B0:73:E1:E7
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       02E2
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A309A0BA366311EEB376DC3AC4F9AE02.roa
Signing time:             Mon 22 Jun 2026 06:33:21 +0000
ROA not before:           Mon 22 Jun 2026 06:33:21 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     24097
IP address blocks:        96.30.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 738 (0x2e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Jun 22 06:33:21 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a38d731-5aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:25:11:af:da:51:5e:74:ca:69:f9:a2:03:50:
                    c4:4d:fd:d4:29:fe:63:57:ab:5a:a4:df:f4:3b:01:
                    75:7f:9f:c9:57:fa:81:35:90:c6:e4:5d:0f:15:ca:
                    a1:c0:e6:a8:88:e3:1a:2c:0a:00:41:3a:4d:00:c5:
                    71:0c:4a:c9:9d:9a:7b:4b:58:12:db:7d:4d:da:7d:
                    6a:a2:b9:5b:1b:0e:1a:12:70:9c:cb:7d:34:8e:cb:
                    91:dd:63:4e:97:9c:fc:ad:8b:2a:0a:09:46:ab:73:
                    47:47:02:a7:e9:6e:6e:1b:b7:b0:ef:69:18:79:f7:
                    03:77:67:c0:61:c9:15:bb:7e:34:a9:e1:6c:8e:48:
                    11:7b:63:a3:ca:50:71:bc:2e:29:17:5e:d7:8f:c7:
                    2b:dd:13:9a:f4:8d:ee:22:d5:3e:ee:b5:c4:c9:8e:
                    54:20:c7:ac:91:05:38:fa:b5:34:ab:20:37:b4:e5:
                    33:8f:db:f8:da:41:41:77:b0:d6:cd:54:07:06:37:
                    50:9a:cf:b2:45:87:90:92:1f:40:7d:53:d8:96:32:
                    f7:73:b7:1d:11:f2:34:22:ab:ed:92:57:41:53:a7:
                    f3:31:c0:ba:95:e3:ce:e8:40:07:19:c8:54:52:cc:
                    aa:2c:84:5e:5c:c4:c9:99:36:34:c5:6d:06:44:28:
                    2f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:47:62:BA:FB:04:33:62:97:0A:E7:D2:A5:06:72:A6:B0:73:E1:E7
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/A309A0BA366311EEB376DC3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.30.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:90:5b:8d:0f:29:e9:6a:29:88:36:b5:15:70:22:17:1e:46:
         f0:db:60:6f:ab:68:8e:a2:d2:99:51:5b:7a:1c:dc:fb:4a:22:
         c0:db:f4:d3:f8:7b:a9:70:28:8d:99:40:1a:35:53:85:c1:5f:
         d9:44:40:81:0a:7a:24:2d:c5:fc:30:48:74:2c:35:1d:b0:c4:
         b2:b4:0f:e0:07:23:dd:36:80:d5:d1:a1:8f:4e:1d:b3:01:5e:
         83:9a:13:ba:2e:8b:99:ba:d4:63:01:28:ed:a0:93:18:68:b8:
         7c:40:5f:78:98:b9:50:8c:2d:d1:1e:97:7e:fe:73:b4:2f:67:
         f8:a6:e0:4e:7c:45:07:5a:e2:ad:c0:7c:cf:a3:21:09:6e:2f:
         dd:02:df:94:f1:d6:8b:1c:0e:c5:e9:be:cd:f3:64:3b:00:40:
         d0:fd:e6:f6:0e:a0:d9:e3:ab:14:1e:07:af:28:ae:ad:64:ff:
         cb:c6:be:69:66:d7:2c:77:50:86:d5:dc:b9:e8:b2:b3:64:00:
         68:7a:38:96:95:8d:6a:c4:b5:15:07:de:1e:e0:61:a1:f4:34:
         b3:3c:f3:aa:11:d1:dc:f0:24:0c:9e:12:42:fa:f0:c3:aa:e0:
         6e:77:c0:03:16:bc:14:64:12:6c:f4:66:99:18:31:a4:0c:8b:
         39:0d:a2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:34:24 2026 by rpki-client