Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/9E129FFC5F2611EF8DAAA57FC4F9AE02.roa
File:                     9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (raw, json)
Hash identifier:          1zoP69z7AM4GmJ1JESdD7kT2K9RUzllL5ylzBKqZ7sw=
Subject key identifier:   F1:F7:F3:D0:DE:AF:8E:92:08:75:F8:99:D2:5C:CB:E0:7D:84:81:EB
Certificate issuer:       /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial:       35CA
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/9E129FFC5F2611EF8DAAA57FC4F9AE02.roa
Signing time:             Thu 16 Jul 2026 15:10:43 +0000
ROA not before:           Thu 16 Jul 2026 15:10:43 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     58655
IP address blocks:        182.252.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
                          rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13770 (0x35ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
        Validity
            Not Before: Jul 16 15:10:43 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a58f473-8587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8f:50:cb:83:22:41:e3:90:b0:c8:16:83:8f:
                    97:a3:42:2f:b6:f4:3d:63:2b:c5:0d:89:2a:33:9d:
                    20:d9:ec:d1:3c:2a:9e:ac:12:89:ca:47:c3:8f:b7:
                    cf:fb:85:d1:42:10:e2:6e:5d:a8:46:4c:36:28:7a:
                    e4:37:fc:00:9a:4c:65:d9:b1:91:3e:ac:5b:e7:5e:
                    b4:48:e8:ad:ca:8b:8a:f9:16:b6:d9:d4:4b:a1:72:
                    64:73:54:00:ec:48:dc:1c:c4:44:0f:bb:d3:4f:89:
                    db:35:8e:64:46:5c:d9:c7:d3:cf:e7:9d:01:5b:8a:
                    d1:de:b8:78:af:8c:a0:a1:fe:89:78:8b:a7:a8:cb:
                    2a:fa:b9:39:d3:e6:f6:37:34:b2:7c:89:87:c6:78:
                    40:7a:d1:d7:0e:58:43:5a:aa:86:91:25:ca:41:81:
                    1d:81:98:74:81:59:03:03:22:12:b0:f5:d5:9a:51:
                    30:2e:12:e5:ad:05:4a:fe:a5:ed:79:53:1a:cc:b1:
                    81:27:10:08:03:4d:f4:36:da:5d:c4:06:66:de:e7:
                    fc:6f:27:d6:80:77:78:9c:9b:15:1b:70:33:be:04:
                    44:35:86:f2:1b:19:f9:03:9a:9c:bf:ec:2a:63:74:
                    84:bf:ab:5a:b7:98:42:71:6b:b6:70:5f:c1:f2:51:
                    32:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F7:F3:D0:DE:AF:8E:92:08:75:F8:99:D2:5C:CB:E0:7D:84:81:EB
            X509v3 Authority Key Identifier:
                keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/9E129FFC5F2611EF8DAAA57FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.252.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:55:f7:ce:52:d6:ac:1f:10:e2:6d:83:7a:9e:d4:ab:4c:51:
         b8:62:b4:8f:2c:03:3b:a2:a9:23:87:ab:06:93:22:dd:00:e7:
         60:6a:d6:ce:79:b9:6d:e6:a7:86:45:f3:3e:e4:4d:60:77:77:
         75:58:93:73:6e:f5:eb:d9:d1:ad:6d:6f:3d:c4:0d:47:ed:29:
         e0:11:23:02:c7:6f:56:10:a6:23:53:36:59:a5:25:fe:31:6b:
         87:44:c2:4c:e0:69:70:c7:19:04:d0:91:d4:df:73:fd:40:be:
         7e:ea:7e:5b:d7:2b:ae:71:e1:71:80:63:ee:d7:a7:5e:9d:1f:
         54:e5:94:9f:1c:b2:12:77:78:b8:e1:aa:97:98:7a:57:74:49:
         1f:2d:2b:a7:21:05:4d:c8:52:c3:4f:ab:d9:7a:ad:13:49:ce:
         f4:45:aa:9c:d5:75:01:bd:7e:52:d5:97:f5:a7:72:43:2a:d1:
         74:b1:6a:f3:17:1d:25:2a:54:58:f5:a9:5f:79:5e:7e:6f:69:
         c0:a2:35:18:b8:ec:f4:e8:0a:bb:26:5b:49:c4:84:7c:31:2f:
         7c:19:3e:21:12:26:19:ce:9c:b1:1a:70:89:35:2e:41:4d:58:
         cb:95:52:91:73:6b:cf:39:08:4a:a1:32:d7:48:a3:75:51:09:
         1b:92:e1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:42:18 2026 by rpki-client