Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/976C4E84F72711EFB800B84BC4F9AE02.roa
File:                     976C4E84F72711EFB800B84BC4F9AE02.roa (raw, json)
Hash identifier:          djqnP2LQeOsKvH3FdDCmYIV4VP7v3SLpxkrs/LZrwvQ=
Subject key identifier:   C3:78:76:EC:23:19:3E:CF:C0:5C:46:21:96:4B:8C:58:88:BF:6C:C5
Certificate issuer:       /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Certificate serial:       050F
Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/976C4E84F72711EFB800B84BC4F9AE02.roa
Signing time:             Fri 03 Apr 2026 00:31:03 +0000
ROA not before:           Fri 03 Apr 2026 00:31:03 +0000
ROA not after:            Sat 01 Aug 2026 00:00:00 +0000
asID:                     136272
IP address blocks:        2400:c7c0::/32 maxlen: 32
                          2400:c7c0::/34 maxlen: 34
                          2400:c7c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
                          rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1295 (0x50f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
        Validity
            Not Before: Apr  3 00:31:03 2026 GMT
            Not After : Aug  1 00:00:00 2026 GMT
        Subject: CN=69cf0a46-bb35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f1:d0:ab:c2:77:5f:d5:b0:fd:26:2f:82:05:
                    c1:ca:11:12:70:b1:94:46:6c:d5:59:53:95:37:25:
                    d1:9b:04:48:55:37:96:cb:66:75:2d:20:23:e6:50:
                    5b:b6:fb:9d:a7:af:43:f7:35:7c:fc:bd:31:2e:7c:
                    dd:58:cc:b6:e3:27:67:fa:64:84:42:08:ee:35:6a:
                    bf:ce:4c:20:3e:51:bf:3c:59:ba:49:b4:30:d1:1a:
                    40:a9:ef:2a:c8:6c:47:c9:a1:46:c5:79:8e:f4:b5:
                    e0:61:b0:ee:66:87:b4:3e:e5:e2:81:9b:ff:fe:b7:
                    b7:eb:42:25:ca:4c:6a:73:0f:cc:c9:38:e0:4c:e8:
                    49:84:6e:bf:ed:22:bb:de:52:87:df:34:9f:72:c9:
                    17:a8:a0:57:f4:41:8e:3d:91:a4:b2:49:ab:5c:86:
                    13:63:9f:59:13:5f:2c:e2:27:7d:ec:21:32:56:6f:
                    28:7b:89:bd:32:69:c9:6a:5e:35:d5:a0:3d:e3:12:
                    e1:50:26:06:27:4c:d9:8e:6e:38:c7:ce:2d:04:a2:
                    a4:10:69:0a:72:9f:46:43:26:8f:a2:2e:37:cf:bc:
                    db:cf:2f:7c:ec:28:47:5e:a0:65:b3:0f:20:e5:8d:
                    8c:40:0a:fa:75:23:e5:40:d6:b3:a9:f0:00:7e:59:
                    e0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:78:76:EC:23:19:3E:CF:C0:5C:46:21:96:4B:8C:58:88:BF:6C:C5
            X509v3 Authority Key Identifier:
                keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/976C4E84F72711EFB800B84BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:c7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:d5:0a:ce:38:6c:b7:bc:d9:73:87:21:ba:bd:07:96:54:b2:
         d4:3d:93:84:3c:56:20:bd:a4:e5:0f:b2:73:e5:8d:ec:2c:a4:
         e2:6c:5b:cb:fa:12:5f:7c:51:41:7f:71:f1:d2:17:ab:51:50:
         74:56:2f:21:c5:2b:2c:b2:aa:12:a0:4b:23:a8:c0:17:75:5b:
         07:8b:50:d9:db:91:07:4f:79:fa:4e:bb:44:7b:b5:74:a9:30:
         18:42:8d:00:80:15:65:7d:ac:fc:78:d5:00:a2:bc:60:15:86:
         2a:4b:79:ae:30:50:b2:a6:27:1d:ca:78:b8:ac:8a:bc:69:f8:
         ed:6e:74:2c:15:98:ed:da:0e:48:09:02:21:4d:99:0b:9d:1b:
         ce:14:da:58:21:b8:55:9f:29:08:d2:d5:77:4b:c2:71:f3:bc:
         eb:f9:59:f0:06:7b:8e:ae:b5:b9:f6:f4:91:27:f9:7c:75:37:
         e5:ed:3a:36:e6:ad:f1:df:a6:37:0c:65:d4:6a:73:6d:2b:6c:
         52:5f:7e:d2:1c:a2:61:89:41:9d:d5:e3:d1:b1:44:ca:08:2b:
         f5:66:40:71:c5:c7:a0:fb:6e:c2:50:9d:6d:be:31:d7:97:78:
         0a:16:1f:02:92:2a:d7:51:0f:16:29:c5:8f:22:bf:75:5d:15:
         a9:cf:9e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:16:35 2026 by rpki-client