Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/976C4E84F72711EFB800B84BC4F9AE02.roa
File:                     976C4E84F72711EFB800B84BC4F9AE02.roa (raw, json)
Hash identifier:          LBXsZ6Qc5PbYFZq8uFB69SQgnd2HJlVii4JRVFiibss=
Subject key identifier:   2F:46:10:32:A4:3F:40:72:11:53:2F:13:79:9C:B9:41:EE:92:6F:CC
Certificate issuer:       /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Certificate serial:       0550
Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/976C4E84F72711EFB800B84BC4F9AE02.roa
Signing time:             Sat 25 Jul 2026 00:48:17 +0000
ROA not before:           Sat 25 Jul 2026 00:48:17 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     136272
IP address blocks:        2400:c7c0::/32 maxlen: 32
                          2400:c7c0::/34 maxlen: 34
                          2400:c7c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
                          rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 00:33:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1360 (0x550)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
        Validity
            Not Before: Jul 25 00:48:17 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a6407d1-c2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:fb:fb:68:df:d7:e8:18:6b:82:a0:f3:63:a4:
                    26:29:c6:6e:27:e6:98:26:3b:3b:0b:55:eb:dd:73:
                    44:1c:d5:0a:5b:fb:da:b3:20:52:01:27:36:3c:7b:
                    3b:08:f5:8d:11:d3:b0:14:01:b0:a7:59:0a:ca:93:
                    5b:cb:c7:48:f6:22:e3:5e:07:9c:c0:b3:e0:54:43:
                    ef:6d:8f:4a:25:0e:63:12:8a:fc:7b:79:00:16:74:
                    6e:c1:30:fe:04:66:e7:50:85:62:e6:d1:41:a9:fd:
                    44:6e:c0:3d:f7:7c:66:41:a5:d8:b4:45:86:93:66:
                    b0:49:8b:1c:96:9a:00:a4:53:81:b8:b3:47:84:b8:
                    bb:2b:cf:c7:f0:b8:dc:64:62:1f:09:5c:fa:b6:a8:
                    2f:02:77:bc:a2:1c:11:19:cc:59:94:27:80:72:08:
                    1e:a1:53:7b:b7:a6:3f:43:ae:d2:65:a6:5c:39:79:
                    ee:0e:1b:82:5d:87:9a:a1:d0:4d:20:c2:56:87:60:
                    4f:de:58:6b:9e:19:b4:04:ed:b3:a7:ec:11:29:2e:
                    87:4e:74:2f:9c:4d:e2:b0:a4:ab:df:1b:ac:5f:a5:
                    b9:0d:83:3b:30:36:fd:67:da:25:c3:2b:fe:d4:11:
                    ec:68:c6:2e:34:a4:79:dd:fe:a6:60:22:92:44:5e:
                    48:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:46:10:32:A4:3F:40:72:11:53:2F:13:79:9C:B9:41:EE:92:6F:CC
            X509v3 Authority Key Identifier:
                keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/976C4E84F72711EFB800B84BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:c7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:e3:63:14:ee:73:9c:8e:78:39:17:db:96:f3:39:a5:18:6a:
         77:d9:58:8a:0c:f5:ca:09:81:bc:aa:25:24:7c:40:50:c8:a3:
         c4:2d:24:e6:1b:85:f9:b5:92:40:22:fd:c5:fd:d7:41:af:70:
         ee:e4:90:ba:aa:8d:81:64:61:62:49:3a:4b:9a:c3:29:4d:e7:
         97:2e:08:46:c8:4c:56:8f:20:b2:99:6c:c9:54:fb:62:68:a2:
         08:80:ee:09:5c:79:c0:f1:fd:a8:8b:f3:4b:f6:08:a2:63:ad:
         41:ce:37:8f:4a:ff:68:8f:2b:2c:9e:2c:fe:1b:89:e2:be:5e:
         3d:a3:dd:65:b8:c6:d7:61:66:30:95:38:47:26:a1:a3:62:2a:
         41:0d:9f:4a:aa:b1:41:73:a9:45:79:1a:c1:4c:7f:89:c5:e5:
         cb:95:a1:4c:51:21:da:e0:82:24:51:e4:46:91:e0:bd:6a:2a:
         b1:0c:c1:ef:48:4f:c9:9a:6d:a6:a0:8b:56:50:e0:db:96:a1:
         41:57:6d:de:96:2f:ce:19:2d:1b:d5:23:48:ac:a3:f5:55:20:
         51:92:35:48:e9:f3:56:3e:23:53:61:43:e4:32:22:c4:c9:b8:
         cc:86:5b:4e:17:ea:88:b7:0a:09:9f:d6:50:99:85:70:06:8f:
         35:90:0b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:12:00 2026 by rpki-client