Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/26400C8EC97611EFB28BD766C4F9AE02.roa
File:                     26400C8EC97611EFB28BD766C4F9AE02.roa (raw, json)
Hash identifier:          chO6OG4ylU6FeQD8EZ6ojrHcYUct9WTBlxUERjOvSus=
Subject key identifier:   C0:C8:3E:82:B2:DA:D5:75:3F:73:7C:82:31:2A:5C:6F:D8:71:F3:3C
Certificate issuer:       /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial:       0B45
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/26400C8EC97611EFB28BD766C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:07:14 +0000
ROA not before:           Tue 12 Aug 2025 20:31:12 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     132824
IP address blocks:        39.109.77.0/24 maxlen: 24
                          2403:e840:fffe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
                          rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2885 (0xb45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
        Validity
            Not Before: Aug 12 20:31:12 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a48052-04ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:08:33:1d:40:77:a6:35:40:33:03:87:1d:9b:
                    4c:cf:c5:41:7a:68:c7:cd:08:56:24:25:f6:30:05:
                    3d:21:19:bc:ef:40:36:9f:f0:a7:9a:32:e0:de:ba:
                    c6:c6:eb:8f:61:05:a0:c2:e2:16:4b:77:79:43:37:
                    0e:3f:24:af:d0:4b:eb:75:70:b4:be:2f:7b:da:74:
                    0a:14:65:21:0f:44:54:4b:69:05:22:63:85:db:de:
                    be:0e:2c:12:5b:9a:2f:ef:1d:05:1e:db:8b:4c:93:
                    a3:9d:b0:d5:cf:2a:fd:f2:c0:c3:2c:60:73:9c:c1:
                    48:15:05:04:04:c7:14:64:b4:12:d9:01:da:1f:ac:
                    8a:94:6e:d5:9c:77:8e:67:f3:1d:36:43:b0:ed:2e:
                    45:3f:66:fb:4d:fb:c6:c3:78:67:e5:26:2e:36:9f:
                    ab:63:83:5c:6d:bd:e4:34:df:03:f0:98:60:a2:f3:
                    71:8f:18:d9:25:20:c6:90:93:62:e3:60:63:bf:de:
                    73:9a:62:40:88:49:f4:73:6e:b9:61:aa:9d:30:79:
                    a4:8d:51:be:6f:2f:63:09:01:2f:2c:59:45:84:a0:
                    48:b6:26:f5:cd:99:ab:41:e9:69:59:1e:dc:70:95:
                    0b:0c:19:25:ca:56:0a:41:c3:79:50:ae:4e:6e:0a:
                    7e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C8:3E:82:B2:DA:D5:75:3F:73:7C:82:31:2A:5C:6F:D8:71:F3:3C
            X509v3 Authority Key Identifier:
                keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/26400C8EC97611EFB28BD766C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.109.77.0/24
                IPv6:
                  2403:e840:fffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:7c:65:53:b6:1c:4b:f2:ee:6e:43:b1:4d:7a:e3:ae:d2:b0:
         81:7b:13:85:51:70:2d:2b:a1:f4:b7:ce:bd:f9:4a:9d:12:36:
         d9:d0:89:2a:d6:8b:a1:af:f3:67:e9:30:57:a4:db:a2:ea:4c:
         ff:6c:a5:b7:b5:4e:c2:de:6e:f3:03:4a:da:8b:c3:82:9a:5b:
         2b:1a:a8:5c:75:5e:85:ea:80:64:05:e8:e7:a8:6e:cc:a2:90:
         db:76:ef:69:11:3d:d9:62:a4:c1:36:75:e7:17:c4:0c:e0:8a:
         29:cd:69:dd:95:e2:f7:44:aa:58:7a:a7:dc:93:5b:76:7e:69:
         1a:68:8a:11:bd:9e:2c:d2:87:a7:18:0c:b4:12:87:b6:54:be:
         bb:5c:79:ec:f1:c0:7c:43:6d:c7:5f:ab:f5:a1:cf:8c:1b:f9:
         6d:a4:ea:2d:9c:06:3b:7b:00:85:45:0f:52:68:fa:6a:fe:0a:
         73:46:7a:08:89:50:6c:49:69:df:84:c8:44:3e:8a:fa:fe:dc:
         8e:f5:93:68:8a:22:a6:ba:a2:5f:30:cb:d5:ff:41:d3:b0:0f:
         0b:a0:3b:38:19:5f:aa:bd:3a:bd:06:ea:40:01:cc:fa:04:37:
         fb:bb:45:51:a8:b0:99:59:1e:40:33:0e:fd:57:34:1d:da:38:
         b0:62:40:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:36 2026 by rpki-client