Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/AAB43BD6247F11EE9CEA495CC4F9AE02.roa
File:                     AAB43BD6247F11EE9CEA495CC4F9AE02.roa (raw, json)
Hash identifier:          SfpOZZZqAF6xymFu+bkiJdRZTKRwkZseOTXppXvJjio=
Subject key identifier:   7A:76:9E:19:15:E6:F9:36:65:FF:C3:4D:F6:AA:7D:BC:37:B4:A4:88
Certificate issuer:       /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial:       0B4C
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/AAB43BD6247F11EE9CEA495CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:07:20 +0000
ROA not before:           Tue 12 Aug 2025 20:31:18 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151466
IP address blocks:        39.109.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
                          rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2892 (0xb4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
        Validity
            Not Before: Aug 12 20:31:18 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a48057-075c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5d:89:b0:43:e6:d8:8d:c5:9d:12:72:be:44:
                    ee:26:d3:fa:d1:7f:ce:42:71:d2:de:fa:ed:c0:f6:
                    ec:ea:cd:04:9b:30:dd:5a:56:78:04:b2:1f:81:fb:
                    12:9c:b5:7b:ca:78:b8:d6:76:20:0c:5d:8e:8b:13:
                    5f:df:1d:e3:f9:27:f3:a4:67:79:4b:61:ec:12:71:
                    11:ab:0a:b1:e3:b0:05:d6:f2:64:15:6e:20:58:a4:
                    5f:83:28:5b:53:23:35:cf:00:20:b5:83:a1:6c:21:
                    fa:e7:5f:59:39:60:9b:b0:83:97:9c:ee:d9:a8:3b:
                    a3:28:09:6f:4f:2f:55:1b:6b:36:38:7f:9c:42:3c:
                    b2:98:41:75:34:73:e3:c7:0f:27:ba:15:08:39:2c:
                    00:28:e3:3b:06:9d:a4:bc:4e:0f:c2:d4:0c:03:50:
                    44:6b:26:18:5a:dd:55:cb:ab:82:23:ca:36:af:0d:
                    33:96:ee:8a:ff:4d:7d:79:5d:e4:3d:b1:28:2c:d2:
                    dd:c0:a7:f4:64:3f:04:dc:5e:b7:26:32:39:51:ca:
                    39:b7:01:62:d3:38:8f:33:2c:02:9f:6b:1e:1c:ce:
                    a9:27:44:b7:ad:ab:af:a7:38:be:a9:16:c7:8e:56:
                    2e:14:26:25:d5:f8:55:4d:43:bf:40:67:96:09:f9:
                    de:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:76:9E:19:15:E6:F9:36:65:FF:C3:4D:F6:AA:7D:BC:37:B4:A4:88
            X509v3 Authority Key Identifier:
                keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/AAB43BD6247F11EE9CEA495CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.109.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:01:3a:f6:f7:65:38:30:59:c5:b7:a2:2f:94:c8:a4:f2:aa:
         41:13:d6:d9:46:e0:8a:20:69:57:f8:9f:4e:3d:6a:f0:17:02:
         a5:fe:2b:0e:f0:8b:ab:c1:76:8f:58:41:28:2e:b3:c8:9a:09:
         cb:bb:e5:b4:1d:70:55:e9:07:43:26:5f:02:a3:48:25:1e:70:
         af:e8:e9:29:20:3e:dd:11:57:d0:6c:74:85:76:57:58:d3:d9:
         79:ed:ca:03:1c:9a:88:66:94:c6:0e:45:bd:ed:bf:13:4d:d5:
         cf:2f:cc:16:86:0d:be:b5:37:ad:d2:0f:36:9c:e2:49:90:68:
         dc:17:dd:f3:8d:53:9c:1f:89:7f:31:f2:54:8d:5c:f4:5b:e9:
         45:7e:f4:8b:14:05:44:01:e7:2f:00:6f:ed:09:e7:44:74:de:
         1b:e3:a3:d4:a9:cf:16:7d:6e:67:86:7e:8d:bb:04:13:43:dd:
         97:13:d9:db:96:aa:d4:7e:bb:64:af:bb:e8:5a:dc:f2:60:be:
         50:2a:63:91:d2:d8:d1:cb:1f:77:13:a7:52:82:a2:31:ef:a0:
         9e:c9:3f:bb:a2:92:d9:a8:64:ac:ea:3c:5c:2b:38:9a:31:51:
         ad:44:a4:01:ae:4f:f4:4b:fc:c8:34:a9:5f:57:c0:02:25:b4:
         dc:8d:a9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:52 2026 by rpki-client