Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/86BCB8FAB18C11F193EE37D06A11F970.roa
File:                     86BCB8FAB18C11F193EE37D06A11F970.roa (raw, json)
Hash identifier:          Jy90UOfs+MiODnTC3ucb1FC79SIiapzuCiv1A1IHKSQ=
Subject key identifier:   74:B2:73:FB:88:A3:9F:67:13:8C:C6:67:00:E1:D4:17:52:E8:69:F7
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       3035
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/86BCB8FAB18C11F193EE37D06A11F970.roa
Signing time:             Wed 16 Sep 2026 05:07:34 +0000
ROA not before:           Wed 16 Sep 2026 05:07:34 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     134095
IP address blocks:        14.207.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 15:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12341 (0x3035)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Sep 16 05:07:34 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6aaa2416-b523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:9e:df:23:08:9c:63:4d:85:54:5e:58:a0:
                    b4:51:bf:d1:9a:c3:57:a4:f0:4f:de:cb:b6:d1:9f:
                    2b:ba:ab:f4:7b:50:7d:dd:9a:96:49:1a:49:c8:58:
                    0e:a8:86:c6:78:04:a2:32:96:47:9a:73:18:09:97:
                    f8:0b:62:64:13:3c:1a:67:37:86:d6:90:45:37:ff:
                    59:fe:0a:e9:44:6b:14:90:67:02:a0:d9:12:8a:55:
                    04:9e:33:66:6c:9f:3b:e5:20:d7:31:e0:d2:71:59:
                    51:d0:f6:b0:cc:52:d9:f2:a4:c5:0f:b7:5a:7a:05:
                    3d:d8:4f:c8:94:8d:b2:d3:aa:44:19:6a:45:4f:5c:
                    fc:b6:5a:c2:44:d3:9c:9d:b9:5f:07:3d:80:75:da:
                    36:85:e6:35:fa:a1:e3:98:a1:13:96:af:c2:3d:03:
                    0b:61:73:02:47:a8:b6:da:0d:2c:6a:ed:f1:b1:8d:
                    3b:dd:47:66:c2:8f:8c:3a:cf:a3:e0:cb:60:d4:bb:
                    2b:5a:29:15:21:8f:85:75:89:54:cd:b8:9f:5e:56:
                    be:20:40:72:92:e1:ae:f9:58:86:19:ff:71:80:da:
                    c1:fc:8d:6b:c6:f0:eb:82:a7:1d:d7:83:4c:61:eb:
                    8a:2c:e3:57:ad:23:8c:9a:cf:80:ed:69:b1:15:19:
                    1c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B2:73:FB:88:A3:9F:67:13:8C:C6:67:00:E1:D4:17:52:E8:69:F7
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/86BCB8FAB18C11F193EE37D06A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.207.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:4f:73:f8:78:e5:ab:ec:a0:6c:e6:58:78:c6:7a:e4:ef:1f:
         d0:57:9e:9c:13:49:e0:5a:80:89:21:12:de:4a:6f:6e:78:a0:
         52:24:9c:6e:5a:20:3d:83:52:23:90:1d:a0:24:1e:64:21:c5:
         5f:fa:d2:3f:6c:b2:54:ce:20:14:c5:74:f1:29:dd:37:24:91:
         a9:0e:91:69:5a:ed:87:1e:c2:dc:7e:c2:19:2f:50:fd:1d:35:
         ce:75:06:18:5c:48:bd:47:a9:92:52:dc:db:97:cb:38:8e:78:
         ff:ec:89:1e:17:ac:44:91:61:7e:9a:14:19:bb:14:60:2b:0e:
         a5:ba:d4:c2:e0:85:f7:38:bc:64:9e:5f:cd:a0:ea:3f:79:ce:
         64:08:92:7f:1e:a2:08:2b:4c:59:d9:98:89:e1:d5:92:bf:2d:
         19:af:d3:69:30:42:b7:ba:38:b5:d6:78:ff:74:12:03:51:62:
         1e:50:ee:a4:3f:2b:e0:cc:73:c2:66:b1:ca:77:a2:bf:d3:31:
         16:d5:80:a7:1e:b4:79:14:ee:0c:34:4f:13:57:ec:1e:14:54:
         59:84:ef:de:5e:19:ec:8b:23:a5:2b:e9:aa:02:08:88:6b:81:
         85:bc:5f:8b:25:9e:f2:78:27:0d:f8:11:b5:1e:63:63:39:4d:
         41:6f:67:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:25:07 2026 by rpki-client