Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/B1E75D08DD7F11ED815F9B4DC4F9AE02.roa
File:                     B1E75D08DD7F11ED815F9B4DC4F9AE02.roa (raw, json)
Hash identifier:          didvJhI7x6rWco2OGYAbxDlObbw/3Pq6tRwgusbYWYA=
Subject key identifier:   80:42:82:A2:A9:78:AB:92:6E:25:40:84:9D:3A:FA:E2:A5:9B:AD:37
Certificate issuer:       /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Certificate serial:       0267
Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/B1E75D08DD7F11ED815F9B4DC4F9AE02.roa
Signing time:             Fri 05 Jun 2026 02:34:52 +0000
ROA not before:           Fri 05 Jun 2026 02:34:52 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     2914
IP address blocks:        116.197.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
                          rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913664F, serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
        Validity
            Not Before: Jun  5 02:34:52 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2235cc-70fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:18:b9:77:36:b1:b4:4c:3d:57:3b:ea:d7:c6:
                    6a:a0:85:e2:6e:70:48:25:a0:08:18:e8:62:14:91:
                    b4:94:ba:b9:3c:86:fc:11:84:6f:8e:42:64:12:87:
                    74:ef:ba:1c:0f:3f:b3:6a:1c:08:7a:22:17:eb:5f:
                    8e:4a:e6:30:e2:99:84:49:b1:30:fa:12:e9:8a:c4:
                    65:ea:09:62:04:d1:82:39:90:81:e3:b7:cc:d0:28:
                    59:17:16:71:ac:a7:92:f0:a7:a2:ec:67:d0:08:b2:
                    d0:aa:a2:b1:cd:9a:a7:ae:0d:d9:ee:81:4e:81:61:
                    4e:82:99:35:1f:e1:83:99:24:82:d8:1a:ae:df:9b:
                    cd:41:97:6a:f9:7a:d7:54:18:55:5d:92:80:bd:cf:
                    a7:4d:c8:c8:47:40:5b:ed:53:36:f4:79:9b:9c:21:
                    74:fd:7c:d1:12:31:d7:d4:d1:8d:c5:6f:1a:1a:34:
                    64:e8:1c:59:cc:4b:dc:ee:66:8a:49:21:59:6b:79:
                    e8:13:0f:03:a2:8e:d7:ab:4c:da:36:09:45:28:eb:
                    c6:26:c2:a3:af:dd:84:d9:57:c3:f1:2f:16:65:3f:
                    7f:27:b0:ab:b8:65:7c:da:c5:5e:f1:8f:d9:99:bb:
                    62:6e:07:c5:fa:72:89:0a:6a:7e:2b:a1:8c:66:4f:
                    ca:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:42:82:A2:A9:78:AB:92:6E:25:40:84:9D:3A:FA:E2:A5:9B:AD:37
            X509v3 Authority Key Identifier:
                keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/B1E75D08DD7F11ED815F9B4DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:f1:14:93:98:09:90:b2:d7:1a:12:00:9b:f4:69:d5:5e:cd:
         fc:6b:0f:3f:3f:07:ae:d7:8a:ab:ef:4e:62:62:12:97:05:19:
         1c:3d:86:93:a3:54:f5:a7:56:7e:d5:7c:b7:a7:95:51:56:16:
         af:43:a5:32:fd:6b:5e:c8:f3:c1:24:d3:02:4e:07:15:f3:42:
         96:aa:9f:1e:b5:4e:9b:b7:12:bd:80:48:0c:42:f0:63:64:fb:
         01:f1:a6:9b:a7:60:dd:d3:56:b9:d8:b3:cb:df:54:f3:9c:5a:
         de:4c:22:82:26:12:d7:d5:ff:c8:d1:b7:46:68:de:ca:96:12:
         57:72:50:49:a1:29:f8:ac:27:2f:75:58:e6:59:1f:6e:88:8d:
         b2:54:1e:e5:54:1f:3a:51:50:9d:64:08:56:2f:5e:23:61:8c:
         b9:95:b1:bc:53:40:95:bd:90:3b:af:5c:f8:28:58:5c:f2:c2:
         a8:1e:c0:de:4e:0b:84:ea:98:a3:13:8a:9f:2f:b2:dc:3d:f7:
         1c:ee:fa:ba:01:d4:6f:c4:37:97:fd:cb:8f:90:53:35:db:40:
         20:34:be:fa:bd:24:1e:97:15:0d:d3:57:64:3f:69:44:fc:06:
         35:d6:0b:fd:3a:5f:b4:49:05:fa:21:4c:de:af:ba:06:4f:e8:
         58:6e:4d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:54:06 2026 by rpki-client