Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa
File:                     D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa (raw, json)
Hash identifier:          uq6cUAp8aWstgVcfNAAsf2DmlkVgoELMDbHxDJXHEOY=
Subject key identifier:   1F:BB:FF:ED:30:82:A4:FE:D5:F9:45:4C:D4:38:68:7B:17:7B:76:8F
Certificate issuer:       /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Certificate serial:       0265
Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 02:34:48 +0000
ROA not before:           Fri 05 Jun 2026 02:34:48 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        116.197.148.0/24 maxlen: 24
                          116.197.150.0/24 maxlen: 24
                          116.197.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
                          rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913664F, serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
        Validity
            Not Before: Jun  5 02:34:48 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2235c8-0b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5a:e3:16:94:39:eb:30:56:eb:ac:94:50:3c:
                    89:33:42:e1:10:86:0f:37:ba:80:33:68:ac:a9:82:
                    10:ee:8c:8f:5e:fe:8f:ef:c3:41:8f:27:0a:01:5b:
                    a3:08:54:22:05:80:1c:cd:c7:d8:29:fa:19:d2:d7:
                    4d:8e:53:2c:2b:f1:72:be:9e:de:5b:c4:ca:a5:01:
                    ab:54:a3:f9:e4:9c:c3:40:b3:f3:6f:bd:c7:d6:03:
                    b0:67:57:5a:be:19:7c:17:e1:69:f7:77:f5:69:76:
                    c7:6f:2e:08:68:57:1e:b1:e1:29:8b:75:7e:30:61:
                    dd:7b:f3:34:dd:f0:79:98:c8:77:cc:f7:ae:d7:bd:
                    68:36:36:5c:2a:99:44:1c:d3:94:dc:f0:6e:57:0f:
                    f5:50:c9:54:82:eb:4d:9d:40:80:a6:eb:7b:e6:85:
                    74:9c:f5:55:d5:d6:23:f0:e5:a1:aa:5a:ee:5c:48:
                    56:75:e9:ee:92:07:d6:95:7d:67:09:94:a9:1d:85:
                    af:2b:8b:55:94:69:a1:98:ce:25:4e:b1:39:84:1e:
                    92:e4:0c:98:f8:56:60:ef:b3:c9:bf:c0:51:11:74:
                    fa:d9:3e:e0:59:e2:c9:3e:87:a6:19:51:4c:ad:fc:
                    33:5f:b5:61:a9:2c:b7:cc:43:e1:f1:dd:e0:ad:d2:
                    d5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BB:FF:ED:30:82:A4:FE:D5:F9:45:4C:D4:38:68:7B:17:7B:76:8F
            X509v3 Authority Key Identifier:
                keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.148.0/24
                  116.197.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:26:dd:4a:46:6b:6a:bd:91:af:22:8a:d0:1a:00:22:78:bf:
         fd:71:56:f7:a8:f2:99:ff:ac:c2:3f:ff:17:b7:df:ab:c1:9c:
         a2:04:1d:47:f4:55:54:24:05:be:af:7f:07:9c:a2:29:e3:d2:
         30:a8:7d:e0:7b:bd:54:2e:60:1d:4c:ea:23:4a:30:3e:bd:1a:
         6a:34:07:c1:86:47:29:de:a3:83:ef:6d:fd:fc:43:f3:67:c3:
         c9:00:4d:6f:3b:05:b3:87:3a:23:cb:8f:7f:33:31:35:ad:bb:
         a6:82:37:9f:28:d5:1e:2f:42:11:bd:73:1c:c9:38:5e:6e:85:
         fb:99:8b:95:a8:da:db:78:80:aa:53:96:64:92:aa:65:6f:38:
         5a:91:33:4b:8b:b1:96:18:3f:12:e9:ec:e0:b7:8b:51:3d:09:
         8a:6e:af:81:63:64:5f:9b:53:ac:7b:0f:f2:37:38:76:c2:1d:
         fc:99:d1:cd:f6:10:7f:20:1c:26:49:92:3e:b7:f1:af:6a:d1:
         a7:b5:ee:da:8c:6f:28:8b:1c:a4:8d:cd:c1:27:82:c8:55:53:
         c7:e7:b0:35:71:f6:3e:df:b6:37:2b:39:0b:75:7d:02:36:94:
         72:b6:95:c6:ad:17:59:2b:04:42:02:1b:b9:dc:28:8c:e7:b8:
         88:09:9f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:50:50 2026 by rpki-client