Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/D2677928DD9811EDB2BBBA09C4F9AE02.roa
File:                     D2677928DD9811EDB2BBBA09C4F9AE02.roa (raw, json)
Hash identifier:          oTWb+bgInuA40lVE9MU0fw0Ps1nvcZEIkiY5rAEAf1M=
Subject key identifier:   DE:9E:F6:0B:D7:6D:9D:07:91:5C:BD:6C:DD:54:83:84:60:56:E2:8E
Certificate issuer:       /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Certificate serial:       0266
Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/D2677928DD9811EDB2BBBA09C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 02:34:49 +0000
ROA not before:           Fri 05 Jun 2026 02:34:49 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        116.197.148.0/24 maxlen: 24
                          116.197.150.0/24 maxlen: 24
                          116.197.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
                          rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913664F, serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
        Validity
            Not Before: Jun  5 02:34:49 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2235c9-bdac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:67:79:1e:5c:d1:72:0e:55:51:23:b4:4a:80:
                    c1:1f:14:c1:f6:e0:06:49:a1:7e:52:40:f8:80:50:
                    3a:c6:52:3d:83:f6:75:77:fb:ff:b2:84:72:13:56:
                    f7:61:f2:3f:56:5f:5c:0e:b9:c4:13:f3:b8:83:6c:
                    1d:85:12:fc:ad:ac:f6:6c:ec:c8:12:b7:5b:a0:8e:
                    4b:84:61:51:57:9b:9f:ec:22:ee:55:b5:f0:56:c5:
                    56:2f:c1:48:1f:4c:5b:eb:08:ef:2f:61:9e:fd:89:
                    29:21:86:d6:b7:fd:25:01:f3:8f:a6:c0:9e:85:58:
                    88:a2:05:61:d5:7d:7d:4a:87:f4:b3:ae:1b:44:2f:
                    ac:4c:e2:0d:b2:3c:9a:7e:47:fe:07:e1:25:9c:e4:
                    f4:08:61:77:b5:99:61:ab:c5:00:d1:7f:af:5d:d1:
                    2d:3a:89:2b:4f:05:cd:c4:ee:15:4f:b1:9a:42:15:
                    ca:1f:cf:f2:a4:25:46:2a:ce:5b:3d:6b:76:af:ce:
                    cd:93:98:bf:32:0a:3d:9c:16:ec:0a:07:9d:39:a0:
                    85:c7:a9:ca:27:04:d6:0e:9b:ab:68:98:ce:86:28:
                    e8:6a:0f:fd:85:df:f9:a2:9e:78:76:31:be:ed:13:
                    2a:7d:c4:95:11:e8:d8:b4:75:d6:20:d7:66:f2:21:
                    62:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9E:F6:0B:D7:6D:9D:07:91:5C:BD:6C:DD:54:83:84:60:56:E2:8E
            X509v3 Authority Key Identifier:
                keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/D2677928DD9811EDB2BBBA09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.148.0/24
                  116.197.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:ca:4d:62:7d:ed:4d:f2:2e:22:6f:36:9e:cd:4a:c6:60:cc:
         75:81:0c:e6:9a:a4:d4:b4:4d:ee:47:26:d8:fe:65:e3:33:60:
         98:c4:f3:2a:df:9a:95:3a:2f:43:61:b4:6b:2b:3b:f8:be:b3:
         14:b4:e4:39:21:37:b1:65:c0:c1:a8:87:46:06:57:24:72:ec:
         e8:6c:e2:81:7f:f6:8c:99:69:5d:7c:16:db:6b:9c:d0:86:f3:
         5e:b6:bd:b1:6a:e7:9c:2c:dc:1a:7b:0b:8b:a1:7f:8d:02:37:
         bb:f8:71:57:56:56:97:07:30:9d:28:c4:e9:ef:fb:a7:b2:2a:
         bc:6d:72:94:55:55:c8:e7:78:57:51:e4:15:c9:e4:9a:39:25:
         66:ba:a3:73:c6:2f:7f:92:bb:bf:5f:03:de:f4:a0:ac:70:3c:
         60:88:53:3c:93:78:8f:ee:3f:54:ce:3b:1b:6c:a5:72:e4:f4:
         a8:b8:94:0c:be:73:0e:aa:76:1a:fe:f6:6b:dc:db:bc:a3:58:
         f3:23:9c:9c:ea:7f:6e:5f:ae:60:c6:8c:5f:90:41:c6:ae:c0:
         db:52:c4:c5:56:79:de:f5:73:b4:44:a1:53:3d:a9:bd:4d:f0:
         4b:9f:a5:6d:5d:d9:63:0a:02:32:df:f7:e7:d9:91:06:41:94:
         6c:73:a0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:45:31 2026 by rpki-client