Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/B350B67E964611EDA10D8777C4F9AE02.roa
File:                     B350B67E964611EDA10D8777C4F9AE02.roa (raw, json)
Hash identifier:          rAwkR3CgIMkhVxrjkO6BBicjMZkAEBzOtpU7NjRngaY=
Subject key identifier:   09:01:C6:AC:FE:81:3B:6D:70:53:62:04:D3:1B:B9:AE:2E:DE:2C:70
Certificate issuer:       /CN=A9161A58/serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
Certificate serial:       09B6
Authority key identifier: B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/B350B67E964611EDA10D8777C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:20:31 +0000
ROA not before:           Sat 31 May 2025 20:26:48 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     140951
IP address blocks:        45.116.8.0/24 maxlen: 24
                          45.116.9.0/24 maxlen: 24
                          45.116.10.0/24 maxlen: 24
                          45.116.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl
                          rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:25:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2486 (0x9b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A58, serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
        Validity
            Not Before: May 31 20:26:48 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a42f0f-03fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:69:ce:17:0d:c1:98:a9:af:59:59:e0:78:
                    17:31:28:de:94:29:31:b3:25:7a:6b:92:3a:0a:29:
                    b0:74:da:4d:5f:c8:ef:4f:b2:47:cb:a5:e7:d4:50:
                    9d:d8:7f:63:49:74:16:47:86:b8:15:bd:d5:32:63:
                    2b:6e:27:f7:c6:02:21:03:84:e1:85:a0:85:e8:03:
                    77:15:91:ad:ef:23:81:57:1f:00:5a:af:40:10:a8:
                    9c:38:5f:30:fd:1f:b3:a3:4e:6f:e5:25:55:e5:be:
                    97:7d:fd:75:3e:77:06:f3:f2:b3:6e:c8:f1:be:46:
                    5f:2e:d6:a1:5b:5b:d0:48:bd:f2:7d:e1:12:c7:e4:
                    ed:e8:ba:8f:77:2d:04:a9:9f:51:4e:04:a0:34:f6:
                    3b:af:c5:df:dd:c4:44:66:4c:dc:5f:35:1d:59:e4:
                    7e:28:0b:b7:1d:02:43:2e:b9:48:47:67:7f:39:d0:
                    aa:a1:62:0d:f0:fa:cf:df:6c:f6:ab:7d:b0:80:15:
                    59:ee:8d:04:ac:d1:46:e5:d6:2e:fa:d5:41:06:1a:
                    52:06:40:1f:1a:3d:83:b9:8f:92:79:a0:99:03:06:
                    ea:a0:cf:29:92:76:6c:18:32:eb:37:1d:a3:c3:71:
                    51:ea:23:f6:59:99:3f:05:e5:00:42:2d:15:d8:7f:
                    69:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:01:C6:AC:FE:81:3B:6D:70:53:62:04:D3:1B:B9:AE:2E:DE:2C:70
            X509v3 Authority Key Identifier:
                keyid:B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/B350B67E964611EDA10D8777C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:04:dc:10:84:a6:53:f8:3b:8a:d7:2e:f7:c7:8d:e4:7e:4a:
         7e:bc:f7:c8:f9:95:a5:c4:90:e4:dd:bd:d8:19:fe:6a:a4:06:
         5a:04:cb:69:a8:6e:99:b2:b5:1c:75:3c:70:98:90:4f:bd:f6:
         50:ee:fc:11:7f:43:45:55:11:2d:6f:ff:a0:76:f8:7d:0f:df:
         ef:b1:a9:78:5e:c8:b8:cd:36:1c:65:aa:c8:5a:09:9c:45:4d:
         95:97:12:bb:1e:fc:d7:1b:15:b5:71:63:ef:f2:fd:47:a4:dd:
         24:b6:c4:22:fc:50:79:ad:69:8a:f1:2f:c7:32:c6:9d:04:85:
         88:d8:e1:f0:22:a0:28:e7:99:05:d0:0b:42:1e:a4:0f:cc:d6:
         c5:b7:f5:e0:5c:14:af:dd:10:75:97:d8:1a:bb:48:b2:f2:b9:
         03:d4:5e:37:d6:9c:3f:9e:50:f2:54:5c:a7:a3:10:61:9d:53:
         78:44:bc:72:83:7d:ce:fd:d6:51:4e:8e:74:56:6a:1c:52:9f:
         36:10:36:af:ee:f2:c0:f7:06:b2:47:f3:e8:52:85:de:36:c4:
         bd:17:83:dd:de:56:f8:cc:68:2d:cd:ee:3d:55:95:ca:b5:4a:
         1c:f4:4c:a9:60:42:7c:db:b9:1b:23:33:cf:66:98:b0:b6:e4:
         17:93:8c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:15:03 2026 by rpki-client