Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/C6618F98BD0511EB9BB8C97CC4F9AE02.roa
File:                     C6618F98BD0511EB9BB8C97CC4F9AE02.roa (raw, json)
Hash identifier:          /1n+wRPRHc0s10bMGMSrRr+1YHWKh+6X7XdRPOkEVEs=
Subject key identifier:   65:27:46:E5:91:6A:C0:27:D2:10:30:D8:7A:87:25:AF:EB:2F:3A:03
Certificate issuer:       /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Certificate serial:       1472
Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/C6618F98BD0511EB9BB8C97CC4F9AE02.roa
Signing time:             Thu 10 Sep 2026 17:33:29 +0000
ROA not before:           Thu 10 Sep 2026 17:33:29 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     4632
IP address blocks:        192.131.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 16:56:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5234 (0x1472)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
        Validity
            Not Before: Sep 10 17:33:29 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6aa2e9e9-09c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a0:0e:60:a7:18:0f:14:38:7c:f6:55:56:8a:
                    1c:95:e6:2d:e6:99:1a:93:e9:31:79:b4:56:c8:82:
                    85:be:29:1f:e3:05:02:13:e7:1a:f8:e3:dd:7f:4e:
                    99:37:02:48:7e:67:41:bc:a6:bf:8d:c4:9f:c5:a8:
                    21:2a:49:9d:d1:6b:c0:07:cd:4f:31:c2:13:c6:60:
                    2a:88:c2:7f:73:89:df:b2:8a:5f:8a:83:68:ba:42:
                    5e:00:fa:e2:b3:60:f4:b6:26:70:d4:cf:86:d5:da:
                    33:a4:8d:a4:01:92:77:eb:c2:ae:3c:76:43:60:7b:
                    d8:ad:87:af:df:b1:0f:a3:de:bb:27:39:46:6d:ac:
                    e8:b7:24:8d:66:16:2e:4a:1b:50:38:ab:04:30:6f:
                    da:86:41:e4:c3:b6:c9:ca:57:06:c2:fc:31:f8:10:
                    4e:b1:59:6a:b6:85:3b:81:11:ee:de:ab:bc:17:fe:
                    d2:72:af:29:d4:6e:21:b4:96:19:82:f5:9c:ba:23:
                    79:81:ef:c8:ec:67:3f:1a:df:a8:e1:f7:7f:ac:b9:
                    2f:0f:fb:fe:19:11:9b:9d:2c:07:7b:2f:cd:b9:7c:
                    64:93:39:05:e4:93:13:cd:cc:26:f5:d8:04:54:e0:
                    77:da:33:d2:aa:de:aa:bd:7f:3b:36:ef:0f:63:3c:
                    6e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:27:46:E5:91:6A:C0:27:D2:10:30:D8:7A:87:25:AF:EB:2F:3A:03
            X509v3 Authority Key Identifier:
                keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/C6618F98BD0511EB9BB8C97CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:f9:d0:ff:f3:e6:36:2a:3e:d1:e9:c6:28:c0:19:17:f8:30:
         fe:7d:41:a5:03:5b:e3:d8:ba:b4:b8:3d:13:43:1f:d4:18:ad:
         30:13:54:24:a2:6a:40:dd:2f:fc:69:2a:98:07:b2:98:e6:46:
         21:db:a2:14:b0:bf:a1:9a:85:6f:b3:26:3b:98:b2:06:df:11:
         e0:bc:85:9c:d3:36:63:85:b1:b5:40:4d:94:2a:d3:3d:3f:1e:
         a1:bb:a2:4a:99:e8:6b:c0:70:3f:ea:3a:6f:e2:4d:f5:57:38:
         19:03:44:e9:a3:df:4b:2a:31:e2:f0:ea:51:f0:cb:fb:33:e5:
         e9:6a:50:22:8c:5b:47:3c:d9:b1:2c:2a:24:ed:8e:fc:0c:21:
         d4:b9:ad:fb:1c:38:93:ef:d7:1a:f6:74:e3:58:4c:3e:a6:f8:
         92:e5:d7:9f:c8:50:a7:7a:23:80:43:4c:46:6d:13:71:b7:60:
         f7:ab:13:18:88:d4:d8:27:1e:45:7a:3d:dd:5d:d1:0c:ae:a8:
         7a:8d:50:bb:1c:bc:a4:dd:62:be:4e:0b:8f:0c:b7:35:7a:6c:
         4b:86:06:40:a1:5d:3a:5c:0c:d9:24:be:b3:ac:b4:1e:e2:1d:
         0e:2f:ae:4c:4f:cf:83:52:3a:01:90:a9:56:42:b8:41:e1:b5:
         91:bc:78:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:50:49 2026 by rpki-client