Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/C6618F98BD0511EB9BB8C97CC4F9AE02.roa
File:                     C6618F98BD0511EB9BB8C97CC4F9AE02.roa (raw, json)
Hash identifier:          SjD28KoEmm6FZe8EGDlexQbpkNAIGBBVOWojtwIhdnI=
Subject key identifier:   23:86:07:19:3B:ED:42:5F:69:89:AC:B7:1F:3D:CB:65:70:82:AF:77
Certificate issuer:       /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Certificate serial:       13D7
Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/C6618F98BD0511EB9BB8C97CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:00:22 +0000
ROA not before:           Wed 06 Aug 2025 17:26:30 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     4632
IP address blocks:        192.131.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:47:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5079 (0x13d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
        Validity
            Not Before: Aug  6 17:26:30 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a470a6-8952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3d:da:b0:5a:95:ba:2d:8a:c3:1e:be:b4:b4:
                    0b:d7:2c:65:d6:b4:7b:ad:3c:ef:8b:6e:16:92:31:
                    a5:1b:72:b2:0c:b5:56:f8:0e:06:fa:92:7c:b4:3c:
                    5e:aa:b2:e1:77:75:13:1c:5d:c3:2f:d3:20:a6:0c:
                    8b:60:92:b4:16:39:5a:ac:c5:da:0b:15:78:4a:df:
                    de:f8:d3:12:37:f1:c0:53:11:98:50:84:ff:8c:f7:
                    45:83:a2:96:7b:bd:95:ea:20:c1:9a:26:f7:c1:05:
                    68:8c:a2:2a:8e:4b:dc:3c:30:66:d4:ea:32:31:fb:
                    7a:8c:56:af:f3:b8:d3:92:86:9a:4d:79:a8:67:7f:
                    82:a3:6e:66:4e:79:db:b7:39:12:7a:77:2e:da:f2:
                    a4:83:e3:b1:5b:14:86:40:b7:7a:0d:99:b0:82:4d:
                    39:ab:1d:f2:2b:28:cb:f7:29:0d:a1:3a:6c:79:5f:
                    45:75:ef:6a:81:ca:4f:1a:e2:02:63:cd:ff:f4:99:
                    a7:2e:4f:a9:67:09:09:68:b3:85:f4:d9:54:87:db:
                    eb:1d:88:1a:27:4c:9a:5c:54:1f:e0:4d:fd:2f:89:
                    f3:d2:3c:88:37:67:ee:92:2d:b6:d4:8a:e7:82:04:
                    28:ad:99:69:75:9e:fd:9e:02:46:41:ce:4f:74:da:
                    9c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:86:07:19:3B:ED:42:5F:69:89:AC:B7:1F:3D:CB:65:70:82:AF:77
            X509v3 Authority Key Identifier:
                keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/C6618F98BD0511EB9BB8C97CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:ca:15:81:e2:27:28:bc:11:b2:38:bc:28:6f:1c:33:e5:5d:
         ae:1e:64:31:ea:7f:32:a6:d8:20:b5:7f:d8:8e:c5:e2:6a:d4:
         81:a5:7c:5a:77:91:dc:48:90:b8:74:e3:70:f3:ec:3c:a2:6d:
         6d:1b:1f:b5:8d:f9:6d:91:02:f2:34:cd:f5:15:4c:94:68:28:
         4b:b7:68:9a:5e:01:15:5c:76:3c:bf:7f:e3:91:c4:93:80:84:
         b6:7f:64:2c:2d:cc:da:60:14:24:42:59:a7:c7:ed:81:eb:0f:
         07:94:ec:c6:ec:03:84:41:13:15:82:57:26:74:c4:b4:ea:85:
         5e:a9:db:78:2e:9d:d0:e8:a7:99:13:92:2b:cb:43:73:91:e8:
         1e:de:ac:0c:38:dd:84:cd:71:81:65:91:35:a1:2f:08:9e:98:
         b9:13:14:ea:bc:da:1a:4d:1f:e9:36:50:df:bf:b9:9c:19:6f:
         17:63:12:14:24:a0:bc:5a:f5:31:51:91:5c:32:56:49:ae:ff:
         4a:56:58:4a:12:36:f2:3b:2d:eb:95:0c:52:dc:7c:38:e6:b5:
         56:fc:ac:68:43:35:ef:0c:b3:fe:e3:4f:61:20:bc:c3:22:09:
         f5:3b:54:5c:bc:2a:8e:83:fc:53:7b:53:1e:83:08:e5:70:e0:
         eb:79:7a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:25 2026 by rpki-client