Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/A65587CEDC8E11F084B8ABC03D6F56BC.roa
File:                     A65587CEDC8E11F084B8ABC03D6F56BC.roa (raw, json)
Hash identifier:          MwLuq2r0Jxyzv9RKFp+tqRzlh6B3D52BDpe0X8kJ1Jw=
Subject key identifier:   ED:52:65:65:84:30:DD:23:A6:FF:DD:B2:BB:08:7A:4D:E0:7B:0E:1A
Certificate issuer:       /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial:       1457
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/A65587CEDC8E11F084B8ABC03D6F56BC.roa
Signing time:             Thu 10 Sep 2026 17:33:46 +0000
ROA not before:           Thu 10 Sep 2026 17:33:46 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     4632
IP address blocks:        203.50.251.0/24 maxlen: 24
                          203.50.252.0/24 maxlen: 24
                          203.50.253.0/24 maxlen: 24
                          203.50.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5207 (0x1457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
        Validity
            Not Before: Sep 10 17:33:46 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6aa2e9fa-e684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:54:c4:ee:a8:fd:14:1a:fa:6a:b0:24:c3:
                    fa:48:f5:00:40:c6:90:1a:ec:aa:71:5b:99:28:08:
                    73:d8:c0:91:d1:58:ff:b5:72:2b:33:46:12:2f:3c:
                    b7:7f:61:16:64:de:ac:bc:cc:e8:f9:32:1e:69:d9:
                    a4:c2:de:17:21:25:0a:0b:32:cc:1a:2d:ea:5a:c5:
                    cf:f4:fe:b5:3c:05:4e:9e:db:78:ac:f9:63:36:56:
                    0c:e7:d3:94:d0:57:04:98:08:74:96:fd:9f:2d:ac:
                    2b:e8:ee:b2:ea:1b:3e:a0:2b:4e:e7:4c:31:d8:19:
                    d6:8a:52:5b:66:1a:75:ac:fd:20:48:3e:fb:c6:6a:
                    58:14:0b:c0:88:c6:6c:f6:1a:41:f9:dd:e9:4d:27:
                    bd:14:50:57:73:d8:3f:2a:ab:c9:20:cc:ea:f6:f9:
                    e1:35:73:ad:ee:c5:b0:13:a2:b4:7f:bf:d9:32:13:
                    98:9f:63:81:ea:09:d3:d8:1b:97:8b:b8:bc:19:aa:
                    ab:30:72:0c:68:3a:d7:25:fb:4b:ca:21:4a:58:17:
                    18:cc:43:41:34:10:f6:17:e8:5c:a1:74:af:f0:52:
                    2f:83:48:4a:ab:f3:8f:bc:88:b3:71:a5:21:bb:8a:
                    f2:55:78:b9:c5:5b:3c:20:0f:af:96:b4:85:e2:a6:
                    49:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:52:65:65:84:30:DD:23:A6:FF:DD:B2:BB:08:7A:4D:E0:7B:0E:1A
            X509v3 Authority Key Identifier:
                keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/A65587CEDC8E11F084B8ABC03D6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.50.251.0-203.50.254.255

    Signature Algorithm: sha256WithRSAEncryption
         92:42:8c:b3:bf:02:34:5f:49:6e:03:14:43:6b:02:2f:a4:bb:
         71:12:b9:6e:1d:87:80:85:67:df:7a:2c:e7:27:9c:8e:15:80:
         04:d1:19:e6:c5:de:79:0a:c2:d6:0e:8b:80:8e:bf:94:81:b0:
         40:33:80:c5:d9:76:43:34:6f:3f:63:f6:a2:b6:f1:46:c1:eb:
         5c:2c:c9:ae:16:c4:07:84:49:7a:d0:d7:d9:de:cf:0a:5d:b8:
         43:5b:31:8d:e5:d0:07:f4:79:ab:da:f1:91:9c:a2:78:d9:6f:
         57:22:10:ee:a9:f2:f0:19:af:2a:f6:c1:ab:d9:1e:45:3d:90:
         d4:6a:8c:62:de:16:ab:34:df:8e:ed:4f:d5:c8:8b:39:16:9a:
         7c:bb:ab:70:bc:ab:53:61:dc:04:0a:e8:d4:f0:6e:7d:06:f8:
         44:23:73:ef:12:5a:1b:45:4a:9e:76:c8:b5:82:cd:62:e2:18:
         01:3d:72:23:77:95:cb:5c:46:2d:fc:9b:a4:6c:aa:85:66:51:
         46:d2:65:f6:c3:35:d1:da:b8:74:44:74:2d:03:97:dd:ab:96:
         5e:4b:c0:a0:74:57:52:7e:3e:a9:33:65:02:2a:b4:94:d0:b8:
         5a:fa:c9:30:81:ac:fb:f5:89:d3:c4:a3:e2:9b:f3:7d:16:e4:
         f4:70:0f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:53:48 2026 by rpki-client