Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/1169361899C811F18BE645E93A11F970.roa
File:                     1169361899C811F18BE645E93A11F970.roa (raw, json)
Hash identifier:          EyxlYQ+yrprOKsuQkWdYXDcZ6/ylberdOPhfo2Bnlqg=
Subject key identifier:   42:4C:1C:7E:2D:57:D3:63:C5:94:21:34:2E:58:3D:10:3F:44:05:00
Certificate issuer:       /CN=A916E44B/serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03
Certificate serial:       01B1
Authority key identifier: 81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/1169361899C811F18BE645E93A11F970.roa
Signing time:             Fri 21 Aug 2026 04:56:52 +0000
ROA not before:           Fri 21 Aug 2026 04:56:52 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     20473
IP address blocks:        122.252.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl
                          rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E44B, serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03
        Validity
            Not Before: Aug 21 04:56:52 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a87da94-2b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:ec:c4:27:f5:ed:95:df:02:7f:fb:55:e2:
                    54:4b:a4:4f:60:fc:db:f7:19:fb:0f:f3:75:8c:91:
                    1f:4b:48:7a:e9:b9:a3:ae:63:a9:c0:bc:4b:66:0c:
                    81:08:dd:98:a8:cd:08:8d:90:af:23:0f:c0:d5:f5:
                    3c:7e:8c:1a:8b:16:b5:9f:4d:d6:23:9d:c7:58:17:
                    9c:8b:61:40:f7:6d:17:b1:c2:f8:53:a5:9c:60:72:
                    94:9f:37:d3:50:58:54:d9:e2:60:2b:49:d9:85:aa:
                    76:fd:0a:38:23:b9:0b:9e:dd:44:46:43:56:c2:54:
                    7e:30:37:cd:29:71:5e:6f:2a:3b:e7:57:e0:8a:b0:
                    60:65:3a:3a:ef:f0:c7:55:81:cd:6c:9e:3b:51:91:
                    77:11:ff:29:22:3b:ce:1d:01:aa:5d:9a:91:54:f0:
                    e4:b5:a1:77:e7:86:bc:8c:6a:45:bf:3a:51:05:3f:
                    f7:f4:ca:92:b9:0b:22:9f:54:c2:92:d6:b9:80:4d:
                    4e:7b:dd:1a:0a:c9:a4:20:c8:7d:0e:4e:97:6e:53:
                    82:7d:e8:25:08:0f:af:e3:d4:52:26:c9:b4:c3:dd:
                    0f:26:4d:3b:45:a8:f2:12:3e:8c:b0:2d:4b:32:b2:
                    6f:c9:9c:0b:2e:15:6c:7f:b2:ac:7e:76:f9:6c:de:
                    dd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4C:1C:7E:2D:57:D3:63:C5:94:21:34:2E:58:3D:10:3F:44:05:00
            X509v3 Authority Key Identifier:
                keyid:81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/1169361899C811F18BE645E93A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.252.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:77:c8:9c:59:bf:95:d6:82:f9:83:ed:51:53:6b:74:17:f7:
         9a:33:9f:6b:1c:01:40:41:74:52:75:48:55:53:51:af:f3:ea:
         da:20:b8:08:19:ed:09:3e:10:8c:18:d6:c3:d7:9f:aa:ab:2f:
         40:b8:18:97:98:42:5e:1b:2d:31:87:b1:5d:97:7d:96:d7:55:
         d7:a9:3f:d9:83:84:d8:f0:69:50:d8:4b:90:64:c8:17:a6:ae:
         4b:ee:14:5b:42:25:bb:d6:fe:da:1d:52:b2:da:f5:a0:6f:49:
         0d:9d:ba:06:86:f5:d8:0a:80:e2:67:44:91:8c:c8:72:89:67:
         5c:25:70:a6:e1:3c:22:6e:3b:9c:37:6e:48:bb:2c:cc:6c:dc:
         be:1f:34:7c:c5:08:11:99:b3:02:03:48:84:92:24:45:7a:57:
         0e:f1:53:9b:7a:f2:8f:00:e0:5c:a7:9f:c7:fd:ce:91:57:5d:
         81:c3:8f:71:88:40:c5:4c:f2:6f:17:fd:7b:12:8a:e1:09:c4:
         cf:a7:26:9e:6f:58:13:bd:85:16:c8:94:8e:b2:6e:65:2a:1b:
         1a:28:95:ee:7d:6c:b9:9c:80:b2:ff:2c:df:8b:5f:7d:33:72:
         ec:75:0b:7e:2b:33:76:46:23:59:05:74:9f:a7:bb:a4:a5:31:
         55:46:71:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:19:10 2026 by rpki-client