Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/D734C78E960511F1BEC32C725911F970.roa
File:                     D734C78E960511F1BEC32C725911F970.roa (raw, json)
Hash identifier:          fnk0wbqiXuJRxkyLavqlisJqxLT77Z7etsUUv1BsVLw=
Subject key identifier:   86:6A:D2:F3:4A:6A:66:12:F5:53:41:CB:66:09:06:83:4A:61:EB:78
Certificate issuer:       /CN=A918D584/serialNumber=5F215F14BF066EE008E4A766FAE9D9115324BE50
Certificate serial:       10
Authority key identifier: 5F:21:5F:14:BF:06:6E:E0:08:E4:A7:66:FA:E9:D9:11:53:24:BE:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XyFfFL8GbuAI5Kdm-unZEVMkvlA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/D734C78E960511F1BEC32C725911F970.roa
Signing time:             Thu 27 Aug 2026 08:59:25 +0000
ROA not before:           Thu 27 Aug 2026 08:59:25 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     139465
IP address blocks:        203.8.22.0/24 maxlen: 24
                          203.32.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/XyFfFL8GbuAI5Kdm-unZEVMkvlA.crl
                          rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/XyFfFL8GbuAI5Kdm-unZEVMkvlA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XyFfFL8GbuAI5Kdm-unZEVMkvlA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:20:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D584, serialNumber=5F215F14BF066EE008E4A766FAE9D9115324BE50
        Validity
            Not Before: Aug 27 08:59:25 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8ffc6d-2548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:77:26:c8:e6:39:d8:3d:e2:0c:79:1d:bf:b2:
                    2a:5f:38:1c:e1:89:b5:70:3c:fd:4d:21:56:f3:01:
                    95:45:28:bd:f1:32:07:38:d1:13:99:1c:3e:60:42:
                    93:a5:8f:ca:6e:01:25:93:15:b2:39:d9:c2:5d:cc:
                    6a:4c:99:01:07:78:59:eb:70:4c:8a:a0:46:70:8a:
                    87:2c:3b:fe:17:a6:f2:aa:6e:49:f8:ec:69:45:98:
                    12:9f:98:c7:5a:93:7b:30:39:db:b3:f4:3a:a1:59:
                    77:72:5f:3d:5f:cf:d6:48:a1:66:27:94:03:7a:4a:
                    35:97:15:47:8a:7d:bc:66:3a:f7:98:d3:00:c6:99:
                    fb:54:60:a7:12:53:e1:04:fd:94:83:80:06:96:0f:
                    c4:ea:c6:50:9d:d0:40:7c:49:fd:74:13:8f:fb:48:
                    96:cf:a4:93:7f:b1:06:fc:6b:79:cf:70:ff:2e:38:
                    51:d8:20:8f:37:34:05:1a:49:e5:7d:55:48:90:05:
                    cd:0d:4b:a5:c3:6c:fe:be:71:4b:a2:d8:e2:ee:fb:
                    07:7c:0d:78:3d:06:50:39:2e:78:94:90:d9:16:c3:
                    fa:c5:9b:3e:79:39:85:f4:27:c0:d1:4c:b8:01:d2:
                    7f:ce:a4:6e:80:2d:91:da:36:b3:04:2a:5c:c2:ab:
                    7d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6A:D2:F3:4A:6A:66:12:F5:53:41:CB:66:09:06:83:4A:61:EB:78
            X509v3 Authority Key Identifier:
                keyid:5F:21:5F:14:BF:06:6E:E0:08:E4:A7:66:FA:E9:D9:11:53:24:BE:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/XyFfFL8GbuAI5Kdm-unZEVMkvlA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XyFfFL8GbuAI5Kdm-unZEVMkvlA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D584/31B2AC6695EE11F19F6446D25111F970/D734C78E960511F1BEC32C725911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.8.22.0/24
                  203.32.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:78:9f:ae:01:93:17:27:7f:d5:dc:0e:57:3b:bc:72:36:ef:
         44:14:25:69:a8:04:ac:f1:cb:28:b1:2f:f9:5c:6e:0a:7c:e9:
         3f:5d:e3:e7:61:c9:7d:f0:b5:f2:f2:e9:70:f2:f9:e4:49:8d:
         11:4d:5c:29:c5:11:9f:4c:6c:c1:b3:c6:69:75:05:f2:9a:ff:
         68:06:35:d3:e9:ac:bf:bc:77:8f:9c:e8:52:1f:8c:91:f3:14:
         f2:78:37:94:c2:6e:06:b2:5c:59:bf:0a:b0:25:d4:cd:d1:62:
         6b:31:44:bc:e4:56:cf:6d:d9:7d:57:bc:5f:5f:6e:17:2b:e7:
         7c:64:a3:00:78:0f:01:cf:13:ac:25:39:ea:e8:89:21:f7:8b:
         0f:5b:28:77:93:84:6e:ad:ca:56:0f:a9:32:86:9c:4e:f2:b8:
         7b:bb:28:25:f4:91:14:a1:9a:d1:53:fd:3f:a5:1a:32:56:62:
         65:63:a5:05:66:47:e1:98:84:76:29:5c:f6:2e:d8:ab:e4:a9:
         d0:b0:4a:22:f2:a8:b3:cf:cd:8e:21:f5:f2:7d:e7:8d:97:31:
         78:5d:f6:c9:f6:bd:08:26:39:75:1c:0b:06:65:ff:c4:1b:f0:
         a5:f7:f0:60:7e:60:79:f7:e1:6b:67:fd:48:84:c8:6e:44:6d:
         d0:7b:cd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:42:19 2026 by rpki-client