Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/6E6FFF6A92F911ED8A66E70CC4F9AE02.roa
File:                     6E6FFF6A92F911ED8A66E70CC4F9AE02.roa (raw, json)
Hash identifier:          wBIj83x+5tbUquS7FIlQQAMIzPRLzq+ZJDvfE+mcXhY=
Subject key identifier:   63:C7:4F:D3:D3:0F:39:61:67:30:2D:F2:F4:9A:83:C2:84:AF:1B:C1
Certificate issuer:       /CN=A9161A58/serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
Certificate serial:       09F8
Authority key identifier: B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/6E6FFF6A92F911ED8A66E70CC4F9AE02.roa
Signing time:             Wed 24 Jun 2026 20:24:29 +0000
ROA not before:           Wed 24 Jun 2026 20:24:29 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     41095
IP address blocks:        45.116.8.0/24 maxlen: 24
                          45.116.9.0/24 maxlen: 24
                          45.116.10.0/24 maxlen: 24
                          45.116.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl
                          rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 20:17:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2552 (0x9f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A58, serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
        Validity
            Not Before: Jun 24 20:24:29 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a3c3cfd-0efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:12:27:ec:26:d9:cd:d2:2b:56:d6:d7:b2:cb:
                    52:d3:e4:40:39:cc:02:7e:8c:ad:57:0e:b1:45:94:
                    a6:40:f7:31:cd:e4:30:f7:c9:7f:3a:5f:5f:ce:f0:
                    7e:d9:ee:d4:14:61:19:3c:d1:d5:9f:5f:ba:2b:06:
                    ea:c8:cb:d7:28:10:9e:70:43:3b:6d:b8:ba:d5:bf:
                    8c:4e:f0:e8:f8:91:90:42:50:66:41:b1:0f:42:89:
                    94:ce:60:98:c4:e3:91:cc:81:f4:c4:f2:2a:10:71:
                    cf:2b:c1:b7:70:3a:94:f9:34:3a:41:19:ac:c8:6a:
                    c0:cb:9e:93:50:93:96:2e:5a:49:1b:51:5f:4b:33:
                    63:b4:4f:c7:53:45:4d:86:90:c7:f4:88:8c:a5:41:
                    c9:4a:57:dd:91:6f:37:7e:2e:18:b0:a9:75:d6:75:
                    fd:13:d3:d7:d6:6c:c4:52:78:50:e7:bc:cd:4d:df:
                    8b:9d:ff:38:3b:27:f5:bf:3b:59:c8:48:e1:88:70:
                    8c:3d:67:4a:4a:26:6c:1a:93:24:18:80:a4:7a:73:
                    22:ff:28:c9:cb:36:bd:6e:34:28:c5:35:28:43:5f:
                    2b:11:ae:78:2e:98:48:87:54:36:b4:a4:0f:e2:b9:
                    33:f1:f2:e0:46:42:76:ee:6d:80:b5:59:23:4c:c2:
                    d4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C7:4F:D3:D3:0F:39:61:67:30:2D:F2:F4:9A:83:C2:84:AF:1B:C1
            X509v3 Authority Key Identifier:
                keyid:B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/6E6FFF6A92F911ED8A66E70CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d2:71:2f:04:ec:f7:c0:0f:b5:9d:8d:dc:3e:e2:17:81:99:44:
         60:ca:2a:8f:9f:a6:fe:c4:98:bf:b3:78:83:70:6b:4f:90:aa:
         30:e6:d3:51:b8:3c:93:7a:b5:20:b8:ad:96:01:8d:e6:54:9f:
         31:67:aa:aa:c5:e6:55:8c:45:ef:19:b2:0a:63:91:ad:cb:94:
         35:a7:66:91:7a:a8:21:c9:f3:ba:98:8e:0e:81:f3:23:09:c9:
         1f:90:ed:a6:a4:37:e1:da:52:cc:5b:76:a4:ec:a4:48:07:da:
         3e:51:a7:fd:16:46:b9:d0:2a:d5:d8:6b:fd:ee:b8:0f:1d:49:
         a8:17:d4:95:5f:e8:96:fd:c1:42:50:8c:6f:b8:b5:6b:25:bc:
         c3:85:71:95:c2:4b:53:67:8a:2e:49:ee:9c:2b:dd:fd:23:97:
         a9:98:5c:7a:57:e0:e5:9d:e3:dc:9d:b1:7e:9f:a8:79:48:c0:
         76:23:3e:ea:46:34:90:c5:18:96:35:6d:ba:3b:9e:4e:28:de:
         f3:af:5f:1b:f1:da:34:7f:39:1d:2d:c1:b8:90:ec:f7:90:f3:
         f6:60:a6:ce:16:2e:fb:d5:24:3e:8e:b2:de:19:e9:d2:6d:d6:
         7d:e5:f9:3a:6f:49:56:c0:5a:0e:38:c6:60:ca:d1:3f:05:c2:
         1d:47:25:76
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjFBNTgxMTAvBgNVBAUTKEI0NjY5RDMwRDIxMEU0OTA3Q0QyODg4QkU3NEI4OUE2
REQzQ0I2QzgwHhcNMjYwNjI0MjAyNDI5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTNjM2NmZC0wZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvBIn7CbZzdIrVtbXsstS0+RAOcwCfoytVw6xRZSmQPcxzeQw98l/Ol9fzvB+
2e7UFGEZPNHVn1+6KwbqyMvXKBCecEM7bbi61b+MTvDo+JGQQlBmQbEPQomUzmCY
xOORzIH0xPIqEHHPK8G3cDqU+TQ6QRmsyGrAy56TUJOWLlpJG1FfSzNjtE/HU0VN
hpDH9IiMpUHJSlfdkW83fi4YsKl11nX9E9PX1mzEUnhQ57zNTd+Lnf84Oyf1vztZ
yEjhiHCMPWdKSiZsGpMkGICkenMi/yjJyza9bjQoxTUoQ18rEa54LphIh1Q2tKQP
4rkz8fLgRkJ27m2AtVkjTMLUDwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGPHT9PT
DzlhZzAt8vSag8KErxvBMB8GA1UdIwQYMBaAFLRmnTDSEOSQfNKIi+dLiabdPLbI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUE1OC9CMzg5MzA0RUE3
RUMxMUVBODA0ODU4NjRDNEY5QUUwMi90R2FkTU5JUTVKQjgwb2lMNTB1SnB0MDh0
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RHYWRNTklRNUpCODBvaUw1MHVKcHQwOHRzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjFBNTgvQjM4OTMwNEVBN0VDMTFFQTgwNDg1ODY0QzRGOUFFMDIvNkU2RkZGNkE5
MkY5MTFFRDhBNjZFNzBDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCLXQIMA0GCSqGSIb3DQEBCwUAA4IBAQDScS8E7PfAD7Wdjdw+4heB
mURgyiqPn6b+xJi/s3iDcGtPkKow5tNRuDyTerUguK2WAY3mVJ8xZ6qqxeZVjEXv
GbIKY5Gty5Q1p2aReqghyfO6mI4OgfMjCckfkO2mpDfh2lLMW3ak7KRIB9o+Uaf9
Fka50CrV2Gv97rgPHUmoF9SVX+iW/cFCUIxvuLVrJbzDhXGVwktTZ4ouSe6cK939
I5epmFx6V+DlnePcnbF+n6h5SMB2Iz7qRjSQxRiWNW26O55OKN7zr18b8do0fzkd
LcG4kOz3kPP2YKbOFi771SQ+jrLeGenSbdZ95fk6b0lWwFoOOMZgytE/BcIdRyV2
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:19:27 2026 by rpki-client