Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/A76B2A22CCD111F19EE8DE612E66CEF9.roa
File:                     A76B2A22CCD111F19EE8DE612E66CEF9.roa (raw, json)
Hash identifier:          cUUd2KjLGHA+W3KxJnP+QMEumEv7RS6hQc5ZjO69Grw=
Subject key identifier:   1B:6A:DE:52:14:BB:74:89:B6:4F:3C:2B:C3:63:1B:98:DF:09:8E:E6
Certificate issuer:       /CN=A912598D/serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220
Certificate serial:       BB
Authority key identifier: 1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/A76B2A22CCD111F19EE8DE612E66CEF9.roa
Signing time:             Tue 20 Oct 2026 22:00:26 +0000
ROA not before:           Tue 20 Oct 2026 22:00:26 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     9931
IP address blocks:        45.157.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 04:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=1A5B00597C8D7B61FBBEFEC5B944FE6F9C63E220
        Validity
            Not Before: Oct 20 22:00:26 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6ad7e479-7ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:94:5f:47:3b:14:0f:42:b4:96:83:a2:f6:b1:
                    ec:2a:d7:b8:26:f0:da:43:f6:29:bd:0d:a9:23:57:
                    8b:e3:bf:9c:01:81:92:9b:af:d2:b7:b8:ad:cc:d3:
                    2e:31:17:28:5d:eb:22:b1:7b:7d:aa:6e:e2:f9:00:
                    d0:58:47:35:34:48:4c:fc:fe:a6:1e:31:8b:99:79:
                    c3:c0:b4:9b:d5:d1:99:1b:2b:82:ed:b7:7f:6e:2d:
                    66:16:78:29:99:e8:56:bb:00:43:26:75:bc:23:3e:
                    a9:67:92:af:88:4d:5b:47:68:a6:e3:93:c6:9a:9a:
                    94:05:a5:b2:4f:18:28:dd:1a:85:41:fd:2c:d0:64:
                    ac:d6:f5:f0:57:0d:dc:0f:e4:80:52:cf:42:ce:14:
                    8e:4a:fd:ae:ec:ab:9e:7a:a9:d0:b3:6c:a0:54:06:
                    7a:aa:bb:fc:2d:b5:e0:67:2c:aa:7f:d3:ee:bb:80:
                    fa:dd:ab:ec:fb:65:e4:64:df:d6:16:b0:41:aa:79:
                    4f:65:4c:1a:61:a3:63:16:b9:43:a3:7b:63:5d:6d:
                    af:ce:e5:25:96:c2:bc:cf:b4:53:23:c2:4f:e3:73:
                    dd:06:8f:9c:25:72:8d:9e:41:43:72:0a:aa:f0:d7:
                    c8:34:64:61:dd:05:09:f2:ca:e6:06:88:e9:7e:f7:
                    46:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6A:DE:52:14:BB:74:89:B6:4F:3C:2B:C3:63:1B:98:DF:09:8E:E6
            X509v3 Authority Key Identifier:
                keyid:1A:5B:00:59:7C:8D:7B:61:FB:BE:FE:C5:B9:44:FE:6F:9C:63:E2:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/GlsAWXyNe2H7vv7FuUT-b5xj4iA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GlsAWXyNe2H7vv7FuUT-b5xj4iA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/AE883668C8EC11F099D8AB45C4F9AE02/A76B2A22CCD111F19EE8DE612E66CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.157.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:c8:af:02:81:7e:41:0a:7a:b0:15:bb:90:58:e2:b9:bf:63:
         e0:b0:5a:96:86:94:0d:42:fd:66:d7:02:14:3d:bb:2b:48:7e:
         c0:12:8a:cd:fd:e8:f8:01:17:94:94:67:55:b3:8b:63:53:a8:
         af:01:a2:a7:72:87:aa:58:51:e4:03:98:22:33:86:d3:2e:81:
         e1:46:cf:bd:19:7f:44:36:eb:b3:60:7c:d4:32:d5:5c:cd:96:
         13:dd:2a:3a:75:ed:01:a9:ef:ef:31:86:ef:ad:c6:32:b0:97:
         4b:2f:90:d0:44:9f:0a:12:22:6d:25:6d:e4:60:56:ba:36:fd:
         80:e9:1d:0b:16:6b:f4:e7:35:ea:c9:f2:67:b1:39:d6:95:97:
         59:6c:26:26:36:9f:21:41:ef:c4:70:97:28:2e:cf:33:21:9a:
         8f:f3:a9:da:05:a7:1b:c8:e3:f0:7f:38:48:24:5f:09:ba:d9:
         4b:4a:61:26:0b:a2:99:bc:8a:21:8d:c2:d7:7a:f8:29:ea:27:
         d8:89:3c:9d:3c:bd:3c:b0:69:0c:6e:88:0e:2f:67:05:cf:5b:
         ff:e9:ff:4d:d5:06:6a:65:6b:8c:16:7e:11:f5:a6:cf:60:0f:
         64:b5:ba:c4:c7:51:9f:35:73:67:f2:c0:b3:b2:1f:55:8d:8d:
         3f:76:aa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:28 2026 by rpki-client