Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/6C510F98B51C11EAA1649251C4F9AE02.roa
File:                     6C510F98B51C11EAA1649251C4F9AE02.roa (raw, json)
Hash identifier:          e/qi4bELFxzV0hQRgGztuo34DkegHR4+8JK6TZ4mduI=
Subject key identifier:   8B:A1:5C:37:42:F2:35:37:6D:29:34:5A:3B:31:B1:29:2D:A3:9B:4B
Certificate issuer:       /CN=A912B600/serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58
Certificate serial:       1269
Authority key identifier: 47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/6C510F98B51C11EAA1649251C4F9AE02.roa
Signing time:             Mon 24 Aug 2026 15:16:41 +0000
ROA not before:           Mon 24 Aug 2026 15:16:41 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     38466
IP address blocks:        188.214.64.0/20 maxlen: 20
                          188.214.64.0/24 maxlen: 24
                          188.214.65.0/24 maxlen: 24
                          188.214.66.0/24 maxlen: 24
                          188.214.67.0/24 maxlen: 24
                          188.214.68.0/24 maxlen: 24
                          188.214.69.0/24 maxlen: 24
                          188.214.70.0/24 maxlen: 24
                          188.214.71.0/24 maxlen: 24
                          188.214.72.0/24 maxlen: 24
                          188.214.73.0/24 maxlen: 24
                          188.214.74.0/24 maxlen: 24
                          188.214.75.0/24 maxlen: 24
                          188.214.76.0/24 maxlen: 24
                          188.214.77.0/24 maxlen: 24
                          188.214.78.0/24 maxlen: 24
                          188.214.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl
                          rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4713 (0x1269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B600, serialNumber=477E22E1BD3AD5204E3ADC2DECD6D2A194ACFA58
        Validity
            Not Before: Aug 24 15:16:41 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a8c6059-1115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2c:f5:f8:f8:48:88:5c:a0:4f:1a:57:7c:7a:
                    01:1d:16:0e:ea:0b:cf:3d:d3:57:ba:74:c4:d1:4c:
                    78:37:43:61:ac:39:1b:ed:f8:6c:34:20:f4:20:eb:
                    4c:80:48:c6:7e:4c:ec:b9:1f:fd:1c:e3:ef:77:87:
                    36:b8:b5:d4:bd:1f:d7:8f:7b:30:d7:e7:5d:7e:d2:
                    83:07:f8:1b:4e:5a:d4:15:8c:4f:8f:1f:ac:78:aa:
                    eb:58:26:b7:5e:29:6c:08:46:87:fe:ce:44:8a:22:
                    f8:f0:b6:a5:1d:a0:7c:3b:49:1a:25:dc:00:5f:a1:
                    2a:93:7c:35:94:e5:e2:85:2a:1e:f4:4b:90:21:70:
                    80:96:e0:c1:36:3c:fe:f0:f2:c1:ef:e7:35:93:f8:
                    94:9a:aa:d5:30:f7:c7:d2:5e:4a:b3:3a:06:65:a6:
                    22:62:87:77:50:fe:98:1d:0e:b9:e4:1b:8b:5a:1d:
                    c4:21:86:bb:c6:97:5d:e0:c3:bb:9b:e4:72:85:81:
                    71:19:c9:ff:c8:96:d3:fe:25:7f:4b:80:3a:67:d7:
                    03:a0:b1:84:1d:20:ba:9e:1a:2b:26:a2:c9:d6:00:
                    80:21:56:6a:bb:0d:ef:8c:0d:4e:a5:da:f2:74:6c:
                    a2:46:f1:59:3a:cd:ce:1e:88:b7:61:68:64:cd:ca:
                    fe:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A1:5C:37:42:F2:35:37:6D:29:34:5A:3B:31:B1:29:2D:A3:9B:4B
            X509v3 Authority Key Identifier:
                keyid:47:7E:22:E1:BD:3A:D5:20:4E:3A:DC:2D:EC:D6:D2:A1:94:AC:FA:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/R34i4b061SBOOtwt7NbSoZSs-lg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/R34i4b061SBOOtwt7NbSoZSs-lg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/3B06F306043511E99E09CC63C4F9AE02/6C510F98B51C11EAA1649251C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.214.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:ec:d0:e1:b7:63:65:e0:b0:38:b0:eb:3c:07:25:5b:ba:58:
         29:84:98:6f:9a:1a:5c:29:88:c7:f8:30:b3:00:21:5f:80:c3:
         4a:ae:a8:e2:7d:83:b9:fb:6a:ca:28:0c:22:06:ba:f2:9f:38:
         cf:33:59:b8:37:d9:76:be:7f:ee:ad:bd:55:9e:75:61:c7:fe:
         b0:c2:75:d4:e0:21:de:97:2f:2f:b5:8a:c1:f1:3d:b5:85:52:
         c6:13:06:c8:38:65:35:14:d0:c2:0c:b2:c1:20:d7:84:f8:13:
         68:0a:25:b6:e2:b0:f7:7c:33:15:32:2c:f4:d7:71:cf:44:45:
         d4:5d:20:5c:b8:84:ee:ef:78:17:08:bd:c2:7b:4f:38:3c:83:
         16:45:94:09:b5:67:09:e3:f9:18:66:83:60:76:9a:e4:a7:f9:
         21:c7:da:e2:1d:c7:63:c6:12:82:98:21:99:d9:db:b9:c8:02:
         de:16:76:47:39:e6:c3:55:3a:71:fe:1d:dc:a7:ac:0d:6a:c0:
         3d:72:a8:fd:8d:97:25:22:cb:d5:18:97:e6:6e:bc:65:06:bb:
         de:a2:90:24:a7:39:f4:f2:b4:db:42:c4:24:de:3e:15:84:0a:
         df:73:30:7e:dc:ec:c2:60:8c:b4:0f:7a:3d:33:58:00:4b:85:
         b3:7b:29:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:09:08 2026 by rpki-client