Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/0E555FB49B8611F1BB445B204511F970.roa
File:                     0E555FB49B8611F1BB445B204511F970.roa (raw, json)
Hash identifier:          UQIF9rkndUbPojsEq71UOErz4MjHMjgUck8cfLiZidA=
Subject key identifier:   B9:8C:09:65:2B:13:20:F2:61:B1:F2:2C:BB:78:7E:AC:1F:37:66:AD
Certificate issuer:       /CN=A912FAFC/serialNumber=7E3FA4F7A007F42DDA0F5F5693D76194CE362CAC
Certificate serial:       04
Authority key identifier: 7E:3F:A4:F7:A0:07:F4:2D:DA:0F:5F:56:93:D7:61:94:CE:36:2C:AC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fj-k96AH9C3aD19Wk9dhlM42LKw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/0E555FB49B8611F1BB445B204511F970.roa
Signing time:             Wed 19 Aug 2026 04:25:50 +0000
ROA not before:           Wed 19 Aug 2026 04:25:50 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     142225
IP address blocks:        192.170.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/fj-k96AH9C3aD19Wk9dhlM42LKw.crl
                          rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/fj-k96AH9C3aD19Wk9dhlM42LKw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fj-k96AH9C3aD19Wk9dhlM42LKw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 04:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FAFC, serialNumber=7E3FA4F7A007F42DDA0F5F5693D76194CE362CAC
        Validity
            Not Before: Aug 19 04:25:50 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a85304e-5d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:00:07:dd:3c:0b:94:f9:1e:ae:4f:93:28:ca:
                    09:bc:9c:4b:35:93:51:a3:03:c2:7b:c6:c2:24:5d:
                    21:76:f6:b8:4c:49:27:4f:29:5f:a0:92:eb:74:50:
                    d7:64:54:7f:d9:c6:55:c9:83:a8:55:d1:cd:b3:4b:
                    8e:c6:a8:5b:80:fd:16:ee:e2:50:a8:56:5f:1b:d0:
                    ce:81:dd:e6:1a:7f:8e:fb:29:3a:f7:ba:6c:ef:b9:
                    c0:dd:dc:64:6b:90:a7:66:31:49:47:7c:47:56:ca:
                    ee:13:fb:67:d0:e6:d1:1c:15:b2:25:62:25:bc:35:
                    1b:8a:4a:12:6c:12:8d:4b:bc:ba:60:bc:57:62:7a:
                    96:c3:46:7d:5f:0c:7f:52:eb:dd:78:49:44:83:12:
                    bb:8c:15:05:68:8e:28:87:f5:c4:e5:29:dd:54:61:
                    30:10:c5:73:bd:cc:d1:25:4f:6e:73:1c:3a:fc:2e:
                    de:4d:34:eb:b3:cd:1d:32:f3:d6:7b:b6:19:6e:2a:
                    b0:87:32:99:56:85:d8:34:c8:c1:12:bf:fc:d5:94:
                    58:e9:a7:6c:37:ab:d3:f3:bc:0a:dd:72:b9:7f:e7:
                    76:90:a6:d1:3b:02:f7:f9:dd:22:98:f2:82:f7:eb:
                    a9:66:03:ad:f3:58:29:b1:2b:a2:d7:de:c6:60:21:
                    eb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8C:09:65:2B:13:20:F2:61:B1:F2:2C:BB:78:7E:AC:1F:37:66:AD
            X509v3 Authority Key Identifier:
                keyid:7E:3F:A4:F7:A0:07:F4:2D:DA:0F:5F:56:93:D7:61:94:CE:36:2C:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/fj-k96AH9C3aD19Wk9dhlM42LKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fj-k96AH9C3aD19Wk9dhlM42LKw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAFC/D3AAF78A9B8411F1B93DFD584411F970/0E555FB49B8611F1BB445B204511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.170.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:84:75:c6:90:78:16:e3:c1:8b:f2:fa:37:21:89:57:ce:41:
         eb:d5:cf:ea:91:6e:f3:d7:db:62:0e:5b:44:b7:b2:92:74:4d:
         5c:9f:8c:df:76:4b:4d:49:6e:f7:44:4a:16:f2:93:d3:2e:03:
         ae:a4:be:c9:97:df:73:73:ba:8b:c1:ef:ed:ba:4b:a0:84:0b:
         75:9f:2a:bb:04:7f:e4:73:91:2c:70:44:33:16:c9:18:62:c7:
         b8:eb:5c:c0:8a:d4:75:f7:32:8f:e3:b7:e3:83:22:9a:17:75:
         45:5f:ac:0c:0c:88:e9:2f:e2:58:67:70:f9:f6:c7:80:3c:8e:
         8d:eb:3e:b8:29:10:5f:df:32:4e:8e:8a:e9:9a:e9:5e:e1:f9:
         6e:48:31:d2:98:0e:d0:99:22:dc:a9:49:68:4d:41:34:a7:c0:
         29:6d:ca:0a:13:c8:73:13:a1:63:cc:57:49:cd:fd:59:41:ac:
         08:2d:99:41:ee:92:95:aa:f0:fd:94:dd:3c:43:fa:bc:dd:b0:
         b7:16:e2:e1:25:9f:71:89:fc:e2:ae:26:70:5f:cd:f6:f1:e9:
         c2:d1:cd:47:f0:34:17:b5:47:88:1a:ce:0c:1f:02:53:0d:66:
         97:93:af:2b:e5:7f:86:e8:46:ab:3d:0b:59:8b:cc:ba:93:0e:
         25:e3:d7:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:11:41 2026 by rpki-client