Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/10CDE53E2C4111E98AA5057DC4F9AE02.roa
File:                     10CDE53E2C4111E98AA5057DC4F9AE02.roa (raw, json)
Hash identifier:          OM7OcceI0e2vqG4zWvyShC73qXFWKrFj/+xDvI8blro=
Subject key identifier:   D6:4E:AB:1A:F3:AD:62:84:C1:9B:0A:0F:55:94:46:94:5A:55:EB:5F
Certificate issuer:       /CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603
Certificate serial:       1194
Authority key identifier: 4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/10CDE53E2C4111E98AA5057DC4F9AE02.roa
Signing time:             Mon 10 Aug 2026 17:33:33 +0000
ROA not before:           Mon 10 Aug 2026 17:33:33 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     137989
IP address blocks:        87.247.160.0/21 maxlen: 22
                          87.247.160.0/24 maxlen: 24
                          87.247.161.0/24 maxlen: 24
                          87.247.162.0/24 maxlen: 24
                          87.247.163.0/24 maxlen: 24
                          87.247.164.0/24 maxlen: 24
                          87.247.165.0/24 maxlen: 24
                          87.247.166.0/24 maxlen: 24
                          87.247.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl
                          rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4500 (0x1194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913344F, serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603
        Validity
            Not Before: Aug 10 17:33:33 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7a0b6d-0efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7e:0b:ef:75:75:07:cd:a9:6b:e2:4d:6b:59:
                    8b:48:2b:ac:1a:76:e4:65:35:8d:5d:2a:20:85:44:
                    b0:63:f6:56:8e:f5:ea:ce:d2:76:9c:21:a2:49:67:
                    6e:94:4c:55:e1:02:60:ab:40:c8:07:d6:9d:56:44:
                    a2:7b:06:ec:80:a7:b8:7b:6a:1c:f5:bd:9e:c7:25:
                    7b:cb:83:23:5a:26:09:84:4e:1a:7d:be:e7:e7:42:
                    cb:8b:a5:fe:59:43:45:69:00:d1:f4:d7:cf:24:c6:
                    60:27:f6:7b:7e:8d:49:dd:8d:bc:fb:63:de:d2:25:
                    88:a1:ba:71:22:40:c5:a2:ad:b5:24:d8:16:6a:7f:
                    bd:d3:bc:e4:60:17:ac:c4:10:3a:8f:68:31:c1:06:
                    5b:88:96:6a:09:6f:9a:11:c9:52:88:ef:94:08:87:
                    36:03:a8:22:34:e9:60:61:af:c5:69:d4:ac:38:10:
                    22:38:40:ea:d8:a7:76:b6:e9:1f:1f:f6:f1:f5:f8:
                    16:a5:49:c7:4b:50:4f:ed:f6:de:5c:e9:da:2b:9b:
                    08:37:9b:f2:ec:9e:af:4f:75:54:f6:fd:93:08:04:
                    17:b4:01:2a:95:ed:a2:82:bc:5c:f5:fb:37:62:c3:
                    3b:d6:57:0e:2c:ed:3d:3a:d5:e0:2c:41:7b:97:a1:
                    37:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4E:AB:1A:F3:AD:62:84:C1:9B:0A:0F:55:94:46:94:5A:55:EB:5F
            X509v3 Authority Key Identifier:
                keyid:4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/10CDE53E2C4111E98AA5057DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.247.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a5:33:0b:d0:f2:96:e3:02:33:be:3b:c7:66:b4:a4:46:f3:1c:
         a9:ee:d0:f7:e2:72:35:9e:90:9b:1b:f4:b7:de:17:a7:a9:71:
         59:71:c0:18:16:33:d8:01:a7:f1:0c:67:27:d6:80:9b:29:80:
         72:5c:d4:94:8c:10:41:bd:f6:81:2a:b1:a0:79:30:f9:f5:6b:
         23:89:34:ac:43:61:14:f3:26:6e:9e:71:dd:8b:12:2a:15:74:
         b2:91:a5:4b:cf:2d:41:c3:f9:6d:cd:4c:f6:95:56:59:a2:47:
         e5:0f:3c:c6:83:48:09:bc:ad:4f:a6:bd:f1:5b:86:3e:9e:32:
         c0:02:f8:c2:8b:9d:c1:f9:70:79:11:0b:ac:f0:fb:4a:d3:04:
         77:4c:44:ba:34:a0:d2:2b:bf:ec:d6:b0:be:c6:bd:53:95:1e:
         dc:8b:18:4c:9b:76:ec:79:8e:3a:56:31:45:71:9f:19:0a:43:
         68:76:71:bc:c2:3a:43:4c:2a:95:c7:fa:44:4d:6f:d3:dc:73:
         45:19:55:3a:81:1f:a6:b7:a7:7e:d9:ea:1d:cd:91:3b:de:95:
         8f:80:71:5d:37:2f:fc:51:6a:86:85:ab:4b:58:a6:c1:2e:1c:
         fd:1b:f9:65:70:74:7e:aa:ea:71:ba:fb:2b:36:48:f0:63:3b:
         f8:3e:db:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:42:27 2026 by rpki-client