Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/DD487AEEB18511F196D69C436811F970.roa
File:                     DD487AEEB18511F196D69C436811F970.roa (raw, json)
Hash identifier:          LT659VwSHws1vID//wClrfAYNSYfrtYFSfCQUdmAMPA=
Subject key identifier:   3E:AE:70:58:4C:C2:72:53:21:30:8F:3F:14:F0:4B:FF:A3:AC:82:8D
Certificate issuer:       /CN=A913387C/serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67
Certificate serial:       3588
Authority key identifier: BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/DD487AEEB18511F196D69C436811F970.roa
Signing time:             Wed 16 Sep 2026 04:19:53 +0000
ROA not before:           Wed 16 Sep 2026 04:19:53 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     55348
IP address blocks:        210.23.0.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl
                          rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 14:32:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13704 (0x3588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913387C, serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67
        Validity
            Not Before: Sep 16 04:19:53 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6aaa18e9-e374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b6:6c:00:25:ec:d1:07:c1:02:62:5c:ce:88:
                    55:0b:1c:31:e5:fa:10:5f:fe:d3:9e:f6:b6:d8:70:
                    90:8b:da:40:01:51:88:85:bb:d6:b8:4e:f6:55:0c:
                    dd:d3:64:71:2f:ff:fb:b8:fa:ef:4f:3a:e0:55:63:
                    e6:f6:06:6e:36:15:f7:5d:c8:d1:00:bf:8d:9f:94:
                    25:c9:e6:22:73:51:30:3b:05:65:3a:eb:c6:de:46:
                    72:03:7a:49:2a:8b:b3:dc:f7:ec:bd:62:5c:21:d8:
                    01:27:f3:b3:15:ea:59:c7:ed:79:79:e0:cb:36:8c:
                    b3:90:b3:1f:8a:d6:96:2c:81:b6:4f:81:78:df:85:
                    1b:eb:93:60:fa:85:41:6d:cd:34:d1:84:b2:d8:5f:
                    6d:26:46:53:1d:3e:0a:93:ed:63:cc:dd:4e:ce:6b:
                    b5:1e:74:05:43:2b:c7:a0:e2:cf:24:13:b9:fc:56:
                    f0:13:5f:b1:33:c9:4f:33:6a:ca:2b:98:5e:c4:70:
                    80:f8:9e:17:94:51:5f:45:4a:04:8c:db:de:71:53:
                    a8:30:78:cd:76:94:15:00:b8:5f:56:d2:b1:b2:13:
                    b5:ed:2c:79:7b:c3:af:07:44:23:97:97:7e:34:b7:
                    5c:43:87:1a:6c:98:a7:8b:d7:ac:7b:f0:dd:59:d8:
                    70:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AE:70:58:4C:C2:72:53:21:30:8F:3F:14:F0:4B:FF:A3:AC:82:8D
            X509v3 Authority Key Identifier:
                keyid:BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/DD487AEEB18511F196D69C436811F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.23.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:cf:d8:cb:3c:80:d6:c6:62:34:43:a5:a2:af:c8:64:e6:58:
         88:f5:ea:98:7e:e2:e5:f6:fe:aa:bb:8e:a4:9c:40:f8:a2:c2:
         a3:fb:28:81:38:98:e4:73:5e:85:a7:9d:b8:fe:9e:1b:b0:2a:
         b2:e4:00:9f:08:4c:d7:78:f6:d0:c3:a9:16:91:19:72:99:84:
         3c:28:11:1d:6e:36:b1:2c:d3:3d:76:99:16:8b:df:1b:0d:e8:
         b5:8f:fc:55:c4:c4:e0:e6:00:52:0d:99:a4:70:da:76:1d:c7:
         63:b4:94:97:1e:b0:90:0b:3e:f0:dd:a7:99:c7:f9:ab:86:73:
         d5:6c:88:44:34:74:fd:9e:d5:d8:f5:48:00:f0:3e:c6:b4:2a:
         d2:16:9a:d5:f1:91:b3:ce:a6:a0:9a:83:19:5a:a4:a6:54:ba:
         56:a5:87:61:0f:03:e3:39:37:ee:f3:f9:75:3d:ec:09:d4:ba:
         1a:fa:73:6d:da:e1:70:7b:8f:92:5d:ed:a4:7a:c3:4a:96:0d:
         96:a8:13:6a:0e:fa:e8:bd:6c:6d:dc:3f:89:1c:99:2a:c4:09:
         70:52:35:ae:c0:00:d0:4d:fc:82:37:1d:32:c8:9e:5e:93:26:
         ea:c0:b7:92:0e:96:e2:6d:b4:9e:07:4e:63:68:f2:19:59:3f:
         80:2e:7f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:37:00 2026 by rpki-client