Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/B8B02658C16B11EEA7D01A7DC4F9AE02.roa
File:                     B8B02658C16B11EEA7D01A7DC4F9AE02.roa (raw, json)
Hash identifier:          YcUVmwT606MaFDVm76Uo4zB28jtqdSiKJJzEYqdtE80=
Subject key identifier:   CF:92:8A:79:04:FC:7C:FE:92:01:2B:9E:19:DD:78:FE:35:D6:F2:04
Certificate issuer:       /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Certificate serial:       316A
Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/B8B02658C16B11EEA7D01A7DC4F9AE02.roa
Signing time:             Fri 31 Jul 2026 16:20:18 +0000
ROA not before:           Fri 31 Jul 2026 16:20:18 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     24434
IP address blocks:        202.6.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
                          rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12650 (0x316a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
        Validity
            Not Before: Jul 31 16:20:18 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6ccb42-c71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ad:f5:f1:0f:d8:3c:cf:a3:7e:fb:63:28:c9:
                    ae:cf:50:41:64:28:7c:22:46:2c:3d:b4:8e:08:58:
                    fc:6d:d3:dc:36:41:83:0b:33:58:d8:15:95:6a:a9:
                    b4:d9:58:7a:a6:40:5c:eb:f5:35:77:49:ed:fd:aa:
                    24:3e:53:f7:01:b4:8e:08:05:87:c4:50:43:86:8c:
                    d6:92:e4:8c:d0:b8:c4:a4:49:ee:13:e8:19:5f:be:
                    4a:62:59:8c:31:65:2a:7a:94:7b:ff:6d:69:25:34:
                    f7:9c:7b:f0:d6:32:f7:5c:df:41:c9:d5:e5:5b:88:
                    8e:d6:a8:82:10:50:ad:72:98:62:5f:e8:6a:78:f7:
                    52:fd:2f:f7:2a:9c:c9:e9:cc:30:b8:b0:6b:b7:16:
                    e5:b3:f4:5d:91:4a:8a:c4:f4:84:87:2e:d9:52:e0:
                    af:b0:a0:5c:6c:01:5c:47:13:9d:82:b0:85:b0:08:
                    ba:9e:7a:a6:fd:a7:34:12:53:34:d4:ca:9e:ee:81:
                    2a:f3:3d:ac:b9:dd:9f:24:3f:68:67:77:7c:4b:b9:
                    a3:5f:b2:1b:06:16:3f:55:d6:d4:73:e9:f8:a8:b4:
                    aa:d0:9a:0c:46:ff:dd:5c:c6:e5:65:38:d0:b8:35:
                    64:4b:2a:14:85:6b:75:d1:31:c1:67:b8:45:53:f8:
                    6d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:92:8A:79:04:FC:7C:FE:92:01:2B:9E:19:DD:78:FE:35:D6:F2:04
            X509v3 Authority Key Identifier:
                keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/B8B02658C16B11EEA7D01A7DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:d7:f2:84:3b:0d:90:fd:7c:dc:a1:93:74:1a:a4:df:27:e2:
         8f:4f:5f:de:68:3f:0a:e5:84:97:54:9c:cf:f0:a6:55:c9:cc:
         d2:17:ce:5b:37:7b:6e:03:1c:86:67:67:53:46:48:5f:d2:27:
         af:04:e6:ca:29:8b:b4:02:27:dd:48:d6:6d:c8:78:7c:31:48:
         bb:e6:b7:03:27:c4:9b:7a:8a:48:5a:36:cf:c2:a9:40:ab:9d:
         81:e4:5b:01:87:79:78:e2:63:92:1c:23:e0:ce:d7:6a:ef:6b:
         24:6e:27:cf:41:7e:83:cb:c5:f7:12:82:3d:c5:0b:86:49:f1:
         e4:7a:84:f4:1c:aa:fe:f1:37:f8:a9:84:ee:a0:45:6c:6b:24:
         4a:8e:43:51:7a:e4:90:c0:fe:60:52:fc:31:c6:6f:05:87:9f:
         f9:03:af:5e:be:55:87:8c:91:da:65:aa:1c:62:ee:0e:64:02:
         19:62:15:97:3a:df:d8:c7:1c:94:d6:4a:e6:f8:c7:ff:80:02:
         fb:d4:7f:4b:7b:a9:dc:61:45:3f:11:f9:3b:08:63:23:ea:72:
         a0:9d:00:f5:89:bc:a9:12:7c:2d:10:69:ca:49:a5:99:df:93:
         10:94:cc:38:16:e9:c5:52:6f:7c:82:01:23:4b:2b:a2:c8:02:
         90:df:bf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:37:09 2026 by rpki-client