Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/8296B130A0DC11EF8963C80AC4F9AE02.roa
File:                     8296B130A0DC11EF8963C80AC4F9AE02.roa (raw, json)
Hash identifier:          VxbdPhawNzftI6XFLwYX+Q3MRwvkDM5RCYw6NH3XRXk=
Subject key identifier:   D4:6A:93:10:81:17:1B:7B:45:A1:B8:9C:40:48:9A:7F:8E:78:B9:A1
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       1444
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/8296B130A0DC11EF8963C80AC4F9AE02.roa
Signing time:             Thu 06 Aug 2026 17:33:46 +0000
ROA not before:           Thu 06 Aug 2026 17:33:46 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     16669
IP address blocks:        203.116.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 17:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5188 (0x1444)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Aug  6 17:33:46 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a74c57a-65f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b9:e4:33:4c:a8:71:e0:7a:79:be:c9:71:8e:
                    38:b3:b5:7b:b7:0e:a5:26:cd:5f:ec:2f:d6:80:21:
                    17:3e:76:ab:dd:94:1a:fe:22:42:4d:94:2f:df:1d:
                    13:21:67:bc:c0:43:79:39:32:d2:b3:29:34:ad:46:
                    3d:60:e0:d3:fe:1f:c6:b9:62:68:60:f8:64:d3:1c:
                    a5:91:2d:63:06:1d:8b:6f:8f:a4:60:62:8c:9c:dc:
                    6b:55:91:e5:ee:16:b3:ca:26:ac:ba:a1:dc:80:93:
                    ad:9d:9b:c0:92:28:92:f9:8f:ae:3d:d2:15:58:46:
                    f0:48:e7:0f:4e:a4:91:18:f9:2c:ac:db:9f:62:45:
                    dd:3d:f3:76:86:56:58:4f:31:63:13:be:76:16:21:
                    63:39:c8:03:30:ae:72:ee:96:bd:20:e8:b3:a7:69:
                    8c:10:00:0f:ed:fa:71:2d:65:7e:b8:8e:eb:92:e6:
                    17:91:f7:ee:b2:29:f7:da:1c:dc:3f:32:19:0a:e9:
                    35:1f:19:83:cb:4a:7f:1d:a9:4e:2d:69:18:ac:34:
                    be:f2:12:9f:11:eb:db:5a:89:20:fc:67:36:a5:d9:
                    64:44:ae:f7:96:7a:6f:a2:1b:40:61:8b:b8:34:7b:
                    00:f5:94:11:85:7f:1f:ff:62:66:64:9a:aa:0a:28:
                    f5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6A:93:10:81:17:1B:7B:45:A1:B8:9C:40:48:9A:7F:8E:78:B9:A1
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/8296B130A0DC11EF8963C80AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.116.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:b6:7e:da:f2:75:a2:2b:8e:d6:55:d7:e5:51:bd:b9:57:19:
         37:b2:31:1f:2a:a1:f3:21:f0:ef:08:13:d3:c2:c8:68:33:b1:
         15:fe:e3:42:13:7d:f0:5e:3d:e5:57:cb:5f:3e:8b:4f:b0:55:
         6a:cf:e7:ab:e1:1a:e7:f3:5f:e2:1f:1c:f0:1b:da:e1:a2:8d:
         00:cf:ce:86:b2:e6:96:80:fc:10:16:39:19:54:33:d2:64:24:
         c6:09:63:d3:4e:83:98:e3:9a:0c:55:5b:2a:82:54:a2:a7:e4:
         23:3f:36:58:bb:b5:69:e1:d9:1f:83:03:a0:e7:f2:e8:38:4e:
         27:65:a0:e6:36:c2:fd:55:0d:4d:ef:8b:09:19:d3:a1:65:f5:
         d2:94:f8:4f:e3:38:f6:e4:71:f0:df:fb:62:56:22:05:0a:73:
         8d:50:b6:db:45:83:80:a5:42:2a:62:db:3a:9f:49:34:9f:fd:
         2b:03:4d:55:cf:fe:be:7a:53:65:a6:90:ea:18:45:55:36:e3:
         cc:a8:c9:2d:76:51:2a:97:63:2f:5c:2f:d6:42:94:74:ca:61:
         e7:9c:54:d3:70:8e:03:5f:c4:ec:fc:4d:86:10:ec:78:bb:ad:
         0d:a0:6b:ff:f5:ec:89:54:38:c4:a0:f7:1e:64:4b:71:02:43:
         bb:d8:c9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:49:17 2026 by rpki-client