Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/697FC270EF5711F0A69FC96F546F56BC.roa
File:                     697FC270EF5711F0A69FC96F546F56BC.roa (raw, json)
Hash identifier:          wav3TNk/0JTJmDGQm3vDSiNG90V42dPGi/yOT8dfF0o=
Subject key identifier:   07:55:9F:D7:B7:9D:ED:08:FA:99:91:1A:0B:FE:75:4E:7E:E7:B5:99
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3DCA
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/697FC270EF5711F0A69FC96F546F56BC.roa
Signing time:             Thu 06 Aug 2026 15:12:38 +0000
ROA not before:           Thu 06 Aug 2026 15:12:38 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     49304
IP address blocks:        115.178.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 14:22:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15818 (0x3dca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Aug  6 15:12:38 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a74a466-ff12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:df:64:00:c0:35:18:ce:f3:ee:13:00:55:80:
                    c5:88:bb:bc:22:2f:cc:41:e0:bf:f7:95:67:e0:8c:
                    b9:1a:93:3e:a3:9b:5d:ca:c5:0e:cb:43:3b:00:8e:
                    6d:27:59:82:cc:5a:68:0c:c2:13:98:ed:83:3e:26:
                    50:23:15:7c:bb:86:7f:8e:ca:b1:07:63:5c:88:6e:
                    51:de:39:0d:6e:83:11:f2:ab:b6:e2:13:4a:f4:93:
                    dd:1c:4a:29:13:4a:a9:c3:d4:dc:a9:87:30:14:71:
                    5f:32:a7:f7:9e:53:14:cf:59:f8:4f:08:9d:58:c8:
                    a0:74:39:80:cf:ca:71:dc:be:fb:5e:85:bd:62:f5:
                    b7:5b:a1:85:ac:1a:7f:df:43:0e:16:31:da:b4:64:
                    72:36:6d:4a:e2:04:aa:20:59:1b:de:4b:63:de:57:
                    3b:04:77:42:85:ac:ea:77:ac:2a:9c:73:f2:37:12:
                    da:57:cf:9f:29:35:ff:8e:39:98:83:ff:7e:cb:ad:
                    8b:46:8c:d7:41:ad:c3:81:04:22:48:50:d6:ac:e9:
                    35:ef:dc:75:b6:e2:3a:d7:a4:cf:b7:04:cd:87:00:
                    1a:05:37:30:e7:a9:a9:4c:a8:3c:4e:44:9b:ee:6e:
                    32:be:fb:f1:f4:cc:c2:b6:93:a1:cc:a4:fc:e5:34:
                    28:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:55:9F:D7:B7:9D:ED:08:FA:99:91:1A:0B:FE:75:4E:7E:E7:B5:99
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/697FC270EF5711F0A69FC96F546F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:da:a6:e2:f4:fd:a1:52:84:25:11:6f:8d:26:40:d0:50:eb:
         a9:e6:31:86:e3:fd:5e:df:e5:7e:b7:ee:af:cc:af:fe:48:3c:
         cd:e7:28:9a:0e:0f:68:3b:e5:fd:b3:ab:e4:03:87:47:df:6f:
         b2:ff:4d:ba:f5:07:19:47:1c:0a:19:e8:30:fc:38:10:b2:0b:
         71:cb:41:e8:70:1d:96:44:35:90:ae:c9:cc:4a:69:71:83:cb:
         d3:94:ab:8f:31:4e:1a:44:76:dd:1f:2a:44:1f:c6:87:8d:1f:
         bd:fa:e0:c5:ab:93:c6:a9:13:48:27:9b:62:01:83:2d:ad:74:
         ff:f5:5c:df:18:3f:ca:50:ad:04:ba:96:6a:75:2a:34:c3:7c:
         11:51:a5:d6:08:24:f9:a2:9b:b8:4d:af:5a:84:67:b9:b9:d2:
         d7:22:9e:1f:e4:67:1a:cc:63:7f:78:9d:b4:76:3c:a1:85:27:
         81:74:c5:9a:8a:01:4b:84:21:c8:e2:6c:cc:44:66:f2:22:ee:
         4a:89:c3:a6:f2:6b:9f:8a:c8:7c:8b:bd:af:bb:45:a8:92:29:
         df:23:62:e2:4b:64:bd:53:89:46:cb:8a:09:95:da:56:11:0d:
         a3:f4:2c:f3:24:4d:72:45:47:7b:b2:a0:2d:d3:2c:16:1e:60:
         74:72:b4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:12:48 2026 by rpki-client