Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915AEB5/9E342D3EAE1111F1874B9E924E11F970/00B5B2CAAE1211F1954733B94E11F970.roa
File:                     00B5B2CAAE1211F1954733B94E11F970.roa (raw, json)
Hash identifier:          BPjtbNqMSVFm7GMmktha8r/KyoyUmgzAgYzGdPTKU30=
Subject key identifier:   E0:91:54:93:3C:4B:5C:8E:B9:43:A6:34:B8:7B:54:DF:1E:4B:18:2A
Certificate issuer:       /CN=A915AEB5/serialNumber=945C20FBD07643FD062C2A50AE8134BCE55BD3A1
Certificate serial:       06
Authority key identifier: 94:5C:20:FB:D0:76:43:FD:06:2C:2A:50:AE:81:34:BC:E5:5B:D3:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFwg-9B2Q_0GLCpQroE0vOVb06E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AEB5/9E342D3EAE1111F1874B9E924E11F970/00B5B2CAAE1211F1954733B94E11F970.roa
Signing time:             Fri 11 Sep 2026 19:04:38 +0000
ROA not before:           Fri 11 Sep 2026 19:04:38 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     154913
IP address blocks:        163.52.167.0/24 maxlen: 24
                          2001:df7:82c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AEB5/9E342D3EAE1111F1874B9E924E11F970/lFwg-9B2Q_0GLCpQroE0vOVb06E.crl
                          rsync://rpki.apnic.net/member_repository/A915AEB5/9E342D3EAE1111F1874B9E924E11F970/lFwg-9B2Q_0GLCpQroE0vOVb06E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFwg-9B2Q_0GLCpQroE0vOVb06E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 09:55:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AEB5, serialNumber=945C20FBD07643FD062C2A50AE8134BCE55BD3A1
        Validity
            Not Before: Sep 11 19:04:38 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6aa450c6-3b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:56:8b:b1:83:96:82:c3:11:da:c9:ba:d2:
                    18:eb:76:65:a6:31:8d:9f:91:2f:8f:67:21:b9:e3:
                    8f:7a:ab:51:1f:18:4d:14:71:85:bb:90:cb:1f:a8:
                    f2:be:4d:46:5c:f1:a9:e7:a6:62:d7:28:3b:c8:f5:
                    bd:be:ed:e4:fe:3a:f1:4d:54:6d:d9:71:11:27:7b:
                    6b:0c:98:04:75:dd:ab:21:3e:85:ad:ac:b6:da:dd:
                    36:ba:66:15:13:77:1c:df:9c:3d:db:d5:61:97:89:
                    c2:ae:6b:a0:8b:a4:af:de:8c:97:b9:d2:61:2c:3e:
                    fc:7c:7c:ed:57:e1:5c:1f:ce:2f:72:37:26:ae:fb:
                    e1:9f:5f:21:6c:4b:ce:59:45:e0:6a:38:f4:ac:aa:
                    0b:6b:d3:4d:7e:fe:59:a6:de:66:3b:f6:c5:4d:d6:
                    7d:86:d3:80:b3:51:e6:23:9a:09:8c:59:d0:df:a6:
                    b0:31:7c:44:22:01:e1:62:55:9b:35:9e:c3:84:ec:
                    41:94:01:c2:02:c5:75:a1:fb:c9:1a:ea:fc:29:9a:
                    b2:00:25:09:25:76:bc:2a:66:c3:43:6b:a0:17:b6:
                    d7:67:63:04:3a:7c:96:66:1d:d4:2f:94:5b:fd:27:
                    99:ec:93:bf:0c:81:74:0b:a6:87:c2:0d:7c:c7:1a:
                    60:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:91:54:93:3C:4B:5C:8E:B9:43:A6:34:B8:7B:54:DF:1E:4B:18:2A
            X509v3 Authority Key Identifier:
                keyid:94:5C:20:FB:D0:76:43:FD:06:2C:2A:50:AE:81:34:BC:E5:5B:D3:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AEB5/9E342D3EAE1111F1874B9E924E11F970/lFwg-9B2Q_0GLCpQroE0vOVb06E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFwg-9B2Q_0GLCpQroE0vOVb06E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AEB5/9E342D3EAE1111F1874B9E924E11F970/00B5B2CAAE1211F1954733B94E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.167.0/24
                IPv6:
                  2001:df7:82c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:e0:81:e3:90:92:25:64:9b:66:1a:2a:37:f2:b3:cd:5b:c6:
         b1:ee:b2:57:e3:ba:10:f3:6f:55:7a:57:21:e1:e0:8c:11:be:
         2e:a8:69:06:03:a9:c3:d3:07:89:2b:32:73:11:5d:a1:0e:32:
         71:8f:b0:22:ba:dd:b7:30:10:fc:58:34:ca:bb:9c:68:01:25:
         fa:de:e3:59:f8:a2:1e:aa:d4:36:5f:ea:63:ca:80:de:e2:e2:
         11:da:76:41:a8:77:21:7e:87:9b:50:c6:88:cf:85:fa:24:06:
         f6:0e:72:90:a1:25:80:f2:fd:b9:d6:8c:41:54:ce:9c:52:b5:
         eb:ed:95:6b:2a:1f:64:86:a6:94:c6:87:89:a4:10:07:d9:20:
         16:74:be:ee:d6:c8:fb:dc:2c:a1:da:1b:a9:f7:07:39:4d:a7:
         66:5f:4b:83:1a:41:70:97:68:dc:31:63:93:60:bd:ba:df:cd:
         1a:3d:a4:b1:0b:d2:66:cc:eb:20:39:db:60:77:d2:50:0d:75:
         70:1a:87:8d:45:49:67:91:d9:2f:d5:30:84:1c:1a:23:cf:11:
         db:80:35:44:48:12:e3:c1:31:bc:57:87:8b:cb:8f:34:11:7f:
         1c:c7:18:18:50:32:35:66:54:25:32:20:39:55:cb:fc:44:95:
         4e:71:06:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:38:36 2026 by rpki-client