Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/819DAAB27EB711F1809AE3176BA30FBC.roa
File:                     819DAAB27EB711F1809AE3176BA30FBC.roa (raw, json)
Hash identifier:          qAJUEjSIS3LCG7kbcMYMWLIRc8WO6/s9r3ShA4KRFbQ=
Subject key identifier:   B7:8A:51:B3:82:20:82:E3:1A:03:91:80:C2:CA:7B:D6:C6:7B:32:DE
Certificate issuer:       /CN=A9165A0B/serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14
Certificate serial:       09AE
Authority key identifier: 71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/819DAAB27EB711F1809AE3176BA30FBC.roa
Signing time:             Wed 26 Aug 2026 20:40:28 +0000
ROA not before:           Wed 26 Aug 2026 20:40:28 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     59323
IP address blocks:        116.58.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.crl
                          rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 20:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2478 (0x9ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165A0B, serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14
        Validity
            Not Before: Aug 26 20:40:28 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8f4f3c-6312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8a:23:f2:30:ec:f2:a5:9c:f6:b6:2c:74:04:
                    80:fe:ba:79:79:cd:7a:10:70:c0:13:b7:32:19:12:
                    e9:cf:42:40:b5:34:89:1c:e8:36:6f:ac:23:75:f3:
                    ce:9e:5e:bb:3f:69:1e:d7:f4:26:85:a8:92:89:93:
                    9a:6b:7c:b1:47:ac:6e:73:65:3d:08:4c:4d:eb:28:
                    a5:32:47:54:93:36:07:61:26:e7:c5:2e:79:01:f5:
                    d7:ba:d7:83:1b:08:76:0a:b0:3e:4e:c8:fb:df:15:
                    42:d9:55:29:14:bf:22:40:c0:a4:c5:8d:bc:f2:96:
                    5e:f8:4c:df:f0:da:51:92:38:c8:24:5e:c8:0b:b1:
                    07:5f:d2:cd:5c:8e:50:46:1f:9f:20:9e:29:2b:ae:
                    b8:d2:33:0d:4a:3e:49:39:c4:c6:42:e8:44:3e:15:
                    9c:5d:7d:60:d7:ab:e6:c8:26:88:81:d8:dc:9f:b7:
                    cc:15:a5:a9:3d:19:a1:19:5c:ad:e4:17:e5:d8:74:
                    33:02:8e:73:47:d2:d2:6d:12:62:46:75:dd:4b:f8:
                    ac:6d:62:17:f0:ae:96:c1:b8:2e:f3:5a:be:bf:c6:
                    a5:be:6e:e7:13:93:f9:9e:f5:ef:64:bd:48:24:39:
                    16:2f:31:0c:98:6f:9e:7a:52:cb:ae:28:26:15:33:
                    ac:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8A:51:B3:82:20:82:E3:1A:03:91:80:C2:CA:7B:D6:C6:7B:32:DE
            X509v3 Authority Key Identifier:
                keyid:71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/819DAAB27EB711F1809AE3176BA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.58.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:00:3e:12:b3:6e:86:9c:fa:2e:11:c8:c6:f7:96:f8:30:c7:
         14:1a:4a:b9:64:8c:16:20:31:77:89:70:91:39:51:b2:a1:91:
         1e:9e:08:76:41:d3:e9:b9:63:7e:d2:82:84:03:80:cb:5a:b7:
         0e:7c:e7:58:20:49:9b:7f:6d:0d:95:e7:c8:c0:04:87:54:93:
         52:a7:46:c3:8a:e5:0b:9b:86:61:12:be:e2:1e:b0:4b:12:8c:
         ce:14:47:33:7b:36:00:07:ec:c8:7d:5b:81:ba:af:ae:cc:2a:
         14:61:d1:07:e5:2b:b3:86:a9:21:79:d8:e9:93:a4:a1:66:af:
         75:db:33:6a:93:e1:5e:a1:54:a9:59:81:ca:32:33:ef:17:65:
         cd:c1:98:d8:3e:4e:23:51:6d:86:02:06:f9:a9:2f:3d:14:a0:
         06:ae:d6:03:12:3b:9b:8e:ee:e7:91:ae:a5:1a:1d:11:23:21:
         9c:d5:c9:15:94:9f:00:44:ef:28:ac:c3:81:91:9d:29:74:cd:
         71:71:de:1a:db:83:04:27:dd:81:93:49:e7:86:cf:e5:6f:d1:
         ae:27:56:0d:e2:b6:21:98:97:b5:70:20:bb:21:13:94:d9:36:
         85:39:dc:15:31:ca:b5:49:43:ae:0a:6a:f9:a5:ca:78:9d:a4:
         97:eb:ad:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:33:46 2026 by rpki-client