Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/8BA9C1CAC4FB11EAAEAE7C1DC4F9AE02.roa
File:                     8BA9C1CAC4FB11EAAEAE7C1DC4F9AE02.roa (raw, json)
Hash identifier:          uNfQL2S5Z0WpDK8+2M2KzzJHEMJvt92wNIgJdtYb0rE=
Subject key identifier:   31:FA:D7:63:56:0D:B7:B6:62:AA:EB:A6:7C:52:C4:92:CE:7B:AC:58
Certificate issuer:       /CN=A9165A0B/serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14
Certificate serial:       09AC
Authority key identifier: 71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/8BA9C1CAC4FB11EAAEAE7C1DC4F9AE02.roa
Signing time:             Wed 26 Aug 2026 20:40:24 +0000
ROA not before:           Wed 26 Aug 2026 20:40:24 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     198247
IP address blocks:        116.58.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.crl
                          rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 20:03:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2476 (0x9ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165A0B, serialNumber=71AA58CDF1B6BD7C26E61A7518A4D0AD2C9F1A14
        Validity
            Not Before: Aug 26 20:40:24 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8f4f38-c550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:bc:b2:94:46:d2:e3:ae:fd:28:fe:04:cb:
                    9c:5a:ab:de:77:47:22:68:b1:b3:11:8e:24:54:e2:
                    7c:3c:76:42:25:99:bc:f8:3d:43:39:87:ca:26:e0:
                    2e:36:80:79:51:b7:1e:44:73:c6:ee:f7:cb:4a:6d:
                    c9:88:65:b9:f0:c9:fb:f4:2c:7f:37:16:b7:57:9a:
                    63:a8:53:a9:35:69:b2:ce:cb:a3:7b:65:4e:80:46:
                    c0:c5:fd:2f:d2:91:7f:2d:52:6b:a9:a5:35:40:7c:
                    1d:2f:dd:1d:19:34:23:00:10:fb:f8:9a:20:f5:b3:
                    da:7c:0d:49:29:33:f6:4a:c7:fc:b4:ab:57:38:98:
                    c9:04:2d:55:2a:9a:14:51:d8:ce:48:4b:7f:66:7b:
                    ec:83:ee:6b:40:e2:1a:78:54:59:0f:78:2c:d8:d4:
                    16:fa:d4:62:6a:7f:0e:e7:37:ea:ca:9c:c6:8a:04:
                    5a:73:34:69:28:2b:bd:57:c8:f5:c1:b8:61:e1:67:
                    af:f9:3d:f4:51:23:dc:a1:8a:83:e5:48:30:d6:50:
                    18:ed:fc:b6:d1:31:9b:a6:f1:2a:d3:9a:f2:b0:8e:
                    a9:65:8b:d5:3e:a9:ec:73:a1:b6:95:6f:80:a3:93:
                    3f:7a:ab:c5:d9:c1:94:e6:9a:42:b5:e6:32:35:21:
                    5c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FA:D7:63:56:0D:B7:B6:62:AA:EB:A6:7C:52:C4:92:CE:7B:AC:58
            X509v3 Authority Key Identifier:
                keyid:71:AA:58:CD:F1:B6:BD:7C:26:E6:1A:75:18:A4:D0:AD:2C:9F:1A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/capYzfG2vXwm5hp1GKTQrSyfGhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/capYzfG2vXwm5hp1GKTQrSyfGhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A0B/15586F42C4F811EA8B9B4C13C4F9AE02/8BA9C1CAC4FB11EAAEAE7C1DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.58.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:f6:41:d5:24:1c:44:b4:a0:33:2f:63:e0:9d:1c:2d:c0:8d:
         77:23:ee:9a:71:28:12:ce:ec:ae:a1:d9:49:de:87:5c:b4:66:
         0b:1c:35:18:fa:b8:c3:b3:6d:6a:1e:7d:44:bc:fd:48:6d:47:
         a3:e8:ed:18:3a:86:08:63:23:d9:3a:fe:c8:95:42:26:6f:62:
         4f:02:9e:47:63:82:6d:7d:d8:d2:73:93:15:b6:7f:25:00:4a:
         bb:c9:c1:03:5e:ce:3d:e6:39:22:7c:da:04:fc:ff:bc:fd:47:
         0c:39:a7:83:3e:c7:94:3e:5f:74:3d:49:50:81:2c:05:dd:5f:
         63:6c:ec:f9:b8:1b:d7:dc:b5:15:60:8b:57:a2:2a:25:4f:ef:
         8f:25:08:77:6e:d7:94:e7:ad:de:4c:e5:73:ea:35:c7:07:90:
         fb:28:b6:9c:78:df:db:43:95:e1:8a:2c:7e:36:93:11:4b:dc:
         20:61:85:62:64:2e:8d:d2:ac:2f:76:3a:1d:47:cf:fe:1b:26:
         9e:94:3d:e5:c2:72:df:ba:0b:3c:a0:7a:0d:ab:bc:3b:ee:c1:
         8c:92:64:cf:95:21:38:80:86:d3:9c:ce:ff:f7:f5:fc:01:51:
         09:32:f1:a0:08:04:62:3a:48:4a:a1:9a:16:2b:f9:eb:3b:29:
         db:56:79:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:33:43 2026 by rpki-client