Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/1BC96D8C1BA111EA8BDD6114C4F9AE02.roa
File:                     1BC96D8C1BA111EA8BDD6114C4F9AE02.roa (raw, json)
Hash identifier:          ZGdgTIaqt5RzK0CPJDs9IZsbHRo3ViFAUlTkaRU3Awo=
Subject key identifier:   8D:76:F5:92:39:D3:3F:15:2C:A7:A0:7E:22:83:10:FF:1C:A7:DF:17
Certificate issuer:       /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Certificate serial:       1463
Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/1BC96D8C1BA111EA8BDD6114C4F9AE02.roa
Signing time:             Sun 30 Aug 2026 17:33:08 +0000
ROA not before:           Sun 30 Aug 2026 17:33:08 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     135887
IP address blocks:        144.138.0.0/16 maxlen: 24
                          147.10.0.0/16 maxlen: 24
                          149.167.0.0/16 maxlen: 24
                          155.143.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 16:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5219 (0x1463)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
        Validity
            Not Before: Aug 30 17:33:08 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a946954-5231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cc:5f:eb:9d:0f:7b:cc:3e:c7:08:2d:13:b0:
                    68:87:40:64:b5:b7:c2:87:27:70:de:06:f8:3d:5b:
                    5d:10:31:cd:4a:bc:10:bb:3b:49:89:7c:7d:fd:3a:
                    65:a6:15:0c:d9:56:2e:49:31:2e:b3:9d:b1:66:ee:
                    2b:93:61:e9:c3:b9:39:65:ac:9d:f8:54:97:56:c9:
                    f1:ab:08:d1:21:21:b3:e4:01:b5:f1:f9:15:aa:e9:
                    43:fe:ba:7c:23:83:1c:3f:c4:2f:c0:64:dc:08:f7:
                    76:5e:dc:c5:3d:c0:c7:0a:91:bf:72:79:7b:fe:69:
                    cb:c4:91:98:f0:e5:83:31:7b:c6:02:fb:08:82:d7:
                    af:b9:4d:ac:e4:4b:4a:d5:70:6f:ed:c5:4c:9f:ce:
                    57:5d:51:06:ae:25:74:23:02:36:24:bd:f0:a4:68:
                    74:d5:d7:5c:b5:62:dc:d5:36:01:d5:da:fb:3c:ca:
                    50:f6:92:c1:0b:5c:61:94:66:b3:ae:25:75:f7:94:
                    8b:3d:41:9f:4c:24:e3:c7:b5:4e:fc:40:8b:c9:36:
                    89:44:27:b3:25:18:57:2f:0d:ca:9a:aa:57:d4:98:
                    43:94:71:fd:ae:2f:cf:ee:5e:11:d5:e4:71:df:fe:
                    54:27:0a:29:b2:0b:19:63:9d:b9:75:21:cf:d5:95:
                    2f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:76:F5:92:39:D3:3F:15:2C:A7:A0:7E:22:83:10:FF:1C:A7:DF:17
            X509v3 Authority Key Identifier:
                keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/1BC96D8C1BA111EA8BDD6114C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.138.0.0/16
                  147.10.0.0/16
                  149.167.0.0/16
                  155.143.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         aa:59:8d:fc:fa:81:da:24:f5:ee:3b:e0:e8:4c:3d:14:3e:05:
         78:69:7e:df:41:b2:a7:ac:00:21:f3:b8:e8:f7:f1:0b:92:71:
         c6:de:c0:a3:2e:42:76:2d:9a:d1:54:bf:de:36:1d:9f:98:c6:
         77:98:8b:3b:41:e1:c6:f9:9c:f5:3f:5e:13:53:31:d1:7e:ce:
         0e:95:69:11:b0:59:ec:81:2d:4f:81:29:c7:c2:3b:51:e4:81:
         81:a0:47:45:2c:25:fa:7e:28:0c:a2:65:00:f7:65:40:ce:51:
         fd:e6:e0:ea:40:70:e6:e1:a8:2b:69:44:d1:58:6c:61:8e:c2:
         98:4f:1c:24:af:46:81:c2:8e:b0:78:d3:8f:96:68:7a:82:b4:
         c7:9c:c3:11:b1:e8:19:93:d3:dc:ce:1e:cf:e2:77:68:35:12:
         90:68:b5:72:54:bc:f9:1a:63:73:27:fb:5a:f1:d9:41:00:33:
         e7:63:1f:93:10:7d:f2:1e:e7:b2:6b:38:70:ae:cc:7f:af:9d:
         e1:21:a7:fe:65:fb:88:26:6a:df:8a:2a:45:92:1b:36:27:86:
         5b:0b:d6:30:0f:36:4d:8f:57:f0:fc:87:b2:00:95:47:0e:38:
         1c:77:ae:b3:ff:2e:58:80:ae:a3:1b:47:bb:90:44:25:b8:49:
         87:45:93:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:47:09 2026 by rpki-client