Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/349FE3280DA811EBB62F0126C4F9AE02.roa
File:                     349FE3280DA811EBB62F0126C4F9AE02.roa (raw, json)
Hash identifier:          2jQytLGdJ6ff6bxOOpScMDyAcFTBPixraFcMfIfehBU=
Subject key identifier:   7D:4A:FA:1D:03:28:48:B0:6D:8B:55:0B:0F:B5:5A:5E:92:A5:A6:11
Certificate issuer:       /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Certificate serial:       1464
Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/349FE3280DA811EBB62F0126C4F9AE02.roa
Signing time:             Sun 30 Aug 2026 17:33:10 +0000
ROA not before:           Sun 30 Aug 2026 17:33:10 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     19905
IP address blocks:        192.74.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 16:56:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5220 (0x1464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
        Validity
            Not Before: Aug 30 17:33:10 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a946956-fe6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:86:d0:2c:6c:0e:49:6a:7d:ba:ad:bb:cf:22:
                    7e:9a:02:39:92:3f:54:58:17:18:3b:94:f5:85:98:
                    36:d2:af:76:d1:02:b0:d0:25:3d:7c:57:45:91:fa:
                    e1:44:18:e3:5d:7e:64:11:6f:2b:9f:55:0d:2f:c8:
                    a9:8e:11:56:86:20:4e:d3:34:bd:ce:eb:9e:1f:65:
                    11:80:18:a5:25:4b:d6:39:ea:17:02:fc:4b:2f:83:
                    1f:1d:62:7c:f0:d5:87:6a:ea:36:2a:82:a6:ac:97:
                    f2:cf:8b:10:ce:c5:9f:a5:cb:0c:dc:4a:30:c5:51:
                    ab:db:78:6d:69:b9:16:b4:05:19:2e:73:da:1f:ee:
                    ef:65:b4:ae:e3:29:63:6a:f2:65:b8:35:08:4a:e0:
                    76:bb:20:f1:e8:2d:2d:a5:e8:78:4d:d0:ea:8a:48:
                    d2:bc:fe:21:0a:e6:27:e5:af:28:81:b2:e4:2e:8d:
                    c7:4a:df:15:e9:b7:29:7c:af:e0:1a:14:37:ac:63:
                    ca:e2:b2:65:e9:28:7d:63:34:27:55:16:46:57:0d:
                    92:9e:95:58:35:ac:a8:1f:f6:b4:0b:35:6a:01:1f:
                    17:9e:fd:6b:15:73:40:92:d6:b4:11:8b:60:f7:be:
                    13:6c:f5:21:e8:f6:8c:2c:39:8f:51:ab:da:7f:57:
                    45:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4A:FA:1D:03:28:48:B0:6D:8B:55:0B:0F:B5:5A:5E:92:A5:A6:11
            X509v3 Authority Key Identifier:
                keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/349FE3280DA811EBB62F0126C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.74.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:dd:62:b9:1c:78:70:78:63:18:b1:55:f8:b9:b9:3f:17:22:
         d9:a8:0f:a6:6a:0f:e0:aa:0c:81:da:c1:b4:df:7f:31:b4:d6:
         de:2b:3e:2d:81:26:37:63:bc:d3:5d:68:86:23:23:19:92:77:
         d5:20:66:e9:78:71:ea:99:9b:d3:ac:f0:c8:d7:ea:e2:cf:c3:
         7c:3f:20:b1:e3:10:63:a4:8a:b1:47:8c:d8:83:d5:0a:94:a3:
         54:2f:d5:94:47:2b:e0:c1:02:3b:63:15:a8:33:ce:cd:a3:99:
         c3:ba:29:9f:f6:ab:96:56:9f:fd:be:ea:27:ca:e1:35:96:56:
         c1:21:82:d7:fa:7e:6e:af:8c:51:21:88:2b:b0:ac:06:c1:c9:
         13:48:b2:d4:98:5e:bf:be:6f:0d:43:ae:dc:85:68:88:d4:04:
         bb:0e:e1:e9:74:f2:b0:9a:2f:76:74:28:ba:d7:1e:1d:8d:eb:
         52:9c:d4:ee:20:c5:7f:07:50:09:d2:6a:22:e6:79:ad:7a:d6:
         51:bb:c3:68:c9:f0:08:65:dd:e0:67:7a:47:33:1f:01:8a:3e:
         f0:a9:8a:d6:42:55:f1:bc:bd:0d:cd:e1:77:c3:e3:e7:3a:8c:
         46:99:f2:46:db:e7:e1:41:54:6a:b5:bc:32:67:ca:51:b1:1d:
         40:4f:6d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:06:12 2026 by rpki-client