Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/8C163A62FD4611EE8FAE061EC4F9AE02.roa
File:                     8C163A62FD4611EE8FAE061EC4F9AE02.roa (raw, json)
Hash identifier:          xQQOMesrqkzJ7nXHuS7Cx+CCObLAfTt61rpL2c+BmfE=
Subject key identifier:   D7:53:C6:95:35:63:D6:C5:18:D4:E5:34:D5:26:44:F4:73:73:C0:B9
Certificate issuer:       /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial:       143E
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/8C163A62FD4611EE8FAE061EC4F9AE02.roa
Signing time:             Sun 30 Aug 2026 17:33:25 +0000
ROA not before:           Sun 30 Aug 2026 17:33:25 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     19905
IP address blocks:        203.36.128.0/24 maxlen: 24
                          203.38.12.0/24 maxlen: 24
                          203.38.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 16:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5182 (0x143e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
        Validity
            Not Before: Aug 30 17:33:25 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a946964-3e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7b:8a:78:ac:b1:e4:17:cb:99:65:08:3b:b5:
                    85:0e:59:95:ac:aa:aa:9d:82:a6:3c:3e:2b:58:ba:
                    e6:60:fc:84:3f:93:4a:77:dc:51:67:bb:fe:df:50:
                    22:de:b6:c1:99:cd:90:9e:8c:67:79:96:88:3a:a6:
                    61:1b:14:61:6a:a0:63:3c:55:fa:3e:ff:cb:71:e3:
                    bc:a7:2d:9a:06:c4:74:3d:1c:c8:65:07:f9:76:ad:
                    7b:59:03:38:56:47:ad:c5:ce:89:bd:eb:ec:fa:d4:
                    34:a9:ba:19:d7:2f:5a:98:85:ea:eb:c8:e3:44:41:
                    02:9d:67:f6:bf:5f:f7:9c:4d:5e:5c:78:89:b3:e1:
                    2b:8b:96:bb:ba:d5:b9:e2:bb:25:1e:a4:e3:e6:b0:
                    6d:08:03:d9:fe:0b:e5:48:31:cb:e1:70:8e:db:0a:
                    65:ff:79:25:b9:cb:dc:31:cb:5b:29:eb:19:89:cc:
                    cb:96:84:01:ac:b1:15:3f:9a:98:25:3d:4a:60:70:
                    27:97:46:c8:f1:76:59:2d:85:77:e5:c6:62:57:31:
                    8b:7c:b8:58:d6:78:b6:7d:8b:cf:58:5e:dc:cc:0a:
                    09:61:70:8a:9b:fc:2f:a6:57:3e:37:50:e6:c7:0c:
                    ed:97:92:e5:dc:7d:72:56:0d:e5:3b:77:5a:c9:ce:
                    01:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:53:C6:95:35:63:D6:C5:18:D4:E5:34:D5:26:44:F4:73:73:C0:B9
            X509v3 Authority Key Identifier:
                keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/8C163A62FD4611EE8FAE061EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.36.128.0/24
                  203.38.12.0/24
                  203.38.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:6f:d4:ae:d3:75:a0:9f:75:67:6c:0a:a5:02:65:91:5c:43:
         4f:78:07:87:4c:b7:0e:d3:93:11:f7:63:de:4d:58:b5:5a:df:
         68:11:5f:2b:3e:72:10:b9:8e:db:92:16:7d:b3:c9:16:74:fc:
         23:4d:27:30:03:70:8b:b3:6f:30:93:4a:c5:02:ab:29:24:01:
         87:dc:29:67:58:cc:b9:61:5d:7c:52:37:3d:a5:ed:99:a2:13:
         cf:9f:d7:1e:4c:a6:d2:d8:3f:f4:8f:f1:c0:78:4c:47:c0:5f:
         52:69:21:9b:a3:b2:fc:80:aa:03:20:8b:4e:b3:a9:5a:35:21:
         37:87:3a:de:7a:e5:8c:4c:8f:cf:d9:86:09:4c:72:cd:58:40:
         be:0e:a6:ae:18:59:dd:fd:40:5e:9c:70:bf:fb:a1:2e:8f:03:
         02:17:a1:d6:e9:26:64:cb:12:a8:4b:55:0e:64:43:04:dc:7c:
         71:24:6b:f6:70:0e:0a:f7:e8:c3:35:d3:8d:62:6c:ff:3c:4d:
         eb:a8:a5:c4:ef:e4:97:a6:29:3b:38:21:16:4a:24:d9:42:85:
         f1:53:37:fa:cd:fa:42:c3:90:56:94:04:af:7f:d3:19:42:6d:
         82:f8:04:e7:bd:e3:d5:8b:98:c6:8e:ad:4a:3d:af:97:67:70:
         79:69:2c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:06:22 2026 by rpki-client