Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/A65587CEDC8E11F084B8ABC03D6F56BC.roa
File:                     A65587CEDC8E11F084B8ABC03D6F56BC.roa (raw, json)
Hash identifier:          qM15gr000jzsy9qLtRobzO6YtnZPRusJbv45QTyAJ2E=
Subject key identifier:   EA:53:53:DC:0E:1D:18:10:9B:E0:04:9A:FE:6A:FD:06:E7:31:10:B3
Certificate issuer:       /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial:       143F
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/A65587CEDC8E11F084B8ABC03D6F56BC.roa
Signing time:             Sun 30 Aug 2026 17:33:26 +0000
ROA not before:           Sun 30 Aug 2026 17:33:26 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     4632
IP address blocks:        203.50.251.0/24 maxlen: 24
                          203.50.252.0/24 maxlen: 24
                          203.50.253.0/24 maxlen: 24
                          203.50.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 16:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5183 (0x143f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
        Validity
            Not Before: Aug 30 17:33:26 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a946966-d598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:1e:e5:16:28:29:60:63:57:22:2c:5b:0c:
                    6f:c2:b1:28:d2:87:04:29:e2:40:2f:22:3a:8b:ed:
                    86:39:58:af:d2:b5:a1:98:f0:a7:50:a6:f3:74:fb:
                    1e:5e:d2:50:84:5e:bb:60:59:84:2f:34:ed:56:fe:
                    f5:04:a4:1d:6b:bf:11:48:ce:a3:48:af:5e:b2:fd:
                    1d:ff:4b:94:29:76:13:66:b5:10:69:98:d3:80:41:
                    f1:ea:fb:65:8f:7c:ca:cf:8c:37:65:6a:b7:a8:2a:
                    56:a7:7a:dc:f5:98:27:b8:74:8b:e7:d0:58:b2:bd:
                    6e:cf:fe:fc:cb:12:64:75:47:3e:d6:a7:04:64:2e:
                    13:55:78:99:9b:4c:4f:ea:be:44:db:f5:20:4e:02:
                    42:8d:28:d1:e4:55:38:19:7b:d0:66:98:de:58:ef:
                    c4:55:96:6e:a0:59:42:8a:ec:8c:e1:e4:6a:fe:74:
                    c4:a3:01:a7:d4:18:ef:d2:88:eb:b7:2d:c9:29:99:
                    be:91:6f:85:5c:40:19:31:dd:9b:3b:bc:75:fa:4e:
                    2b:17:12:42:d8:d0:98:a0:6a:3a:08:68:7e:e5:f8:
                    e1:41:28:ef:90:af:15:93:97:fc:3c:4a:5a:a8:f1:
                    f5:96:65:be:b7:d8:56:d5:61:14:4c:a1:cd:55:e1:
                    5a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:53:53:DC:0E:1D:18:10:9B:E0:04:9A:FE:6A:FD:06:E7:31:10:B3
            X509v3 Authority Key Identifier:
                keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/A65587CEDC8E11F084B8ABC03D6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.50.251.0-203.50.254.255

    Signature Algorithm: sha256WithRSAEncryption
         4c:03:63:51:14:f2:17:5c:5d:5d:95:71:05:5e:14:91:23:6a:
         b3:fe:3a:52:38:33:c1:6b:c5:7c:01:08:bd:1d:24:c7:2b:6c:
         10:a6:7e:e9:56:83:4c:52:56:4c:95:3c:29:69:71:21:7a:1b:
         21:6a:d8:b9:b8:48:e5:a9:a7:05:55:ba:da:59:6a:45:44:f6:
         8e:db:5b:9f:ca:af:bc:65:ec:44:5a:53:be:29:63:b3:ad:24:
         e3:46:94:11:94:1e:8e:85:11:24:e1:a6:f7:dd:1c:48:53:5f:
         e5:07:2f:9b:88:e0:8e:2f:ba:c0:5f:f3:24:41:fd:ee:99:46:
         8a:ac:ad:ce:b0:f9:d8:ac:43:9a:6d:65:2c:b6:23:44:16:38:
         df:73:64:c0:1b:05:9a:f1:b5:9b:23:42:87:0f:d8:3f:cd:e0:
         18:9c:30:e1:17:09:3c:72:ea:13:a0:b4:e9:c4:53:a4:a2:a5:
         f1:5a:b3:c9:1c:da:01:de:4a:53:0b:a0:f5:d1:ee:57:e2:57:
         8f:e1:2b:0c:9e:32:41:4c:86:7b:5e:48:0f:e2:a1:ab:fd:f9:
         bf:9a:e2:63:32:3f:07:14:d9:a5:65:c2:03:bb:69:2f:1e:1d:
         a3:e0:4d:70:22:0f:e0:53:02:b5:8a:e5:07:83:df:f6:a3:2b:
         e4:34:08:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:06:22 2026 by rpki-client