Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/EB429364CA3811EE99BEB838C4F9AE02.roa
File:                     EB429364CA3811EE99BEB838C4F9AE02.roa (raw, json)
Hash identifier:          rydYIGlvClqaHCD9NNnAyF94bpiEruSwJi39QLKLr/U=
Subject key identifier:   32:93:1A:15:61:75:48:FF:E1:94:8A:AA:40:23:62:BB:17:BA:50:FF
Certificate issuer:       /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial:       1441
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/EB429364CA3811EE99BEB838C4F9AE02.roa
Signing time:             Sun 30 Aug 2026 17:33:30 +0000
ROA not before:           Sun 30 Aug 2026 17:33:30 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     4826
IP address blocks:        203.12.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 16:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5185 (0x1441)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983, serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
        Validity
            Not Before: Aug 30 17:33:30 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a946969-19cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:41:4e:65:33:b5:7d:b0:57:fd:24:be:9d:69:
                    3c:b4:c9:d8:f2:49:bf:76:82:cd:5e:a9:cc:f8:64:
                    ff:e7:94:ca:37:1b:a9:90:a9:48:92:5d:12:06:24:
                    05:e5:99:aa:9e:43:eb:bf:63:d0:b8:39:14:7b:f9:
                    47:4d:87:55:26:98:af:4c:9c:b9:11:f1:bd:4d:b5:
                    b2:ce:c6:d4:82:a2:db:77:92:f1:80:fc:5c:46:be:
                    31:1e:02:f1:85:85:f8:fd:ab:a4:53:8c:d5:74:ee:
                    e4:a0:0a:00:84:a6:dd:02:1b:c0:56:7b:2a:46:00:
                    01:36:b0:df:1a:0e:f0:d3:a5:e3:f7:5c:c3:da:f4:
                    3b:97:1f:f5:2a:3a:18:d1:a6:54:65:c9:a4:b2:3d:
                    ba:cb:53:e9:09:f0:af:05:bd:09:5c:50:10:60:04:
                    e1:f1:2d:a3:7d:d1:1b:35:8c:e4:a0:2b:8f:96:69:
                    af:fd:6e:8a:9a:8f:4f:14:5c:0a:6a:41:a3:80:1d:
                    a4:e3:fa:08:d8:ae:21:97:7a:04:00:b7:4f:ea:49:
                    0b:31:52:75:e0:66:16:41:c6:7b:bb:5e:f9:c8:3c:
                    e5:48:2f:23:49:86:47:41:08:20:6c:dc:56:79:71:
                    2e:1b:0b:9b:80:ba:ae:a8:e2:ed:1f:b9:b6:2b:c3:
                    74:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:93:1A:15:61:75:48:FF:E1:94:8A:AA:40:23:62:BB:17:BA:50:FF
            X509v3 Authority Key Identifier:
                keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/EB429364CA3811EE99BEB838C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.12.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:2c:c6:21:58:ec:0f:24:05:fa:b3:b0:90:a2:00:13:49:0f:
         dc:e1:05:ab:ed:7c:cb:9a:f5:db:98:51:73:6b:7d:a4:03:39:
         b0:1e:2b:28:10:45:15:f6:13:db:37:bb:54:57:42:ac:57:d7:
         ba:ab:c0:2c:97:d0:32:ae:91:90:39:37:0f:be:a8:02:3c:28:
         b5:1c:f0:6e:8d:a1:3e:34:17:57:54:a8:ec:db:aa:81:f2:90:
         da:12:4d:80:a8:28:d1:df:53:43:ed:6b:f3:54:24:8c:e8:02:
         93:1e:6a:97:30:8e:c4:8d:cd:eb:9e:83:ec:f1:11:bf:33:28:
         93:03:76:e5:c0:8f:d5:23:5d:2f:61:b6:a4:9b:26:25:41:0a:
         27:3a:e6:fc:17:cb:ba:f4:96:af:19:4f:9b:86:6e:ec:cc:c3:
         c1:d1:3e:9b:8d:50:b4:9e:ec:0e:7b:a8:7b:20:8e:82:84:41:
         6e:59:52:d4:f7:45:11:0a:57:7d:2d:5c:34:af:90:0f:2c:c6:
         c8:63:20:5f:1c:3c:ae:4d:60:db:a9:a3:e7:e1:4e:72:53:45:
         22:c3:2a:59:8c:79:99:70:04:4e:a0:d7:ab:8e:4c:f7:e8:3e:
         54:05:60:ab:1a:8c:ad:9b:ed:21:cc:7a:e0:bf:cb:bf:e5:20:
         5d:bb:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:27:03 2026 by rpki-client