Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/A084D2B2F92E11EA8946AD6AC4F9AE02.roa
File:                     A084D2B2F92E11EA8946AD6AC4F9AE02.roa (raw, json)
Hash identifier:          WpPoMXL7017Z2tmYc2O7HXriP4OTAAxqYsVzorlUycM=
Subject key identifier:   6A:0D:0D:D4:3C:16:85:23:A0:D8:BE:77:DA:FA:E6:E1:89:39:E7:56
Certificate issuer:       /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial:       19D6
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/A084D2B2F92E11EA8946AD6AC4F9AE02.roa
Signing time:             Thu 30 Jul 2026 17:29:20 +0000
ROA not before:           Thu 30 Jul 2026 17:29:20 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        116.90.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
                          rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 16:30:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6614 (0x19d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
        Validity
            Not Before: Jul 30 17:29:20 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6b89ef-68c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9b:0f:4e:93:fb:64:80:52:0d:a3:7c:94:04:
                    fc:27:22:93:1a:dc:57:c9:d9:ed:da:28:af:09:46:
                    32:50:f4:e8:f3:89:91:86:02:89:fb:6b:11:b5:27:
                    cc:85:c4:c2:50:3e:a1:9e:4e:0b:3d:da:c6:63:4e:
                    d3:43:7c:0a:3f:80:17:9f:49:dd:8e:22:01:e1:7a:
                    6a:06:b9:72:03:96:e1:0b:e1:33:29:f0:94:a9:98:
                    15:96:25:60:82:3b:26:2c:da:0f:f0:ad:87:fa:30:
                    e1:73:56:e5:cf:8d:d7:c2:71:5d:99:52:54:21:59:
                    62:0a:97:c4:80:76:1a:29:c2:fe:ff:af:50:d9:ed:
                    c3:6f:98:1b:93:32:73:bd:a4:c5:86:20:56:a8:73:
                    2c:71:e8:80:a0:3c:3e:63:41:d9:93:9a:6a:79:b5:
                    26:eb:dc:d4:20:8c:9b:93:72:4c:62:b5:43:c0:b5:
                    e7:8e:50:37:b4:b7:3c:60:c1:7c:e5:12:00:9d:be:
                    a3:44:90:47:cf:82:ce:2a:31:06:99:46:5c:19:27:
                    7f:eb:1e:e8:b3:6c:f9:b5:c0:e8:c7:7f:71:63:0b:
                    d7:b2:48:e3:89:15:9f:69:32:25:be:d6:db:78:e7:
                    fa:9c:0f:d0:a8:3e:e2:55:c1:cf:a2:5b:98:fb:f9:
                    f6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0D:0D:D4:3C:16:85:23:A0:D8:BE:77:DA:FA:E6:E1:89:39:E7:56
            X509v3 Authority Key Identifier:
                keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/A084D2B2F92E11EA8946AD6AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         35:72:b0:89:fb:27:77:f1:a1:18:7d:5e:04:ed:2c:74:d9:71:
         69:ea:a8:46:2d:fb:2e:f7:af:1d:57:cc:ca:43:4f:01:73:29:
         d5:75:d7:4c:c4:87:fa:65:e8:18:d9:df:e4:8f:97:dc:3a:67:
         ed:a2:dc:8a:50:94:3d:af:e7:53:aa:96:35:79:29:ef:fd:f6:
         5b:74:c1:48:f6:d9:27:26:7c:12:db:ea:2b:7c:3e:6e:50:3c:
         3e:1c:14:03:b7:ad:f3:37:b9:4e:39:d2:73:e2:f4:e7:3b:9c:
         07:c0:6f:13:44:53:80:20:c3:d4:3a:2d:61:4f:6b:86:76:8d:
         61:3a:43:ef:84:0f:ba:47:ee:f6:b4:27:fe:e8:7a:f7:59:34:
         c4:3b:12:9b:a2:ba:bc:77:9c:ae:3b:dd:fb:bd:5e:f7:89:0e:
         8b:bf:08:98:f3:6b:69:f7:b2:ee:cb:2b:4c:11:d2:63:43:b1:
         8f:3c:0e:47:95:a3:75:cf:01:0c:f1:f3:d4:8c:6c:c8:b0:19:
         81:36:7e:cd:02:67:cd:65:39:f2:fa:c0:c0:72:a2:7b:4c:99:
         ac:87:fa:fe:a2:50:0b:e5:45:df:95:0a:d8:14:d3:11:98:a8:
         e4:76:1b:5f:27:2e:ea:68:c8:25:2f:43:f9:00:d9:81:26:f9:
         e6:85:d1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 15:38:16 2026 by rpki-client