Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/16572A3CEB3511F08C2D5B303F6F56BC.roa
File:                     16572A3CEB3511F08C2D5B303F6F56BC.roa (raw, json)
Hash identifier:          EYjWGbva1pZVNsTwphYUGW3QU2qMX7vEwKRCgoGqRuY=
Subject key identifier:   33:5F:B5:3A:AE:79:E3:14:BF:D4:37:2D:AA:CE:84:93:FC:EF:B7:34
Certificate issuer:       /CN=A916BCDF/serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A
Certificate serial:       0D20
Authority key identifier: 48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/16572A3CEB3511F08C2D5B303F6F56BC.roa
Signing time:             Tue 20 Oct 2026 17:32:29 +0000
ROA not before:           Tue 20 Oct 2026 17:32:29 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     20473
IP address blocks:        141.164.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl
                          rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 16:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3360 (0xd20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BCDF, serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A
        Validity
            Not Before: Oct 20 17:32:29 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ad7a5ad-559c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:54:61:3f:de:de:56:99:4c:2f:7b:21:13:79:
                    03:fe:e1:0c:9b:58:b6:45:35:ef:0f:72:29:e0:96:
                    88:2e:b9:df:ab:e0:dc:6c:92:b2:8b:3a:d9:a8:4e:
                    ab:15:a5:9e:b0:e5:64:c9:c9:2b:c1:28:75:d6:06:
                    88:22:40:2f:05:d3:b1:e9:9c:21:0b:c5:94:6c:82:
                    c8:e1:4a:7b:3a:07:c2:6e:51:2c:83:ff:c8:d8:63:
                    0f:52:5d:98:14:e1:cb:50:4f:69:75:8e:c0:a2:e3:
                    0f:9f:82:c3:d0:bd:31:2d:2d:eb:c1:d7:25:60:17:
                    6e:11:50:db:8d:56:af:be:10:6a:61:bf:a5:a4:e3:
                    9f:2f:e9:23:72:f3:ac:f1:9b:6f:c5:8f:a2:51:23:
                    62:aa:2a:e3:36:3b:31:77:d2:56:69:8b:e9:fa:74:
                    e7:cd:d9:cb:7c:49:15:1d:f3:4b:48:4c:40:f8:b5:
                    28:f5:91:e6:98:40:10:9c:0e:40:38:be:a5:fe:d1:
                    68:9f:74:26:7a:9b:4f:aa:c2:90:74:68:c5:b0:8e:
                    69:0f:2c:bc:2b:f2:a9:32:17:10:65:7c:26:9b:53:
                    eb:ab:1c:74:3c:e0:22:08:84:d1:dc:69:77:cc:db:
                    4b:6f:2e:1c:24:fb:fb:5e:e6:d5:b6:cd:4e:36:89:
                    54:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5F:B5:3A:AE:79:E3:14:BF:D4:37:2D:AA:CE:84:93:FC:EF:B7:34
            X509v3 Authority Key Identifier:
                keyid:48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/16572A3CEB3511F08C2D5B303F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.164.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         14:7d:1d:f1:75:b2:48:3f:aa:17:81:cb:a9:c4:3f:c0:50:47:
         1e:28:9f:89:8e:6c:72:53:2d:f1:f2:ec:1b:81:d9:86:46:22:
         78:c4:b0:e9:68:f2:70:c2:db:77:71:01:c5:15:8a:e4:23:67:
         6c:43:ab:f8:80:0d:ea:dc:a8:45:3c:44:24:94:d4:b3:a3:13:
         15:da:ee:e4:a7:1f:b3:9d:d6:2c:c7:17:eb:2a:bd:ff:0c:8d:
         41:f5:60:c0:a2:d9:22:84:cb:a2:cb:b6:6e:85:f8:8f:bd:b6:
         a3:89:ce:9a:c3:81:1c:82:04:9e:dd:32:76:02:b2:fd:77:7d:
         e3:01:54:df:8d:ee:05:93:85:1c:1f:98:ce:8b:a1:07:ab:4b:
         71:9f:7b:14:56:a3:c0:0e:b2:1a:3b:9b:da:b5:b4:be:aa:f5:
         57:7b:d5:e0:b6:59:67:02:2c:89:0a:17:ba:12:0f:4e:e1:02:
         19:82:eb:9f:46:c5:a1:6a:56:0f:4a:f1:49:a6:6b:f8:c8:50:
         66:ce:9f:6e:57:be:9a:6b:ea:c3:f2:90:45:44:34:b9:37:72:
         f9:12:c0:8f:8d:a1:aa:88:c7:d9:30:1d:c4:8a:48:60:bd:3f:
         dc:2d:48:d2:82:80:63:f6:98:88:b6:c8:e0:ae:c8:a6:df:63:
         18:5a:ca:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:48:59 2026 by rpki-client