Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/06B47656E38A11EFA4DDBC1EC4F9AE02.roa
File:                     06B47656E38A11EFA4DDBC1EC4F9AE02.roa (raw, json)
Hash identifier:          1ZjplIT3cgd+cosCI1JnL6/1YdmyRniKzJuka+Wx680=
Subject key identifier:   E6:BF:91:10:44:4D:B9:4C:5B:D6:12:E2:CB:DB:D0:1D:ED:2F:28:D5
Certificate issuer:       /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Certificate serial:       0542
Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/06B47656E38A11EFA4DDBC1EC4F9AE02.roa
Signing time:             Fri 03 Jul 2026 00:25:33 +0000
ROA not before:           Fri 03 Jul 2026 00:25:33 +0000
ROA not after:            Sun 01 Nov 2026 00:00:00 +0000
asID:                     153038
IP address blocks:        116.204.140.0/22 maxlen: 22
                          116.204.140.0/23 maxlen: 23
                          116.204.140.0/24 maxlen: 24
                          116.204.141.0/24 maxlen: 24
                          116.204.142.0/23 maxlen: 23
                          116.204.142.0/24 maxlen: 24
                          116.204.143.0/24 maxlen: 24
                          2400:c7c0::/48 maxlen: 48
                          2400:c7c0:4000::/34 maxlen: 34
                          2400:c7c0:4000::/40 maxlen: 40
                          2400:c7c0:4000::/48 maxlen: 48
                          2400:c7c0:43c0::/43 maxlen: 43
                          2400:c7c0:43c0::/48 maxlen: 48
                          2400:c7c0:43e0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
                          rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Jul 2026 00:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1346 (0x542)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
        Validity
            Not Before: Jul  3 00:25:33 2026 GMT
            Not After : Nov  1 00:00:00 2026 GMT
        Subject: CN=6a47017c-7226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1b:d6:f8:62:81:d7:4a:b3:b0:45:9f:24:eb:
                    a5:58:d3:d6:01:67:fb:4c:53:ec:74:ab:2d:a2:7b:
                    3f:5e:c7:7e:9b:92:13:1c:c7:3a:18:35:a6:da:9a:
                    bf:83:27:03:bb:13:d8:00:92:9d:84:9d:ad:e8:ef:
                    46:7e:3c:b9:6d:a1:5f:f4:cf:cb:9a:d2:5d:6b:df:
                    bf:a0:64:12:d4:37:46:6a:2b:36:67:b7:b2:79:80:
                    b3:20:a6:4f:69:24:14:7c:58:eb:4f:a0:75:57:c7:
                    81:19:e7:9f:49:fc:b9:cd:84:1d:21:17:46:ac:e7:
                    03:08:fa:18:3e:64:49:77:87:91:7f:77:a3:5b:3c:
                    fc:b4:17:fa:6b:d5:c0:de:34:0d:9d:78:f0:62:3e:
                    04:13:71:4d:e7:c3:95:6b:e8:cd:04:aa:b6:8b:84:
                    4e:d4:b1:86:da:d8:a7:aa:39:92:5e:5d:c4:a7:35:
                    84:ac:04:09:e2:70:2a:10:98:0a:ce:92:21:77:c0:
                    85:f4:a9:65:a4:df:71:36:17:64:eb:e8:69:02:a3:
                    45:c0:6b:71:d5:49:4e:b0:c1:c3:ad:4d:b1:93:61:
                    da:ad:28:64:08:ab:74:d7:1a:a3:3f:04:b7:ce:79:
                    e7:4f:8a:69:41:18:a7:1d:fd:c7:5c:02:10:7d:91:
                    08:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BF:91:10:44:4D:B9:4C:5B:D6:12:E2:CB:DB:D0:1D:ED:2F:28:D5
            X509v3 Authority Key Identifier:
                keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/06B47656E38A11EFA4DDBC1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.204.140.0/22
                IPv6:
                  2400:c7c0::/48
                  2400:c7c0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         71:e2:43:83:bb:a3:d0:1c:3d:63:2c:9b:4f:25:ea:95:d7:86:
         0c:4f:ef:74:94:bc:dd:39:6a:f8:45:0c:95:94:9f:17:ce:3d:
         0c:a0:06:cf:93:a1:4d:ae:c0:8e:59:a6:69:24:f4:02:a1:f3:
         19:ae:fb:fe:ba:67:3e:68:9f:69:68:77:48:f1:4a:aa:57:03:
         4b:9d:5f:b3:9c:90:2a:47:1f:55:d7:05:74:4e:fc:fb:54:67:
         b1:b1:6c:e7:39:67:be:50:5f:3d:5d:64:9a:3e:d3:cf:5f:48:
         d3:db:b6:6f:5d:36:c0:41:c4:52:67:f6:14:28:8c:f8:fb:68:
         63:81:fd:64:ab:37:28:64:f9:67:64:b3:bd:3c:95:ca:11:dd:
         7a:94:7c:62:3a:ed:4d:22:c6:31:6d:96:dd:b2:ec:75:6d:91:
         d3:31:a5:3d:f2:15:b6:a7:80:30:a9:f7:3a:2e:29:16:2e:24:
         52:50:be:2c:4d:a6:c9:81:17:9e:7b:46:11:16:a1:a4:a0:70:
         98:8f:9b:5b:d7:5e:47:ba:90:10:e1:a2:02:51:e9:2e:65:d2:
         d2:fd:07:1e:ca:0f:c7:26:46:0b:cc:79:bd:68:25:02:99:68:
         c8:cf:df:40:78:c0:56:a8:cb:1b:e6:86:f4:98:ac:d8:78:bd:
         7f:71:fb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 11:03:32 2026 by rpki-client