Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/C6856EE29AF711F195C781C55811F970.roa
File:                     C6856EE29AF711F195C781C55811F970.roa (raw, json)
Hash identifier:          8P5MvFhnnZ5D3PPJut60FkX7BxkqwS/H/o8JDXdmUzg=
Subject key identifier:   1F:5F:BF:B9:9D:8E:30:99:34:EF:5F:C9:E7:FD:58:8D:30:A2:C1:1B
Certificate issuer:       /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Certificate serial:       056B
Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/C6856EE29AF711F195C781C55811F970.roa
Signing time:             Tue 18 Aug 2026 11:42:31 +0000
ROA not before:           Tue 18 Aug 2026 11:42:31 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     153038
IP address blocks:        116.204.140.0/22 maxlen: 22
                          116.204.140.0/23 maxlen: 23
                          116.204.140.0/24 maxlen: 24
                          116.204.141.0/24 maxlen: 24
                          116.204.142.0/23 maxlen: 23
                          116.204.142.0/24 maxlen: 24
                          116.204.143.0/24 maxlen: 24
                          2400:c7c0::/32 maxlen: 32
                          2400:c7c0::/48 maxlen: 48
                          2400:c7c0:4000::/34 maxlen: 34
                          2400:c7c0:4000::/40 maxlen: 40
                          2400:c7c0:4000::/48 maxlen: 48
                          2400:c7c0:43c0::/43 maxlen: 43
                          2400:c7c0:43c0::/48 maxlen: 48
                          2400:c7c0:43e0::/43 maxlen: 43
                          2400:c7c0:43e0::/48 maxlen: 48
                          2400:c7c0:43e1::/48 maxlen: 48
                          2400:c7c0:43e2::/48 maxlen: 48
                          2400:c7c0:43e3::/48 maxlen: 48
                          2400:c7c0:43e4::/48 maxlen: 48
                          2400:c7c0:43e5::/48 maxlen: 48
                          2400:c7c0:43e6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
                          rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 23:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1387 (0x56b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
        Validity
            Not Before: Aug 18 11:42:31 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a844527-9aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7a:f4:56:87:9c:13:b6:0e:f2:e4:5b:31:0e:
                    d3:93:13:6f:07:5b:cd:52:97:0c:b8:9e:16:20:33:
                    82:8e:6b:5b:2b:30:39:52:d6:e0:1c:c2:89:f9:9d:
                    74:fd:69:6b:f4:c1:53:52:62:57:78:7d:c0:b8:fb:
                    97:f8:ac:89:ae:a6:12:56:a6:9d:d0:50:53:83:51:
                    f7:0e:b5:b6:97:74:59:4d:e2:f8:c6:e8:7d:7f:f3:
                    c3:20:30:91:4c:79:c1:1a:f8:90:f1:ce:c3:6d:a3:
                    c7:0e:86:e4:a1:31:7b:69:eb:bf:01:30:2e:5d:05:
                    2d:c1:de:26:7a:d2:3e:cf:f1:08:e9:80:8f:02:23:
                    57:6b:4c:ba:72:d9:a6:76:ba:30:82:a5:6f:8b:7f:
                    4d:50:77:1a:77:2d:f1:6a:b0:9d:a6:75:04:3d:3f:
                    d0:4a:88:9c:22:54:e6:42:3e:32:98:85:f7:82:28:
                    3b:5f:57:4e:ca:15:03:7d:0c:34:61:fe:87:94:29:
                    23:38:55:5f:63:f3:74:ee:de:6a:87:1d:b8:4e:5e:
                    33:c0:c2:25:43:96:61:ef:a8:43:b6:57:f2:29:03:
                    d2:4d:ca:37:18:7e:cc:31:b8:d2:30:d6:82:69:be:
                    bc:f7:7f:d5:bb:ec:d9:93:df:48:d0:f7:31:4e:e3:
                    c6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5F:BF:B9:9D:8E:30:99:34:EF:5F:C9:E7:FD:58:8D:30:A2:C1:1B
            X509v3 Authority Key Identifier:
                keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/C6856EE29AF711F195C781C55811F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.204.140.0/22
                IPv6:
                  2400:c7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:76:a4:88:49:b8:c3:d7:45:55:86:94:9c:fb:82:29:16:33:
         d9:0b:37:7d:38:7c:84:78:98:be:e2:f1:f9:9d:38:58:6d:65:
         cd:99:42:52:92:ee:71:65:3a:5e:35:90:45:a4:ac:fe:21:23:
         72:18:f3:e1:db:26:5f:31:96:ef:a7:55:40:15:77:58:8e:14:
         fb:04:8c:3c:34:a7:14:74:06:51:89:28:43:4a:7d:9b:8a:20:
         b5:b7:b7:3b:54:16:90:d1:be:a9:85:c0:70:96:97:1f:63:b8:
         68:c2:c5:bc:c6:a2:d2:2a:e2:a0:a5:cc:71:67:58:de:43:84:
         3b:17:6b:0b:4e:bc:02:25:4b:d5:d6:99:b4:eb:00:d1:66:e5:
         e2:66:44:61:57:f1:5a:df:8e:99:a8:a8:8a:92:2b:a3:59:33:
         22:40:e4:b9:10:58:93:89:2a:fe:b0:d2:1c:6b:03:72:75:16:
         3f:c1:7f:53:de:74:94:f8:31:10:4e:69:46:21:ce:1b:24:37:
         b1:23:ee:24:7c:df:a6:21:77:16:82:2c:ca:4f:6d:5e:26:f8:
         94:f1:4c:6b:8d:a6:49:b7:d9:10:46:d5:6c:fd:ed:04:ab:7b:
         f0:a4:22:d2:53:7d:b6:64:31:92:d5:a4:ba:2d:78:57:66:64:
         97:1a:9c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:04:48 2026 by rpki-client