Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/81263468A86611F1AD29717D4511F970.roa
File:                     81263468A86611F1AD29717D4511F970.roa (raw, json)
Hash identifier:          O38Gm5DIBzbnesWMUjIbkZ/kmo2s/7k/PfJ1TeLx/wM=
Subject key identifier:   AC:60:82:3C:33:A8:FD:D7:98:35:6D:07:50:31:E9:2F:A7:7C:24:9E
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3C0D
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/81263468A86611F1AD29717D4511F970.roa
Signing time:             Fri 04 Sep 2026 13:47:48 +0000
ROA not before:           Fri 04 Sep 2026 13:47:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209372
IP address blocks:        115.186.76.0/23 maxlen: 24
                          115.186.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 14:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15373 (0x3c0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Sep  4 13:47:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a9acc04-5dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4d:6f:92:7b:5b:c4:ef:7a:cd:0d:3d:03:c0:
                    d9:7d:5e:b6:24:a9:1b:b0:19:e9:4c:b4:ba:5f:2d:
                    6d:77:99:17:cd:8c:61:ed:31:75:b9:86:ed:0f:f2:
                    08:7e:a2:a4:e5:48:ba:d6:ba:f9:11:58:0f:fa:48:
                    93:9c:39:5c:10:86:98:9e:96:bf:8a:18:e9:ed:9a:
                    73:4b:00:59:1f:da:7f:96:fa:58:ab:90:b5:a3:1b:
                    18:19:f3:f9:2d:bf:d6:99:1e:80:f3:03:19:70:25:
                    2d:1c:2e:36:ec:70:32:52:cb:0a:60:de:69:63:97:
                    d8:d1:49:9f:c3:4b:95:58:6f:c2:66:69:da:31:fb:
                    4c:ed:d9:95:4d:8d:57:88:d5:3b:ce:63:4e:26:88:
                    64:96:95:b2:ab:1b:88:34:e8:b8:10:a9:ae:dd:cf:
                    46:f2:9f:ed:fd:9a:6c:18:7c:da:5b:8d:93:b1:66:
                    5a:14:f4:12:21:73:25:d5:10:9d:5c:fd:7c:b4:7a:
                    af:b1:72:e9:88:ff:7c:6d:47:2a:a1:cb:6f:24:76:
                    ea:23:55:6b:81:f1:42:be:1d:86:78:27:07:dc:11:
                    52:ae:73:26:e1:6f:26:bb:0f:d4:1e:8a:b0:f4:99:
                    1b:d0:72:f5:28:fb:ee:89:28:dd:0d:09:1f:e9:ea:
                    14:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:60:82:3C:33:A8:FD:D7:98:35:6D:07:50:31:E9:2F:A7:7C:24:9E
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/81263468A86611F1AD29717D4511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.186.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:5a:d0:d3:fe:fb:0e:ba:7a:d6:a2:c2:12:a2:c6:ab:5d:e8:
         4c:eb:3c:ee:8b:c5:e1:b3:dc:3b:5f:b4:64:20:1b:bb:e8:d0:
         05:d3:d0:2f:33:cc:38:00:98:42:7f:64:4e:3f:ff:03:a6:11:
         6c:9a:59:a1:e7:72:17:f4:25:33:6e:a4:45:15:0c:0a:c3:e3:
         44:99:19:79:bf:0b:36:4c:61:5c:3d:52:a9:31:55:ae:d0:5b:
         45:f2:20:19:97:95:97:f6:8f:2b:5c:89:99:35:fa:4a:c1:9d:
         23:ec:c1:89:d4:ce:7f:d7:bd:9f:11:8b:72:e9:b2:b5:ad:d2:
         c8:00:1e:62:ce:c9:43:83:48:11:ee:95:d6:98:c1:a4:f6:b7:
         91:3f:89:d5:cf:d9:69:54:25:4e:3a:94:69:2c:24:66:e9:b1:
         69:13:20:f5:56:71:e2:47:3a:ac:65:02:ce:a2:dd:16:bf:f8:
         66:ca:e4:c6:93:4a:37:1b:e3:0f:78:7c:a3:f3:05:36:6e:82:
         4c:b1:b9:d3:bb:99:d7:d5:5a:75:4f:ec:65:76:fc:ab:d6:72:
         e6:f8:87:77:99:b9:1f:28:b6:42:7c:33:8c:5d:20:1e:b4:cf:
         91:00:69:e5:ea:45:21:26:4b:7a:10:ac:56:bf:1e:29:bc:0f:
         72:1e:a1:97
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICPA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjYwOTA0MTM0NzQ4WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTlhY2MwNC01ZGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsk1vkntbxO96zQ09A8DZfV62JKkbsBnpTLS6Xy1td5kXzYxh7TF1uYbtD/II
fqKk5Ui61rr5EVgP+kiTnDlcEIaYnpa/ihjp7ZpzSwBZH9p/lvpYq5C1oxsYGfP5
Lb/WmR6A8wMZcCUtHC427HAyUssKYN5pY5fY0Umfw0uVWG/CZmnaMftM7dmVTY1X
iNU7zmNOJohklpWyqxuINOi4EKmu3c9G8p/t/ZpsGHzaW42TsWZaFPQSIXMl1RCd
XP18tHqvsXLpiP98bUcqoctvJHbqI1VrgfFCvh2GeCcH3BFSrnMm4W8muw/UHoqw
9Jkb0HL1KPvuiSjdDQkf6eoUCQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKxggjwz
qP3XmDVtB1Ax6S+nfCSeMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvODEyNjM0NjhB
ODY2MTFGMUFEMjk3MTdENDUxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCc7pMMA0GCSqGSIb3DQEBCwUAA4IBAQAJWtDT/vsOunrWosISosar
XehM6zzui8Xhs9w7X7RkIBu76NAF09AvM8w4AJhCf2ROP/8DphFsmlmh53IX9CUz
bqRFFQwKw+NEmRl5vws2TGFcPVKpMVWu0FtF8iAZl5WX9o8rXImZNfpKwZ0j7MGJ
1M5/172fEYty6bK1rdLIAB5izslDg0gR7pXWmMGk9reRP4nVz9lpVCVOOpRpLCRm
6bFpEyD1VnHiRzqsZQLOot0Wv/hmyuTGk0o3G+MPeHyj8wU2boJMsbnTu5nX1Vp1
T+xldvyr1nLm+Id3mbkfKLZCfDOMXSAetM+RAGnl6kUhJkt6EKxWvx4pvA9yHqGX
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:22:38 2026 by rpki-client