Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/E1C4E06CA86611F1A06FFE804511F970.roa
File:                     E1C4E06CA86611F1A06FFE804511F970.roa (raw, json)
Hash identifier:          KLkNbLn6X+M0vNBiSz80RHaLDjJDf9hBdL/AfvF56Jc=
Subject key identifier:   3C:1A:C3:48:55:66:AF:C7:29:E2:A8:85:14:D9:A8:CB:4F:73:58:3C
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3C0B
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/E1C4E06CA86611F1A06FFE804511F970.roa
Signing time:             Fri 04 Sep 2026 13:46:50 +0000
ROA not before:           Fri 04 Sep 2026 13:46:50 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213541
IP address blocks:        115.186.76.0/23 maxlen: 24
                          115.186.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 14:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15371 (0x3c0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Sep  4 13:46:50 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a9acbca-5118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:db:3d:7a:ee:c3:35:b9:a8:5f:d7:a0:1b:68:
                    4f:42:83:c2:51:f8:b8:7e:b7:02:55:b6:17:ad:e6:
                    0a:d4:c8:5b:9e:19:39:49:18:38:15:81:3c:01:6a:
                    24:7b:f6:22:8b:9d:be:65:f7:39:1f:0e:e0:75:14:
                    59:82:20:7a:08:27:1b:0a:8c:91:38:79:af:7a:61:
                    2e:75:f6:74:ab:cd:cf:ea:77:75:7c:25:c8:fa:62:
                    07:41:79:80:ed:8d:da:4f:1e:9d:0c:43:f9:36:cf:
                    97:72:93:0a:0b:e6:96:a0:02:06:11:ec:c9:6f:1f:
                    0b:fc:8a:4f:3e:46:36:ff:bc:5f:37:52:fe:62:fa:
                    8d:c7:1d:62:2c:b4:c2:ed:e0:f8:54:0b:82:81:8d:
                    fb:9a:a9:fc:7c:8f:1a:5d:a4:1f:56:0d:f9:e9:c9:
                    65:38:0f:b0:63:83:cf:f9:45:1b:3e:58:d6:c4:ec:
                    62:74:f1:6f:a5:18:80:54:ad:0a:33:6d:38:0e:30:
                    8b:9f:43:14:d8:32:82:05:3d:bb:0c:1a:4f:41:97:
                    27:1c:33:dc:24:c9:b8:e3:fc:6b:3b:3a:0e:6d:cd:
                    df:21:56:e3:c6:41:22:d2:40:d4:da:24:30:cb:34:
                    aa:1f:02:11:f4:9e:5a:9d:6a:46:61:68:a7:72:eb:
                    9d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1A:C3:48:55:66:AF:C7:29:E2:A8:85:14:D9:A8:CB:4F:73:58:3C
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/E1C4E06CA86611F1A06FFE804511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.186.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:7b:b9:51:4f:27:25:c2:b4:b0:38:9b:50:c9:52:fd:02:a9:
         6e:99:8d:71:f9:f3:ea:31:c7:ca:e2:a4:dc:0d:5e:25:19:50:
         07:8f:25:89:ab:75:57:96:26:c3:04:de:69:11:38:ed:14:0f:
         6d:53:d0:73:88:7e:6b:1a:8d:ea:8d:46:bf:3d:9b:7e:90:51:
         e7:dc:6a:91:76:02:97:4f:4b:23:88:c4:ec:01:9f:19:78:f3:
         bc:02:e8:a7:39:7e:5c:55:42:ad:36:a4:a1:e6:fd:be:ba:fb:
         69:fd:bb:a6:c9:76:08:33:98:dc:2c:ca:4f:1b:18:25:ab:7a:
         af:9c:9d:91:62:15:55:68:59:42:d9:59:5e:c5:8b:e0:a4:ee:
         6a:51:a2:07:9c:45:64:3c:89:3e:e1:a9:4a:3a:b4:b8:0a:8a:
         c4:18:22:4f:c0:9e:a2:d8:ca:9b:e0:a1:94:48:67:14:6e:27:
         fd:d1:df:05:d8:6e:02:6b:1e:be:34:13:a3:9b:ac:0d:45:71:
         d7:f7:1f:8f:bd:5e:f9:8b:99:6a:ca:4d:ee:15:68:88:cb:cb:
         35:93:00:42:f4:53:89:ae:d2:58:5d:bc:dc:e6:c5:4a:d2:65:
         81:da:b7:34:fc:11:cb:91:ac:6f:ad:4d:5d:4c:bf:b2:c9:ae:
         cd:fd:5f:f4
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICPAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjYwOTA0MTM0NjUwWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTlhY2JjYS01MTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuts9eu7DNbmoX9egG2hPQoPCUfi4frcCVbYXreYK1Mhbnhk5SRg4FYE8AWok
e/Yii52+Zfc5Hw7gdRRZgiB6CCcbCoyROHmvemEudfZ0q83P6nd1fCXI+mIHQXmA
7Y3aTx6dDEP5Ns+XcpMKC+aWoAIGEezJbx8L/IpPPkY2/7xfN1L+YvqNxx1iLLTC
7eD4VAuCgY37mqn8fI8aXaQfVg356cllOA+wY4PP+UUbPljWxOxidPFvpRiAVK0K
M204DjCLn0MU2DKCBT27DBpPQZcnHDPcJMm44/xrOzoObc3fIVbjxkEi0kDU2iQw
yzSqHwIR9J5anWpGYWincuudrQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDwaw0hV
Zq/HKeKohRTZqMtPc1g8MB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvRTFDNEUwNkNB
ODY2MTFGMUEwNkZGRTgwNDUxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCc7pMMA0GCSqGSIb3DQEBCwUAA4IBAQBye7lRTyclwrSwOJtQyVL9
AqlumY1x+fPqMcfK4qTcDV4lGVAHjyWJq3VXlibDBN5pETjtFA9tU9BziH5rGo3q
jUa/PZt+kFHn3GqRdgKXT0sjiMTsAZ8ZePO8AuinOX5cVUKtNqSh5v2+uvtp/bum
yXYIM5jcLMpPGxglq3qvnJ2RYhVVaFlC2VlexYvgpO5qUaIHnEVkPIk+4alKOrS4
CorEGCJPwJ6i2Mqb4KGUSGcUbif90d8F2G4Cax6+NBOjm6wNRXHX9x+PvV75i5lq
yk3uFWiIy8s1kwBC9FOJrtJYXbzc5sVK0mWB2rc0/BHLkaxvrU1dTL+yya7N/V/0
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:02:35 2026 by rpki-client