Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/515B1CD254EB11F0B04DBD37C4F9AE02.roa
File:                     515B1CD254EB11F0B04DBD37C4F9AE02.roa (raw, json)
Hash identifier:          nKGpkEspHYoLDWlKrq+T1eLZcO38KBQKAU4XkN0Vf1Q=
Subject key identifier:   D3:F6:C7:25:C3:9C:3C:09:19:3D:99:D7:50:9A:5F:E0:02:95:0C:71
Certificate issuer:       /CN=A916DA3F/serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D
Certificate serial:       06DB
Authority key identifier: 7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/515B1CD254EB11F0B04DBD37C4F9AE02.roa
Signing time:             Fri 31 Jul 2026 23:43:18 +0000
ROA not before:           Fri 31 Jul 2026 23:43:18 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     9318
IP address blocks:        103.116.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl
                          rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Aug 2026 22:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1755 (0x6db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DA3F, serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D
        Validity
            Not Before: Jul 31 23:43:18 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a6d3316-e450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7e:d3:40:62:aa:26:c5:d4:97:20:13:c1:e7:
                    f4:a0:e4:01:9f:ee:77:f2:23:ad:50:59:47:e3:2d:
                    f7:b9:90:d5:c8:d1:cc:94:a6:d6:02:61:9d:3f:1e:
                    65:d5:40:6d:52:a1:6b:7f:ab:63:41:59:f3:51:64:
                    95:05:ba:61:be:93:1c:23:12:9a:dc:63:ad:b9:a2:
                    6c:0e:84:e3:d9:3c:bb:ee:e1:23:75:ab:a8:a2:60:
                    76:51:17:de:74:75:e2:e8:e6:fb:0c:dd:2b:2c:47:
                    f9:85:a2:95:93:ae:e7:2a:23:51:1f:2e:70:ec:ec:
                    93:f5:91:e0:c6:14:48:60:4b:1c:27:7b:20:40:ed:
                    f9:3f:9d:fd:4d:df:07:05:a5:06:a9:31:79:3a:8a:
                    87:f0:13:bd:68:b8:99:dc:07:c3:94:52:95:9f:a2:
                    84:b3:74:9c:e0:92:9d:58:2c:c8:7f:64:ed:f7:63:
                    09:b0:3b:c9:28:05:65:5a:82:7d:a6:c9:23:fa:8f:
                    3a:3e:77:b1:64:81:b9:44:cd:c8:3b:33:06:12:46:
                    b2:cb:a1:60:a0:8b:c4:fa:1f:92:9d:0b:9e:5c:9d:
                    e9:52:a6:cf:31:23:cc:7e:8c:d0:20:ca:e2:e4:e2:
                    fd:38:d5:b2:f6:4a:13:60:ba:fd:2c:53:36:3a:df:
                    91:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F6:C7:25:C3:9C:3C:09:19:3D:99:D7:50:9A:5F:E0:02:95:0C:71
            X509v3 Authority Key Identifier:
                keyid:7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/515B1CD254EB11F0B04DBD37C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:f0:0a:1a:61:2d:42:ed:29:81:0c:4b:4f:14:98:6d:4f:c4:
         9a:24:e8:21:3e:2b:83:0a:c7:94:5d:4d:e0:c5:4f:c4:43:eb:
         af:84:09:c7:7f:43:06:fe:33:b8:37:67:b4:30:db:61:b4:d7:
         44:3b:9b:87:f3:98:0f:35:a9:bd:3a:e2:58:63:f1:aa:b1:21:
         36:3e:ac:f8:2c:fc:1b:6d:9b:90:ea:4b:44:00:a1:05:2c:20:
         ec:d3:7e:d1:35:73:87:9c:2d:ea:20:09:ba:6a:46:84:4f:22:
         48:1c:db:ee:e0:a8:34:9d:90:04:27:02:5c:5d:cb:4b:47:2a:
         cb:08:a9:3d:18:cd:3e:5e:f9:24:c4:4a:3c:d1:63:77:ad:19:
         c6:df:f3:b5:28:9c:56:7b:ca:15:28:40:39:0c:c9:68:7b:66:
         da:db:d6:e7:8a:f0:b7:7d:4d:af:bf:18:7c:f8:9e:a9:a2:a7:
         51:3f:48:5b:c8:d6:a7:df:27:5b:66:0c:54:60:81:13:0b:6e:
         f4:16:47:8c:ff:c3:60:b5:6e:b2:2a:52:91:87:22:4e:3f:2c:
         a4:27:3e:c7:74:60:37:79:6b:43:77:97:44:dd:57:e2:16:36:
         ff:5f:f0:d2:8f:0a:d4:47:f7:51:67:49:2f:6d:1b:bd:30:6e:
         ae:2f:ba:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:20:39 2026 by rpki-client