Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/B2A83A1296C911F1ABBBAC335411F970.roa
File:                     B2A83A1296C911F1ABBBAC335411F970.roa (raw, json)
Hash identifier:          m9UsV7UjjMZ2WOx/GR0cXTiQls2vgjpyqNyxc4Qnugk=
Subject key identifier:   7E:DE:C0:33:F1:3B:12:B2:B8:FC:9D:D4:26:A4:88:F0:A1:44:42:3C
Certificate issuer:       /CN=A916F57A/serialNumber=63C71FEB1391F63340C8CF0FD111CFEF22BAC897
Certificate serial:       02
Authority key identifier: 63:C7:1F:EB:13:91:F6:33:40:C8:CF:0F:D1:11:CF:EF:22:BA:C8:97
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/B2A83A1296C911F1ABBBAC335411F970.roa
Signing time:             Thu 13 Aug 2026 03:47:26 +0000
ROA not before:           Thu 13 Aug 2026 03:47:26 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     132815
IP address blocks:        167.179.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.crl
                          rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 09:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916F57A, serialNumber=63C71FEB1391F63340C8CF0FD111CFEF22BAC897
        Validity
            Not Before: Aug 13 03:47:26 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a7d3e4e-3ee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c5:79:be:5c:ea:4e:46:76:a8:dc:b0:d1:4f:
                    7b:cb:03:d2:cb:b5:8c:42:ee:81:a8:74:e0:86:75:
                    5c:85:5c:99:8d:08:69:be:2b:d2:87:a8:79:36:4b:
                    47:13:b2:ac:a4:fb:ed:17:14:95:7d:07:8e:ea:fd:
                    5f:93:97:52:84:8e:ee:fe:42:07:35:e4:fb:99:db:
                    cd:7f:44:d1:0e:a7:c6:92:41:97:7d:a6:81:01:d1:
                    96:5e:1d:d1:c8:86:47:6b:a6:ed:54:b8:9b:d0:48:
                    28:ff:95:5e:52:6e:a7:18:f5:e9:5b:6c:69:0a:9c:
                    9f:6e:91:80:69:b7:e0:a7:2e:f0:f9:8f:b0:83:de:
                    c5:43:f4:0e:8e:45:a6:17:bf:45:6e:2b:8c:49:d0:
                    3b:f5:d0:4b:9e:4f:ec:fb:57:e4:0a:ac:bd:d5:da:
                    6b:a9:07:fe:a1:77:2d:f9:63:a5:39:44:05:e2:c2:
                    85:dd:4f:5c:38:b3:67:b5:c7:57:70:d1:78:1d:bb:
                    7c:04:63:68:f9:7c:b0:be:3d:e0:94:f8:45:09:58:
                    98:5e:0d:12:7b:a0:8e:21:2f:76:00:d6:f1:86:40:
                    4c:06:01:12:a7:5c:2b:56:26:aa:50:3c:48:ff:3f:
                    68:90:cc:64:c4:d4:f2:93:2c:17:25:6d:e0:8b:99:
                    c9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DE:C0:33:F1:3B:12:B2:B8:FC:9D:D4:26:A4:88:F0:A1:44:42:3C
            X509v3 Authority Key Identifier:
                keyid:63:C7:1F:EB:13:91:F6:33:40:C8:CF:0F:D1:11:CF:EF:22:BA:C8:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Y8cf6xOR9jNAyM8P0RHP7yK6yJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F57A/99AF211696C811F1A6C2AC135411F970/B2A83A1296C911F1ABBBAC335411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:d7:f7:b2:a7:30:c5:e7:52:e3:ea:21:56:62:d0:c6:3d:71:
         09:30:03:05:0f:3d:2b:a0:11:6b:67:06:f7:60:25:59:e1:62:
         27:d5:24:54:a0:70:92:53:0c:02:8a:3d:78:b1:98:e9:0b:6a:
         2e:fb:a7:67:21:0a:5d:55:82:6c:95:05:43:cb:8a:c1:e4:79:
         3d:64:57:9d:d4:fd:67:16:fa:3a:db:1b:69:a2:30:5c:e7:24:
         cf:79:32:3f:36:1c:5d:8b:56:58:31:91:40:7d:c1:a1:a2:5a:
         32:d6:a0:42:4f:dd:d6:91:79:18:ff:cd:d3:08:3e:73:7f:1f:
         02:85:d8:bc:92:1c:17:41:bb:4b:c3:24:f9:ef:dd:d9:f0:8f:
         a3:af:1a:9f:d0:2f:6b:a0:b2:f7:c2:8f:d4:b8:c7:5d:ef:39:
         37:27:1c:c8:2d:95:58:9d:75:2b:d2:68:9d:29:b3:4b:22:25:
         3d:a9:99:2d:e0:c6:3e:84:ba:f1:8a:1e:0a:7a:5a:4f:73:8f:
         1b:2b:92:e1:ba:1e:8f:7d:6c:4e:aa:54:96:a5:24:32:c9:d0:
         91:7f:4f:47:53:26:f3:8a:02:b1:24:ef:3b:ea:88:b4:f7:05:
         4d:24:b4:4f:f5:8a:60:b0:d5:a1:63:e1:14:97:63:72:a5:74:
         08:ce:82:64
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 26 23:13:38 2026 by rpki-client