Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/D1BE6E58D19311F1A36A2E992466CEF9.roa
File:                     D1BE6E58D19311F1A36A2E992466CEF9.roa (raw, json)
Hash identifier:          8TRpkvZmWVfW96wOKULtdC3at6HyJA+VoUEtMUR5DgQ=
Subject key identifier:   2F:95:D6:42:1D:89:6E:03:06:B8:FF:72:81:A6:90:24:28:56:4A:59
Certificate issuer:       /CN=A918C287/serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26
Certificate serial:       E2
Authority key identifier: BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/D1BE6E58D19311F1A36A2E992466CEF9.roa
Signing time:             Mon 26 Oct 2026 23:20:23 +0000
ROA not before:           Mon 26 Oct 2026 23:20:23 +0000
ROA not after:            Sat 01 May 2038 00:00:00 +0000
asID:                     45163
IP address blocks:        203.176.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.crl
                          rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 08:05:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C287, serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26
        Validity
            Not Before: Oct 26 23:20:23 2026 GMT
            Not After : May  1 00:00:00 2038 GMT
        Subject: CN=6adfe037-018c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8d:4a:a2:1b:d4:71:99:65:15:37:10:33:c1:
                    a1:20:1c:93:6e:a3:ab:b0:9e:84:76:27:b4:46:f2:
                    f7:ed:25:c2:02:09:f8:7f:3f:e6:80:ff:fe:4b:6a:
                    db:0f:f6:16:b4:53:cb:06:17:9e:06:09:2a:08:25:
                    60:2d:57:3f:b4:4a:22:72:a3:ae:3c:52:68:37:e4:
                    a1:7b:8a:5e:2c:9d:36:bb:f3:26:53:2e:7f:fe:99:
                    9e:47:ec:5e:c4:95:8e:84:79:61:03:42:6e:53:d8:
                    11:cd:ad:7f:a0:63:ef:6a:95:1b:c4:40:52:bc:d9:
                    9b:dd:3e:d8:9f:79:05:42:96:e1:5f:8e:15:56:35:
                    4f:63:63:80:9f:d0:f1:95:d6:ce:09:4f:58:46:3f:
                    ac:71:07:0b:cb:3c:ce:bc:2c:f0:0d:9a:e6:5a:2f:
                    ec:a3:ca:d2:5a:41:e2:bf:ef:58:8e:b0:b5:15:2e:
                    32:01:b0:06:b3:d1:a4:d3:9d:fb:7e:3c:e3:29:49:
                    cf:92:3b:0a:23:a1:18:40:40:5d:0a:2a:fb:96:f9:
                    1b:15:a9:31:ac:4a:33:5b:d6:f4:45:76:bb:2c:b5:
                    6c:25:81:4a:5a:4b:6f:c0:a5:1b:4b:bf:dc:d7:79:
                    0d:e7:6d:1b:24:8d:6d:ef:65:9e:ee:f6:ec:dc:ea:
                    07:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:95:D6:42:1D:89:6E:03:06:B8:FF:72:81:A6:90:24:28:56:4A:59
            X509v3 Authority Key Identifier:
                keyid:BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/D1BE6E58D19311F1A36A2E992466CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.176.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:0f:35:33:42:df:2a:4c:6a:19:2f:af:ca:26:af:69:7d:66:
         86:69:61:69:15:96:ff:bd:06:74:b3:e0:08:2f:53:54:2c:0f:
         68:71:fe:26:14:ff:53:70:04:49:8d:fa:84:40:fe:09:1a:9a:
         25:da:62:2d:a2:00:c1:31:e1:fb:79:db:54:6a:b3:42:7c:a1:
         4d:57:10:44:03:66:37:41:ba:ad:b0:b8:8e:48:17:83:88:d0:
         a1:dd:03:09:c8:40:84:01:9b:7d:14:24:31:04:aa:0d:70:e4:
         70:42:c9:27:6a:6c:22:39:e8:7d:6b:a1:e8:80:4d:d5:33:a1:
         da:0c:a7:7c:a7:4b:03:9d:99:87:a8:af:63:d9:3a:11:81:b3:
         6d:9f:55:bb:fc:79:8d:ae:cc:dc:88:48:72:b7:c8:f5:e2:fc:
         2a:00:ab:10:af:81:76:60:ce:03:01:de:d9:ab:56:e7:5e:53:
         69:0b:23:49:08:96:8c:9e:09:90:86:29:9e:b0:a3:c3:a7:f3:
         49:aa:c4:ec:9d:fe:46:47:55:1b:9b:c2:d7:66:92:99:89:ed:
         5b:3f:cb:0f:f3:f5:4b:1b:e9:a1:68:fa:fb:e5:94:2c:09:3b:
         93:22:9e:a5:c1:af:fb:cd:bb:da:04:d7:34:9a:14:b2:38:1a:
         99:81:a8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:00:04 2026 by rpki-client