Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/E9DEE50ABCE211F188EFB1283A11F970.roa
File:                     E9DEE50ABCE211F188EFB1283A11F970.roa (raw, json)
Hash identifier:          8XxYrAxCCkwxSX5gvZFcX9S2KjuOsaa9oX/qG4nIOio=
Subject key identifier:   36:5D:D1:6A:85:0F:58:F0:A6:90:0E:6E:5B:AE:48:89:8F:AF:82:FC
Certificate issuer:       /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B
Certificate serial:       0DBB
Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/E9DEE50ABCE211F188EFB1283A11F970.roa
Signing time:             Wed 30 Sep 2026 15:23:40 +0000
ROA not before:           Wed 30 Sep 2026 15:23:40 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139029
IP address blocks:        116.212.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl
                          rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 18:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3515 (0xdbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F88D, serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B
        Validity
            Not Before: Sep 30 15:23:40 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6abd297c-2cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d6:8d:7c:8a:f6:35:9e:fc:0b:a4:a3:a0:fc:
                    55:20:bf:e3:3f:df:b4:0e:d4:f6:cc:21:98:53:15:
                    25:07:6f:17:ad:e9:10:6d:20:d9:92:e9:4f:da:7f:
                    c5:eb:4b:12:7d:26:61:c7:f0:7b:8f:91:10:dd:e1:
                    41:36:16:04:b7:09:15:2b:d3:e1:84:73:5d:f4:d9:
                    ea:2d:d7:bd:ee:2b:5e:84:4b:29:64:ef:16:b0:0c:
                    a2:29:f7:3f:89:50:71:1e:d4:e3:a4:76:d8:d2:90:
                    3f:b8:9f:2d:5e:1c:89:e3:bb:03:05:49:e4:99:40:
                    42:a2:75:77:77:0b:c8:e0:8d:f3:3f:e6:a8:ec:51:
                    e2:86:e8:43:ce:9c:54:e0:45:c7:1d:71:bf:da:a7:
                    8f:07:fc:77:75:b9:e2:ca:e3:a2:e3:a6:0b:34:f6:
                    92:42:d1:aa:f4:07:db:94:55:2f:19:d4:52:9a:5c:
                    f0:3d:3c:82:1a:a3:f7:43:c5:3b:cf:ca:b4:86:b1:
                    19:52:4a:43:5e:83:cf:8f:71:22:d9:00:4d:6c:25:
                    e5:a4:fe:b4:24:30:c4:12:82:01:9a:a5:2c:c4:c7:
                    74:37:14:e9:c7:3e:9f:f2:00:73:35:f7:bb:0a:39:
                    84:27:d3:36:83:33:d0:6f:d0:6e:1c:9c:ee:3f:58:
                    e9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5D:D1:6A:85:0F:58:F0:A6:90:0E:6E:5B:AE:48:89:8F:AF:82:FC
            X509v3 Authority Key Identifier:
                keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/E9DEE50ABCE211F188EFB1283A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.212.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:0c:22:60:2c:b3:1b:19:e9:b6:19:ce:e0:4e:95:99:2a:5b:
         b3:81:6b:c6:b8:fa:c9:2b:03:7d:17:be:a1:48:35:bd:2c:73:
         28:7e:ba:22:5c:58:69:2f:6d:60:bc:86:67:5e:fd:6a:bc:c6:
         1b:4a:b7:3b:8c:5d:9f:d8:0c:26:7a:4c:41:02:46:02:41:af:
         60:6e:c8:97:9b:08:88:ab:82:ff:8c:18:13:45:1a:b6:c3:ba:
         56:d4:cb:2a:b0:8f:39:c2:2b:64:40:3a:84:6c:48:2e:19:61:
         fc:d2:94:39:20:cc:ce:87:58:3a:b6:c3:6c:b3:a5:73:f1:85:
         96:c0:47:89:e1:ef:27:28:db:9c:eb:fe:01:e8:f7:0c:c6:96:
         ed:97:5c:f5:35:a3:38:d7:6c:2c:14:25:97:c4:39:de:62:4b:
         83:da:b0:36:bb:4f:8a:05:13:3a:e2:22:33:47:ce:e2:94:e2:
         5e:39:f4:80:a2:e6:c2:61:b9:80:77:38:6f:56:ae:3d:08:4a:
         e1:40:6b:af:80:08:28:ff:d0:30:d9:c3:cf:44:33:1b:e5:e3:
         40:71:a2:69:15:05:63:f3:a1:de:f2:48:1a:7d:8c:da:1d:bd:
         7b:d2:82:69:53:1e:c9:a4:be:da:75:e6:5f:92:f2:8d:44:87:
         c9:b7:73:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:02:32 2026 by rpki-client