Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/87087F00267E11F09183092AC4F9AE02.roa
File:                     87087F00267E11F09183092AC4F9AE02.roa (raw, json)
Hash identifier:          ZonpCT+5ZZuP5erM6WjI5zX2DJGXZb7/2jDh35lgn00=
Subject key identifier:   22:59:D3:BA:09:73:2F:03:15:9D:D8:56:B4:0E:70:96:DB:4D:D4:F7
Certificate issuer:       /CN=A912698E/serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C
Certificate serial:       C6
Authority key identifier: 5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/87087F00267E11F09183092AC4F9AE02.roa
Signing time:             Thu 30 Apr 2026 18:21:57 +0000
ROA not before:           Thu 30 Apr 2026 18:21:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     997
IP address blocks:        205.210.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl
                          rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912698E, serialNumber=5DB75B2DF94D04474A6E5E2D4B78CC084BFC2A6C
        Validity
            Not Before: Apr 30 18:21:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f39dc5-33dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e0:1b:2e:b1:42:01:8a:22:93:d8:f6:4f:3b:
                    e2:b8:43:78:91:93:d6:1c:7d:bb:07:df:95:38:0c:
                    2f:86:12:3d:b8:00:ce:5f:8f:3e:e6:9f:c8:4d:cc:
                    58:a2:2c:5c:b3:c8:13:56:4e:c0:c9:ef:3b:9e:39:
                    c1:a9:1e:66:3a:94:4f:54:0a:e8:99:3d:e4:9f:27:
                    49:4a:56:14:04:ab:5c:f8:94:83:ba:b9:1f:f6:d6:
                    c1:83:9b:c6:59:85:2f:48:7a:d3:70:aa:eb:6d:6c:
                    09:61:f8:5a:60:4c:4e:23:17:1e:04:6c:c4:2e:89:
                    77:4a:1c:ed:1a:9b:81:2f:5e:4e:18:6e:5f:90:6f:
                    99:f7:52:44:43:d1:50:fe:55:2f:21:8c:9b:73:3c:
                    9b:70:35:40:c7:5c:5c:7f:06:93:df:5f:29:8c:58:
                    02:ba:b9:99:9c:f9:e9:32:a5:84:3f:0f:fc:b5:8c:
                    ac:e9:bf:d6:ef:4f:24:8a:d9:e8:4d:b4:a7:bf:6c:
                    36:40:55:92:3f:a4:28:c1:79:5b:c3:b4:08:af:bd:
                    b8:2b:31:db:0f:b0:21:4a:19:bc:98:df:d2:ae:ea:
                    22:4b:a1:80:82:39:8e:bd:dc:69:18:35:a1:c7:cc:
                    cd:59:26:30:14:f8:5f:ea:67:4e:39:bf:0c:b2:87:
                    39:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:59:D3:BA:09:73:2F:03:15:9D:D8:56:B4:0E:70:96:DB:4D:D4:F7
            X509v3 Authority Key Identifier:
                keyid:5D:B7:5B:2D:F9:4D:04:47:4A:6E:5E:2D:4B:78:CC:08:4B:FC:2A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/XbdbLflNBEdKbl4tS3jMCEv8Kmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XbdbLflNBEdKbl4tS3jMCEv8Kmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/095F6C8C267C11F09677F80BC4F9AE02/87087F00267E11F09183092AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.210.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:3f:46:ac:c3:ff:f1:2a:39:e5:19:5f:61:ee:f6:12:0a:51:
         8d:ad:67:7d:78:a4:fe:9b:34:c6:36:be:37:3a:d5:cb:f8:a8:
         1d:2e:5f:dc:5b:50:61:b3:24:1d:c0:2e:fe:2f:df:a6:74:c6:
         21:f6:cb:a2:0e:c9:02:ac:16:01:7b:15:b0:76:aa:1e:b4:8b:
         50:79:d8:01:c6:a8:e5:8e:a0:87:be:07:64:35:37:af:52:99:
         0e:05:eb:82:1e:73:d9:60:73:b5:26:88:06:59:76:23:d3:b0:
         9b:37:7f:df:18:62:fa:55:5f:c8:a2:d7:2e:7e:23:06:b7:ff:
         de:63:a4:49:ae:57:d2:83:8e:02:1d:86:1f:44:98:69:11:05:
         ea:58:b1:5b:a4:a3:17:5c:b5:43:3d:7f:df:7a:7c:ed:8e:3d:
         a1:31:4f:29:af:84:31:18:89:24:53:93:ac:d4:ea:24:16:99:
         ab:4b:98:86:83:fb:a2:1a:4f:46:5f:d0:00:a4:a6:eb:b2:77:
         83:76:b3:5c:92:4e:18:50:20:91:85:26:25:96:44:ab:35:b3:
         db:23:c4:36:4b:7a:42:bb:d9:a2:d8:53:01:3c:03:30:f3:5d:
         8e:f9:d2:b3:9f:01:9d:3d:eb:5f:aa:2c:8f:d7:93:39:5c:a7:
         08:ca:0b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:28:42 2026 by rpki-client