Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/B8104C9E531511F189594BAEBE833773.roa
File:                     B8104C9E531511F189594BAEBE833773.roa (raw, json)
Hash identifier:          03tHcv31WAjjSZg0GytNTOFwjGpnu0+l2j9GpgYcafE=
Subject key identifier:   B8:F2:FA:E2:36:05:86:EC:36:CF:85:3E:C3:E2:77:C9:33:6F:EC:3B
Certificate issuer:       /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
Certificate serial:       0149
Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/B8104C9E531511F189594BAEBE833773.roa
Signing time:             Tue 15 Sep 2026 05:55:39 +0000
ROA not before:           Tue 15 Sep 2026 05:55:39 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     0
IP address blocks:        143.188.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl
                          rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 06:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
        Validity
            Not Before: Sep 15 05:55:39 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa8dddb-bbe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:36:a6:62:99:24:71:df:77:a6:b4:d5:74:00:
                    8b:56:cf:1f:c5:0e:0f:a9:92:b5:65:4a:d1:ae:86:
                    ab:a2:6d:83:4d:03:31:4b:6b:62:f2:d3:6f:be:52:
                    f6:c3:4b:8f:10:92:fc:09:6b:53:35:37:44:27:25:
                    cc:1f:8b:ac:74:15:ac:d6:e3:0b:fc:35:97:eb:45:
                    7c:9b:b1:05:3a:e8:fa:d9:f0:42:d3:85:10:69:94:
                    95:38:6e:30:41:11:d6:ed:f6:9b:f8:3a:d0:d9:1b:
                    4d:f3:f4:81:1b:af:06:bd:df:ee:aa:d2:eb:0f:19:
                    c2:5f:9e:4e:31:29:f4:68:89:44:fd:c8:48:fa:ee:
                    c4:8c:aa:45:18:bb:7d:2a:ca:42:54:e5:a2:ee:39:
                    eb:32:15:b4:b6:c5:6b:9c:67:04:00:82:3b:d5:4f:
                    3b:5d:bc:45:1a:cb:4c:92:19:68:b3:2f:dc:e9:6a:
                    90:54:55:c6:ce:8b:98:f8:22:07:4f:5e:03:8d:78:
                    c4:15:4f:eb:29:22:8c:7b:a8:e0:fc:ee:6d:f8:6e:
                    f6:84:f0:ec:a6:3d:e3:b3:73:fb:86:a0:25:de:94:
                    66:63:af:46:a7:4d:db:23:39:b8:cb:29:30:b0:b9:
                    cd:18:89:be:ee:05:9c:c4:00:a2:61:77:de:8b:bc:
                    2c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F2:FA:E2:36:05:86:EC:36:CF:85:3E:C3:E2:77:C9:33:6F:EC:3B
            X509v3 Authority Key Identifier:
                keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/B8104C9E531511F189594BAEBE833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.188.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:aa:c9:69:46:05:0f:c2:f4:aa:e5:b4:13:4f:ed:0a:a7:f4:
         ff:f6:ef:4d:20:77:56:bb:38:f4:a1:8c:27:f3:68:43:33:b7:
         b1:32:33:5e:09:34:05:13:12:e3:65:6d:5d:8d:ee:43:4e:76:
         26:73:18:a8:9c:9a:5c:e6:68:33:6a:4d:8a:4c:67:c9:43:f3:
         3e:b9:cc:0e:e4:52:b7:cf:95:c9:eb:fe:73:c9:de:df:05:a7:
         54:77:2c:f3:85:f4:d8:6d:da:ff:bf:31:29:54:5d:de:da:f8:
         81:26:5b:43:0d:df:26:58:93:10:ef:ee:99:88:0c:6c:39:14:
         21:e5:ed:fb:58:55:9e:7b:ef:1d:da:ea:2a:34:f1:17:3c:73:
         92:ea:2a:41:ae:07:36:16:95:31:37:50:c5:10:43:01:5a:3d:
         f8:70:d5:89:c4:aa:2e:fd:79:0a:a5:d5:aa:5f:65:91:5d:e0:
         1b:df:59:eb:f6:78:d3:40:da:e9:32:d6:66:64:d8:bb:e8:59:
         9d:3b:a3:2a:10:40:79:fd:78:ef:5d:4c:f2:dd:83:5e:27:a5:
         59:cb:bc:67:0c:ed:ef:81:8c:e1:ab:44:ab:1b:ec:4b:6d:75:
         67:28:55:1c:0c:fb:c5:76:16:85:e4:e9:8e:f8:8c:95:5b:ed:
         61:1c:01:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:19:13 2026 by rpki-client