Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/8296B130A0DC11EF8963C80AC4F9AE02.roa
File:                     8296B130A0DC11EF8963C80AC4F9AE02.roa (raw, json)
Hash identifier:          8NzEuEnykX7h6fS43cE+6wqCd/7p7Nr/SKrcmIr6n8w=
Subject key identifier:   DB:2E:EE:C8:6F:B7:0E:2F:2B:FC:62:71:42:2E:FF:09:0C:0D:A7:D6
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       1346
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/8296B130A0DC11EF8963C80AC4F9AE02.roa
Signing time:             Thu 14 Aug 2025 17:26:45 +0000
ROA not before:           Thu 14 Aug 2025 17:26:45 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     16669
IP address blocks:        203.116.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4934 (0x1346)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Aug 14 17:26:45 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=689e1c55-3727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fc:41:c7:04:61:31:df:dd:a2:60:69:25:9c:
                    83:3f:4b:4b:64:23:f1:93:e0:d4:98:7e:1a:de:e1:
                    57:7e:6c:49:4d:d8:bf:c0:5a:48:7b:93:ca:57:42:
                    27:2f:3a:96:bf:aa:d0:e4:f4:cc:9b:96:f7:a6:70:
                    93:07:aa:bc:25:79:0b:3a:48:4f:f5:ba:57:38:f1:
                    a4:4e:29:b8:a1:dc:72:bd:4f:55:ff:a4:e5:63:84:
                    32:8e:a9:4d:83:be:ab:1c:0d:7a:32:0e:4e:a1:44:
                    84:b8:e1:b4:dd:67:76:5d:a6:e1:d8:dd:08:f0:1e:
                    f2:da:da:cb:f6:5b:c3:dd:4f:af:ad:21:fe:23:95:
                    28:46:99:d6:37:f9:0b:58:51:78:4d:74:f5:38:05:
                    30:6a:69:77:33:09:14:8f:ff:5c:e1:a0:73:4f:d7:
                    b4:ec:6f:df:1a:de:b5:ec:c3:cd:c9:40:dd:27:78:
                    bc:e6:68:e4:99:c7:9e:4f:75:73:be:ee:5d:33:bc:
                    20:ee:3e:8b:c2:b4:43:a4:e0:9b:b5:7a:d3:af:85:
                    91:14:f3:dc:5d:49:f7:ec:bc:b0:73:92:92:29:ed:
                    db:52:cc:3e:31:3e:96:15:21:1c:4a:ec:83:0d:2d:
                    8f:dd:a5:e7:be:44:83:a5:7d:04:7c:c2:9a:5b:60:
                    74:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2E:EE:C8:6F:B7:0E:2F:2B:FC:62:71:42:2E:FF:09:0C:0D:A7:D6
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/8296B130A0DC11EF8963C80AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.116.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:20:45:7c:a8:9e:c1:25:0c:ee:bc:75:36:ec:70:28:3d:40:
         15:c5:d5:87:1e:3a:a3:8d:3d:c9:99:d7:41:a1:70:15:2c:64:
         57:8c:1d:8c:4d:6d:ff:b8:d3:9b:19:ad:25:69:66:be:29:c7:
         a4:c8:6e:7f:de:f8:d9:60:b7:a8:41:03:79:bf:b3:9e:62:52:
         57:4c:37:02:71:02:92:52:98:d1:d4:4e:69:63:fa:0f:95:b8:
         23:c1:e0:30:43:2c:ce:e6:b1:ec:90:e0:ae:08:cc:7b:f7:11:
         3f:36:a7:5a:6a:2a:da:ee:11:3a:04:07:8d:c7:1a:40:e5:f3:
         87:0e:39:44:64:e3:f5:3b:14:eb:2f:4b:e2:9b:3b:07:c5:b7:
         f8:b8:97:21:10:d4:8a:a8:8b:f8:08:1e:6e:07:3c:d5:a2:54:
         ab:5b:cc:ca:2a:ac:bb:76:9f:91:93:e9:2c:4c:7c:49:2d:78:
         11:28:92:9f:94:f0:2a:ab:1e:79:b1:31:1a:10:e4:03:cc:18:
         9f:44:b0:2a:73:62:97:11:a0:02:20:76:28:41:2b:83:a2:ee:
         76:70:ed:23:30:91:c8:e2:3c:25:aa:23:49:32:97:93:18:34:
         91:9c:51:35:6f:fe:4e:e1:3c:7b:a5:72:aa:db:55:59:4c:08:
         7e:1c:fb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:16 2025 by rpki-client