Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/023DC3A2B03911F1AE1EC8CE3E11F970.roa
File:                     023DC3A2B03911F1AE1EC8CE3E11F970.roa (raw, json)
Hash identifier:          G06NnHMX2WuVcev4nQuCxyrbcAxR0mS9/vCckCp/Ykc=
Subject key identifier:   AD:4B:62:F8:B5:69:F0:E4:F3:D4:9B:87:71:D8:CB:9E:F2:CA:9D:2F
Certificate issuer:       /CN=A915651D/serialNumber=D8686AA6D790405A9F19B188202CAE0435860961
Certificate serial:       02
Authority key identifier: D8:68:6A:A6:D7:90:40:5A:9F:19:B1:88:20:2C:AE:04:35:86:09:61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2GhqpteQQFqfGbGIICyuBDWGCWE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/023DC3A2B03911F1AE1EC8CE3E11F970.roa
Signing time:             Mon 14 Sep 2026 12:37:12 +0000
ROA not before:           Mon 14 Sep 2026 12:37:12 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     133631
IP address blocks:        192.52.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/2GhqpteQQFqfGbGIICyuBDWGCWE.crl
                          rsync://rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/2GhqpteQQFqfGbGIICyuBDWGCWE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2GhqpteQQFqfGbGIICyuBDWGCWE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 09:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915651D, serialNumber=D8686AA6D790405A9F19B188202CAE0435860961
        Validity
            Not Before: Sep 14 12:37:12 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6aa7ea78-4b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7f:95:e2:2e:7f:10:9f:41:49:60:ee:45:af:
                    a5:f7:ae:ac:ea:b0:fb:8a:6e:97:99:c8:4a:9b:ca:
                    a3:81:88:13:f9:8d:d8:01:d4:3c:bb:4a:8e:5d:45:
                    b1:60:c6:bb:1f:d1:99:3d:f4:fc:83:53:e4:19:2e:
                    b9:ab:0c:20:e5:aa:f5:07:39:38:55:37:5f:92:48:
                    09:5e:70:93:aa:68:33:20:84:35:e3:28:58:49:a7:
                    af:2f:82:88:1d:e0:7a:57:1b:46:3c:3b:67:cb:6d:
                    30:76:72:dc:2a:45:10:c0:a1:83:c3:64:92:a9:ca:
                    0a:ad:9c:94:2a:65:91:1d:54:d3:75:bf:3b:79:f9:
                    22:c7:f7:a1:f0:97:7b:4f:6c:45:01:52:77:2f:77:
                    df:aa:87:75:f6:bd:a4:99:98:55:43:fd:a3:9e:74:
                    06:ce:f2:66:d9:af:11:f9:d7:4c:08:46:2e:c8:e2:
                    aa:0e:a5:ff:17:81:77:eb:bc:5d:5b:6b:d0:a3:ea:
                    66:4f:9c:5b:9e:4a:0f:5b:39:95:b2:c1:6f:86:22:
                    90:f5:64:6b:95:43:6a:bd:40:11:e8:b8:e5:32:db:
                    9e:2e:06:ef:2f:56:17:10:6e:f0:d5:8f:a0:e5:2a:
                    8c:0f:48:75:28:b0:b1:cd:3a:2f:22:8e:15:19:da:
                    76:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4B:62:F8:B5:69:F0:E4:F3:D4:9B:87:71:D8:CB:9E:F2:CA:9D:2F
            X509v3 Authority Key Identifier:
                keyid:D8:68:6A:A6:D7:90:40:5A:9F:19:B1:88:20:2C:AE:04:35:86:09:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/2GhqpteQQFqfGbGIICyuBDWGCWE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2GhqpteQQFqfGbGIICyuBDWGCWE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915651D/1590D9C2B03811F1B51BCD813E11F970/023DC3A2B03911F1AE1EC8CE3E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:ec:e9:9e:4a:dd:6e:0c:4b:b0:e1:40:fd:96:0d:9a:e4:d4:
         a3:d2:38:d6:c4:68:67:ba:5a:60:df:33:f5:3e:e6:7a:aa:bf:
         99:ab:ca:78:fd:46:f6:da:b3:3e:ef:88:84:b7:a0:04:fb:d4:
         99:66:6b:91:ac:8a:5a:f1:84:6d:cf:e2:ee:09:43:67:ae:65:
         1e:53:92:99:30:c4:41:32:c6:6e:7e:28:f7:75:74:d9:a7:74:
         3d:0f:0c:db:8d:d6:e1:32:f6:3f:d3:d5:0d:6f:fc:67:84:09:
         22:e2:48:ab:45:89:19:4a:da:60:f0:2f:58:9d:da:a6:e2:95:
         64:1a:07:c1:9e:2d:47:ba:4f:52:a7:75:80:09:4c:f4:91:fc:
         66:5a:8c:89:6f:74:8b:cb:67:34:68:94:36:d6:e8:a9:19:fa:
         08:0b:81:ec:aa:85:51:5a:c2:99:61:c2:98:7a:b9:e7:90:bd:
         16:9b:7f:aa:52:37:41:ce:4e:56:55:48:93:6a:2f:cb:61:ef:
         c7:7e:1b:b5:a3:59:d3:e0:c5:6d:8c:86:34:96:a3:68:b0:2a:
         ff:9f:7a:f1:a6:73:5b:5e:3b:8d:e2:14:54:c1:66:95:cf:3c:
         46:85:f7:c9:24:7a:0e:75:aa:7c:b0:b7:9f:33:35:a3:c8:97:
         7d:bf:c9:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:48:20 2026 by rpki-client