Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/B350B67E964611EDA10D8777C4F9AE02.roa
File:                     B350B67E964611EDA10D8777C4F9AE02.roa (raw, json)
Hash identifier:          aMRVpWtmZnwUR1mTSqb8jU7v8RNHSZIpMkATgGb8rEM=
Subject key identifier:   5E:E9:F4:24:F9:A2:A0:FF:77:B0:E7:F0:02:C1:0C:EE:83:DB:F3:98
Certificate issuer:       /CN=A9161A58/serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
Certificate serial:       09F7
Authority key identifier: B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/B350B67E964611EDA10D8777C4F9AE02.roa
Signing time:             Wed 24 Jun 2026 20:24:27 +0000
ROA not before:           Wed 24 Jun 2026 20:24:27 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     140951
IP address blocks:        45.116.8.0/24 maxlen: 24
                          45.116.9.0/24 maxlen: 24
                          45.116.10.0/24 maxlen: 24
                          45.116.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl
                          rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2551 (0x9f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161A58, serialNumber=B4669D30D210E4907CD2888BE74B89A6DD3CB6C8
        Validity
            Not Before: Jun 24 20:24:27 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a3c3cfb-8e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b6:cc:6c:f4:bc:93:d9:34:c8:65:11:0c:d7:
                    99:01:d7:5f:39:22:d9:24:c1:bc:bb:eb:14:1a:23:
                    ba:be:96:d4:46:8f:63:b2:3d:eb:ca:c2:2b:ef:83:
                    ad:c5:92:c9:b4:71:1f:cb:a8:06:17:a3:b3:53:61:
                    63:87:68:c1:fd:1e:d5:a9:0c:8d:d0:d7:6f:ab:9a:
                    15:7d:4b:2f:00:1a:2c:dd:75:dc:64:6a:c3:14:70:
                    02:45:c0:5b:2f:f9:78:e9:65:49:40:49:68:93:8c:
                    da:25:b2:79:db:8e:e0:53:c2:bb:02:95:4e:e6:bd:
                    9d:b3:89:a0:94:15:63:5d:c0:68:48:36:49:31:51:
                    b3:24:26:e5:46:08:4c:d5:2d:19:c3:e4:d6:64:2a:
                    d2:b6:6e:29:b5:e9:77:d0:ac:f5:53:e0:91:d4:f1:
                    e5:d3:86:3a:b8:c9:1a:7f:2e:25:17:96:d5:51:d4:
                    63:56:7d:36:e0:e0:4a:00:ea:33:9a:94:a9:f3:ea:
                    b5:51:ad:b5:89:6e:0d:20:7a:82:2f:2d:e1:8d:32:
                    ee:f5:72:47:68:30:78:f3:1f:a5:ef:06:72:78:ac:
                    e7:e0:57:bd:d3:ca:4f:e8:96:a5:f3:fa:cd:14:4e:
                    f3:20:e1:b6:1f:c1:f2:c5:ad:78:5f:54:3b:a7:31:
                    93:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E9:F4:24:F9:A2:A0:FF:77:B0:E7:F0:02:C1:0C:EE:83:DB:F3:98
            X509v3 Authority Key Identifier:
                keyid:B4:66:9D:30:D2:10:E4:90:7C:D2:88:8B:E7:4B:89:A6:DD:3C:B6:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/tGadMNIQ5JB80oiL50uJpt08tsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tGadMNIQ5JB80oiL50uJpt08tsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A58/B389304EA7EC11EA80485864C4F9AE02/B350B67E964611EDA10D8777C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:b9:8e:e2:d5:bc:e8:5e:28:1c:6e:e4:dd:07:f2:cb:fa:dd:
         e6:2a:49:66:33:d6:2a:ad:87:3b:33:42:44:48:81:bd:32:7e:
         ae:b7:4c:2a:02:76:a2:a9:1a:33:7e:50:75:7a:0d:03:fd:f7:
         03:3d:8c:87:27:7f:f6:92:c0:e6:bf:cb:89:65:62:61:71:28:
         01:6d:6d:3e:7a:f8:57:3e:fe:62:c2:94:16:12:0d:01:1d:6e:
         04:d9:71:db:4e:54:22:62:ba:2b:ac:53:3f:12:8a:e7:13:94:
         e2:ef:46:0f:e2:f3:bb:ca:17:4b:f3:0c:ef:3f:72:61:0a:25:
         b4:a0:fd:f7:71:5e:b6:95:50:ae:89:09:e2:50:5e:36:f6:4d:
         c1:15:dd:bd:5a:dd:32:83:05:95:21:0e:24:c3:a3:e6:62:d7:
         3c:e4:d6:5a:84:59:b3:67:08:23:1c:16:47:e1:6f:c6:7a:4f:
         b9:73:93:6a:f5:61:67:13:53:ce:a4:80:4d:fd:e0:35:80:3f:
         fc:31:1b:3d:de:82:f5:24:c4:06:a8:9e:d8:08:b2:87:f6:4d:
         7a:91:14:f9:bb:44:06:fd:36:a8:0b:d1:c4:75:82:72:37:00:
         f9:b7:f5:36:7d:31:c7:5a:db:c6:f4:7e:27:f7:32:c5:a8:48:
         a9:45:03:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:09:30 2026 by rpki-client