Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/85C3AC9A39E511EF99FD7A11C4F9AE02.roa
File:                     85C3AC9A39E511EF99FD7A11C4F9AE02.roa (raw, json)
Hash identifier:          nz3PPCvZn62oE2uMjuHkN8vXygcZxrPBWu4zQKyueQc=
Subject key identifier:   4D:D7:62:D5:B2:B5:AC:69:D7:7F:18:65:FA:C4:52:A0:10:E0:DE:9A
Certificate issuer:       /CN=A9167003/serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
Certificate serial:       0193
Authority key identifier: A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/85C3AC9A39E511EF99FD7A11C4F9AE02.roa
Signing time:             Thu 23 Jul 2026 06:31:52 +0000
ROA not before:           Thu 23 Jul 2026 06:31:52 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     10022
IP address blocks:        192.188.185.0/24 maxlen: 24
                          192.203.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl
                          rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:31:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167003, serialNumber=A8FC0636E68186475548794DDFA4690BFFD4CCB6
        Validity
            Not Before: Jul 23 06:31:52 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a61b558-b36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:9f:65:2c:7b:0c:ac:3a:6c:f3:b2:6a:ad:
                    54:3d:87:e7:43:75:bd:78:7c:28:07:b5:3d:54:31:
                    11:3f:a7:07:93:2e:9f:2e:22:ea:24:86:b7:fc:5a:
                    e9:eb:df:5b:fb:30:2b:fc:d5:5d:9b:89:bf:bc:da:
                    d5:28:7d:45:46:10:ec:d1:15:92:93:8c:fa:23:f0:
                    f6:e9:72:5e:d8:27:e4:e6:d2:a2:b9:c2:db:fb:74:
                    ef:42:fd:7c:34:0a:5b:45:4b:20:d1:fa:c8:92:4b:
                    57:27:28:b6:8f:f7:09:fd:80:30:75:93:ad:e8:dc:
                    32:a4:6a:0f:2b:ca:8a:64:e6:19:3b:18:14:f8:1a:
                    f8:7d:31:05:7c:30:2c:66:65:eb:65:5c:ab:78:3e:
                    91:22:fb:5a:94:3b:00:1c:85:a0:8c:80:40:d7:a8:
                    64:ab:c3:3f:4c:8f:08:46:66:95:17:af:70:45:05:
                    37:8f:0c:31:a3:62:63:0b:4f:84:2a:c1:e0:25:fd:
                    33:24:ed:c9:53:af:3c:f1:ea:60:56:80:c1:7b:fe:
                    03:98:6e:4e:cf:c7:49:99:09:01:9b:a2:95:a8:9e:
                    54:58:e3:f5:9f:60:08:56:7f:cd:49:9b:dc:f7:42:
                    99:2d:74:e1:33:a4:10:e6:6e:53:0d:cb:0a:e9:ec:
                    01:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D7:62:D5:B2:B5:AC:69:D7:7F:18:65:FA:C4:52:A0:10:E0:DE:9A
            X509v3 Authority Key Identifier:
                keyid:A8:FC:06:36:E6:81:86:47:55:48:79:4D:DF:A4:69:0B:FF:D4:CC:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/qPwGNuaBhkdVSHlN36RpC__UzLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qPwGNuaBhkdVSHlN36RpC__UzLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/26A6B05832BB11EFA83D612FC4F9AE02/85C3AC9A39E511EF99FD7A11C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.185.0/24
                  192.203.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:bc:f6:79:6c:f3:1c:20:35:63:52:7e:28:61:39:28:50:09:
         85:f2:0a:7d:33:0d:84:c8:b7:85:cd:97:7a:38:cf:1e:88:43:
         85:f2:bd:bb:70:14:a8:9b:fd:d3:42:58:2b:83:97:04:4c:22:
         3c:02:37:49:76:0b:81:90:3f:09:4e:ec:9e:a1:22:3b:7b:d2:
         43:6f:af:2d:81:97:fb:c1:29:b8:5e:3a:cd:bc:c8:20:32:c1:
         28:55:af:11:e0:80:2c:44:8c:d1:59:7c:a3:3f:c1:bd:67:e0:
         c2:f4:68:57:11:a9:35:55:3f:0d:a3:15:01:30:ea:65:87:de:
         4d:5c:20:aa:75:af:6f:60:70:31:47:4f:f3:28:30:48:23:55:
         ae:08:9e:45:ed:dd:58:1d:a0:de:2f:d4:16:ba:fa:f8:31:ee:
         7f:fc:76:6c:fb:57:55:15:7a:ef:1d:09:19:42:b5:10:bf:ff:
         8e:9f:83:39:cb:24:f4:a6:7c:24:6f:ca:9e:58:96:be:34:f1:
         e9:d1:14:0c:c0:fc:d6:5e:e6:d0:e2:75:b6:2a:de:ce:37:ff:
         11:ee:85:7c:59:fa:58:6f:37:5e:85:9f:b9:19:b5:61:68:e1:
         59:fe:bc:6f:33:cd:53:75:d2:4d:ee:9b:47:d6:4e:96:da:cb:
         96:27:8c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:50 2026 by rpki-client