Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/1C839F861BA111EA8BDD6114C4F9AE02.roa
File:                     1C839F861BA111EA8BDD6114C4F9AE02.roa (raw, json)
Hash identifier:          OeZ1QAdH9ELtz6ot25I1yxnNo5ZrJkrg9RULBUY+y7g=
Subject key identifier:   B1:CD:13:09:94:71:0E:74:F4:8F:71:91:66:32:32:D8:E6:0F:51:C9
Certificate issuer:       /CN=A916A983/serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C
Certificate serial:       137E
Authority key identifier: B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/1C839F861BA111EA8BDD6114C4F9AE02.roa
Signing time:             Thu 10 Sep 2026 17:33:52 +0000
ROA not before:           Thu 10 Sep 2026 17:33:52 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     135887
IP address blocks:        141.168.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 16:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4990 (0x137e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983, serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C
        Validity
            Not Before: Sep 10 17:33:52 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6aa2ea00-5132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e4:51:bc:d2:83:52:1a:46:c4:54:54:93:ff:
                    d9:34:b2:6d:29:da:36:01:fa:d9:59:7a:b3:7d:6d:
                    82:89:c4:90:d7:94:19:66:73:84:38:ca:67:89:81:
                    20:9b:2b:0a:6b:fb:53:e7:76:12:7f:91:a7:96:9b:
                    d6:09:5c:07:dc:11:e6:33:bf:7a:19:16:ab:93:c3:
                    4c:db:29:88:ab:14:3b:b2:33:a5:b8:40:ec:c2:d2:
                    ec:82:d3:bf:80:e4:80:ae:e1:24:be:4a:8f:04:0e:
                    3e:75:5e:86:68:fa:5c:cf:3c:db:69:30:fb:6a:be:
                    68:81:d8:d8:f9:13:c2:d9:5a:ef:ee:24:31:68:84:
                    7e:cf:0b:f1:3b:0a:5e:41:75:8a:7e:a6:69:67:02:
                    1f:18:1a:3c:42:f4:58:ab:79:1a:38:9a:ef:1f:15:
                    8d:5b:bc:60:a8:33:b3:89:2f:15:e1:d8:72:2f:3f:
                    8f:c8:7d:8f:8f:32:9f:f1:34:be:5e:cb:0a:ed:d1:
                    2a:8d:a7:93:0b:ae:93:e9:58:38:ec:38:12:17:47:
                    7f:a1:fc:c8:6c:53:af:a4:93:16:49:41:b0:63:6a:
                    2c:78:fa:bd:1d:8c:82:0f:69:99:9a:f2:b4:af:70:
                    4b:96:4b:3b:3c:78:70:c1:96:14:33:e0:2a:ce:04:
                    09:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CD:13:09:94:71:0E:74:F4:8F:71:91:66:32:32:D8:E6:0F:51:C9
            X509v3 Authority Key Identifier:
                keyid:B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/1C839F861BA111EA8BDD6114C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.168.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         03:43:2e:30:80:9c:27:04:46:8e:bb:69:60:25:ce:ce:c2:98:
         45:95:d5:ee:4d:04:bc:74:d3:0e:fe:b0:8d:c7:d4:32:d0:7e:
         cc:b1:f2:2b:11:43:ac:ec:0e:fe:d2:4f:4a:dc:03:8a:37:17:
         0c:ee:f3:5c:41:8b:4c:63:0a:9b:45:16:f1:d7:97:7c:36:d8:
         4d:dc:db:be:a4:57:21:6e:97:11:ac:de:20:d5:a5:da:2d:60:
         83:1f:f8:a4:97:8f:5e:98:0e:8d:d7:4f:4b:6c:c9:97:80:00:
         08:34:b0:4e:b8:79:b1:93:04:06:2c:a1:62:23:b6:ac:0d:86:
         ac:f6:1e:89:cd:f6:6a:bf:8c:0c:fd:75:ac:ca:b5:cb:da:54:
         b2:ea:6d:aa:0f:d8:df:4a:4c:a1:2b:35:0d:66:50:98:c2:cc:
         a7:68:9d:f2:ca:9c:ad:92:82:e1:49:08:a9:0c:ff:96:98:57:
         05:36:9f:a5:4b:2f:64:d6:d7:2c:25:0a:74:37:88:d9:dd:1a:
         c9:44:a4:ec:69:f0:43:c2:78:8f:ee:ab:02:f8:61:30:d4:11:
         e2:ca:36:a4:c4:50:7c:4b:1a:b3:c3:06:94:1f:f1:00:58:68:
         a3:d1:19:68:55:da:1b:19:d9:c5:2d:82:ea:19:62:4d:f9:ab:
         ab:d9:e4:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:10:05 2026 by rpki-client