Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/8166E7B6453711F188A3B6FDA0833773.roa
File:                     8166E7B6453711F188A3B6FDA0833773.roa (raw, json)
Hash identifier:          9GhOCUTtkwH0j0pn6Xy8i2836MJiyjAyN2vV+oyx7PA=
Subject key identifier:   AE:E9:5B:A0:58:4E:EF:69:78:F3:8F:58:62:CE:A3:33:AE:55:1D:63
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3B82
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/8166E7B6453711F188A3B6FDA0833773.roa
Signing time:             Fri 01 May 2026 08:26:52 +0000
ROA not before:           Fri 01 May 2026 08:26:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149419
IP address blocks:        111.88.171.0/24 maxlen: 24
                          115.186.117.0/24 maxlen: 24
                          115.186.118.0/24 maxlen: 24
                          115.186.119.0/24 maxlen: 24
                          115.186.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15234 (0x3b82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: May  1 08:26:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f463cc-18bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:c2:06:1c:71:0d:c9:2e:88:27:d9:00:3a:
                    6b:8a:e2:a4:e5:08:a2:73:af:e1:8c:d2:98:f3:2b:
                    91:86:e7:71:71:91:19:55:c7:f5:92:59:65:ae:41:
                    8a:45:fe:fa:8c:9a:e4:12:a8:73:80:cf:bf:ad:40:
                    95:ad:81:0a:c5:45:be:72:21:35:75:34:41:48:7e:
                    17:bd:d7:08:71:96:49:f7:3b:a8:c4:e4:ae:a1:83:
                    7b:af:93:48:f7:d3:15:50:90:71:5f:24:6c:67:50:
                    7f:51:ed:e8:85:c2:0c:cb:b1:2b:77:7d:f4:d9:44:
                    a2:7e:e1:6b:ea:88:9f:5a:c5:41:4a:3a:8b:02:b8:
                    5d:2c:57:1c:d5:e0:64:45:ee:10:a3:95:c4:cc:07:
                    03:28:2d:70:c5:bc:90:52:3d:8d:0a:2e:d4:8e:ae:
                    c8:a5:43:91:35:7a:ba:df:63:25:f5:e2:06:6a:f8:
                    73:57:f6:d2:05:96:e0:59:a8:6a:a0:48:f1:77:36:
                    71:1f:99:14:96:a2:b2:93:c0:ab:aa:ff:ba:ec:b0:
                    4a:8b:01:78:d1:06:ed:0f:74:51:61:a2:c1:3d:82:
                    66:a6:a3:8d:05:05:39:b7:ac:79:3f:88:1c:ed:ec:
                    da:64:d1:be:1f:c1:5a:ed:e7:af:25:ce:a4:a0:76:
                    71:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E9:5B:A0:58:4E:EF:69:78:F3:8F:58:62:CE:A3:33:AE:55:1D:63
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/8166E7B6453711F188A3B6FDA0833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.88.171.0/24
                  115.186.117.0-115.186.120.255

    Signature Algorithm: sha256WithRSAEncryption
         a7:6e:97:1b:41:c7:2a:c6:4b:34:64:fc:87:df:9b:f1:d5:f2:
         05:92:b8:39:85:b4:6e:d8:67:e3:a0:5b:65:fb:ce:c9:aa:00:
         89:b6:81:39:a7:d8:d3:af:3e:93:1d:9c:0c:a0:0d:6b:20:e7:
         bb:5b:b3:51:27:52:25:b1:83:30:9e:89:95:90:5b:74:09:c9:
         94:2d:37:2d:3d:6c:a0:3d:d3:4a:3d:aa:cf:3a:7c:62:be:4e:
         5a:16:56:bc:99:03:27:ee:68:50:b3:05:a2:33:04:2a:88:84:
         8a:35:89:94:a6:0a:c9:0d:6a:b6:f9:95:9f:65:f8:59:6c:6a:
         25:b1:f7:7b:21:51:4a:95:20:ec:8b:6f:41:4d:74:27:f1:41:
         9a:0f:f7:98:b5:cb:8f:02:0d:c5:a6:8e:83:6d:d6:cf:88:bf:
         b6:a8:d2:0e:eb:b2:47:68:ec:2f:8b:0f:af:2a:fe:1e:6e:ef:
         d9:3f:a9:86:3b:3f:8e:99:69:58:d7:7b:96:c1:3a:f1:cd:78:
         c4:36:aa:44:27:54:ac:2d:5b:b7:3a:5a:bd:d1:45:f5:0a:ff:
         74:fb:a2:4d:0b:2f:77:98:1d:17:13:3d:1c:27:cd:66:39:1a:
         42:8e:70:25:a1:f5:04:1b:70:c7:61:d5:e3:cb:f2:b1:0c:e8:
         97:3f:81:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:15:04 2026 by rpki-client