Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/75B2EA02BC2711F1869C95754111F970.roa
File:                     75B2EA02BC2711F1869C95754111F970.roa (raw, json)
Hash identifier:          9AOWM5vSiMMKkvhdj1t6gHsk+38e9UbgZQcIL0Mc+0o=
Subject key identifier:   C8:B2:1B:F1:3E:61:1B:A3:B8:09:DD:9E:19:16:DE:E6:76:61:2F:25
Certificate issuer:       /CN=A918F88D/serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B
Certificate serial:       0DB6
Authority key identifier: DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/75B2EA02BC2711F1869C95754111F970.roa
Signing time:             Tue 29 Sep 2026 17:01:49 +0000
ROA not before:           Tue 29 Sep 2026 17:01:49 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     45905
IP address blocks:        116.212.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl
                          rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 18:15:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3510 (0xdb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F88D, serialNumber=DB1CB84854069E43CA1B725D42EA6BA9B539815B
        Validity
            Not Before: Sep 29 17:01:49 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6abbeefd-0646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:95:5d:2e:a4:c7:aa:30:df:a2:52:43:6d:25:
                    54:d6:5d:d1:00:36:e4:c0:01:85:86:36:d9:21:04:
                    f0:a0:d2:3b:03:3f:39:e5:f4:64:be:ba:14:c2:ce:
                    22:85:c0:f8:8f:e6:b2:b2:be:e7:8e:8e:1e:3b:ad:
                    45:dd:e0:50:88:a2:ae:91:54:ff:16:11:c9:a0:0c:
                    60:b2:ea:c6:4f:1e:59:09:93:9e:da:0f:ac:8f:25:
                    9f:8d:2b:3d:ac:c8:e4:f8:ce:f4:0c:e7:af:c6:79:
                    66:47:53:1d:4b:91:c3:29:68:05:47:34:1f:cc:79:
                    0e:7a:6f:6c:71:23:5d:07:2d:9f:09:71:34:c8:e0:
                    27:c3:ae:e4:a4:4c:2f:d6:96:b7:7c:10:48:82:6a:
                    55:db:01:cc:a6:8a:02:54:1e:60:ff:60:96:e0:49:
                    b3:e2:43:a1:35:20:a0:b0:d8:b1:20:b9:2d:9a:bc:
                    f4:32:91:f4:ce:96:39:19:fe:f0:43:44:d1:33:ec:
                    e0:fc:8b:b2:3c:ea:8a:d4:1d:07:16:22:a6:52:24:
                    74:a5:7c:95:dc:b2:97:f8:1e:a8:3f:2f:30:62:1b:
                    51:37:ab:af:f2:4b:cc:64:56:9c:20:72:00:06:b7:
                    2d:d7:08:55:6b:f3:47:3b:4e:8e:5d:f0:35:b7:2c:
                    de:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B2:1B:F1:3E:61:1B:A3:B8:09:DD:9E:19:16:DE:E6:76:61:2F:25
            X509v3 Authority Key Identifier:
                keyid:DB:1C:B8:48:54:06:9E:43:CA:1B:72:5D:42:EA:6B:A9:B5:39:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/2xy4SFQGnkPKG3JdQuprqbU5gVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xy4SFQGnkPKG3JdQuprqbU5gVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F88D/2A14BE08005A11EA8FDCA130C4F9AE02/75B2EA02BC2711F1869C95754111F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.212.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:47:f3:02:5b:b0:ae:48:f1:f0:78:c0:b1:20:5d:35:3d:a7:
         92:0a:01:9f:93:37:3e:79:9f:c2:ff:60:fa:ba:15:44:4c:1b:
         fc:ee:d7:ad:8d:97:1a:ab:f0:6c:46:a8:1a:72:c2:9b:97:d9:
         d1:93:da:c6:6a:65:56:a5:cb:3f:3d:73:ac:6a:5d:ec:8f:b1:
         e7:f6:c6:19:d0:9d:3d:56:8e:8d:f3:02:ef:a4:2c:a9:6c:c6:
         2d:51:17:79:52:fe:ea:f7:a2:e6:13:1f:50:ce:80:be:61:e3:
         41:05:ff:ba:e0:3b:96:07:e6:a3:a7:6e:bf:85:55:bb:26:58:
         aa:a5:94:68:f2:52:de:0e:d7:4e:35:62:df:af:b3:a3:fc:ee:
         7e:38:81:5e:6a:10:0f:2d:0a:cd:ae:25:de:4a:0f:39:24:a1:
         ca:b4:dd:76:5a:a6:7b:f1:c1:b8:65:a1:ab:50:7f:e7:8b:e9:
         71:6d:26:3b:a8:d0:26:30:dc:2c:ff:00:04:a7:a1:02:fd:2d:
         9e:22:7a:e5:46:9d:1b:8c:9e:d5:d5:c7:99:58:21:9a:01:4a:
         21:b8:0e:fe:0e:92:4f:17:71:6a:50:66:23:41:ac:56:ea:c0:
         20:b0:cc:f8:22:78:ff:7c:33:22:3c:e7:78:da:c2:f0:53:f1:
         7e:7e:bc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 09:28:24 2026 by rpki-client