Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/0BE73752ED1C11F0A0F1907B416F56BC.roa
File:                     0BE73752ED1C11F0A0F1907B416F56BC.roa (raw, json)
Hash identifier:          MGWFcwlCewIAG3BNutKyB7bTFQ8u4vbZr7QGuCKCTw0=
Subject key identifier:   AF:D6:E5:91:95:38:62:0D:C8:9B:F8:E8:59:CA:33:F9:4D:49:91:FD
Certificate issuer:       /CN=A9125864/serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
Certificate serial:       83
Authority key identifier: FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/0BE73752ED1C11F0A0F1907B416F56BC.roa
Signing time:             Thu 03 Sep 2026 07:59:42 +0000
ROA not before:           Thu 03 Sep 2026 07:59:42 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     13335
IP address blocks:        203.15.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl
                          rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125864, serialNumber=FDF6D695820AF3D0F0E7A74DB344532C57DAEE40
        Validity
            Not Before: Sep  3 07:59:42 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9928ee-b700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4f:c0:71:2a:30:29:d7:58:3a:0c:e6:99:5a:
                    3a:1e:87:2c:4c:30:16:5d:5d:03:04:94:6e:6f:26:
                    fb:68:e6:28:f7:26:3e:7e:95:72:f5:ad:b0:ae:8d:
                    e2:07:cf:a8:01:29:2b:f2:64:74:16:ad:77:79:70:
                    25:6d:f7:ca:86:ad:11:81:d0:24:af:ff:4c:f5:37:
                    4c:99:ad:64:d0:7c:37:cd:a7:0a:ac:b5:1b:bd:87:
                    e3:dc:59:96:ce:10:59:d7:45:73:a0:c2:ce:33:14:
                    18:0f:5a:ba:6a:f5:a0:c3:7b:fc:14:4b:22:13:ef:
                    21:1b:e2:ec:b2:97:57:d9:e6:cd:3c:7b:fe:8a:31:
                    e1:03:b4:3e:0c:d7:ca:e2:c4:0f:cc:93:93:1c:da:
                    00:18:7b:51:10:29:ad:be:71:3d:db:50:5c:b4:18:
                    a0:8d:09:27:da:8e:2a:86:6e:38:e3:98:85:4c:e1:
                    c4:7a:3c:e2:5a:07:bb:7b:50:a4:45:49:c7:79:32:
                    1a:37:e6:32:6a:4d:20:f3:7f:50:d8:f7:0f:18:20:
                    dd:3a:74:41:1f:d7:27:11:c3:40:57:89:9d:05:d7:
                    ba:d5:b7:1e:de:9e:8d:89:5a:45:4a:ce:dc:5a:71:
                    c6:9e:83:28:8f:9a:5a:a9:fa:a2:fe:50:cb:5a:9b:
                    35:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D6:E5:91:95:38:62:0D:C8:9B:F8:E8:59:CA:33:F9:4D:49:91:FD
            X509v3 Authority Key Identifier:
                keyid:FD:F6:D6:95:82:0A:F3:D0:F0:E7:A7:4D:B3:44:53:2C:57:DA:EE:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/_fbWlYIK89Dw56dNs0RTLFfa7kA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fbWlYIK89Dw56dNs0RTLFfa7kA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125864/192315F2ED1811F08E1C0602406F56BC/0BE73752ED1C11F0A0F1907B416F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.15.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:b4:62:e5:9f:20:bb:a3:33:e8:f5:31:81:49:11:9b:cf:cd:
         42:9d:ca:e1:e3:f7:0e:2d:4e:50:57:75:3f:98:e0:b2:30:5b:
         e3:23:4a:de:07:54:a9:18:f8:03:13:93:26:b3:1b:dc:98:4f:
         87:13:47:85:64:7b:2b:ab:25:af:dd:a6:aa:8c:0e:2f:12:61:
         a0:05:ae:91:2c:ee:53:57:f1:cd:52:4a:b7:a7:fd:d5:6a:98:
         5e:a0:8b:2c:1b:61:2a:fe:16:26:be:58:ab:f6:90:4e:d7:22:
         44:69:44:a8:c3:3c:42:a2:82:5b:82:4c:23:d9:a7:d8:ff:a3:
         ac:c7:55:63:07:c6:b6:69:88:76:9b:a2:d7:bf:4f:7c:5f:94:
         70:27:81:85:11:57:7b:41:52:54:69:a9:16:77:1b:82:8d:ee:
         75:bb:db:e1:b7:7f:66:4a:de:95:53:c3:07:dc:2d:95:42:19:
         7b:6e:67:86:41:3b:f3:bf:03:db:65:6c:a8:fc:6a:b0:55:e7:
         a9:c0:f8:ca:d5:3c:25:b2:98:af:03:1d:65:d8:57:17:5c:62:
         7b:e3:b5:2a:d4:f0:50:21:22:90:4d:55:7b:bd:d0:32:a3:94:
         1b:3e:4e:f3:c9:f5:6b:5d:7e:f3:05:f9:07:83:98:87:39:53:
         f9:a0:ba:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:51:21 2026 by rpki-client