Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/4660810C41DE11F083E3205EC4F9AE02.roa
File:                     4660810C41DE11F083E3205EC4F9AE02.roa (raw, json)
Hash identifier:          NgYA//gR87ggutPm5mFctVw4RgX1V6AvPzMOoW8iMZM=
Subject key identifier:   C7:3E:B4:8E:E7:03:28:8A:C5:FD:BB:01:6C:DF:EF:99:A5:4E:13:B2
Certificate issuer:       /CN=A9161857/serialNumber=C426D426400676555973DFEDE4EB2644BEED2873
Certificate serial:       D1
Authority key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/4660810C41DE11F083E3205EC4F9AE02.roa
Signing time:             Fri 19 Jun 2026 07:37:25 +0000
ROA not before:           Fri 19 Jun 2026 07:37:25 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     153913
IP address blocks:        165.99.148.0/24 maxlen: 24
                          165.99.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl
                          rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873
        Validity
            Not Before: Jun 19 07:37:25 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a34f1b5-60cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:94:17:08:4b:fe:80:18:37:56:84:5e:12:61:
                    13:e3:e6:03:98:83:b6:84:4a:37:50:35:f8:c2:c2:
                    9c:1d:0e:99:25:40:b9:c9:9c:66:d8:ff:a4:27:b7:
                    bc:03:a1:8b:90:d9:68:70:e6:7b:b9:7d:0b:ab:41:
                    36:43:35:e0:ed:11:01:9c:55:31:c1:21:9a:f5:6d:
                    ce:f6:66:55:32:53:6e:fb:6a:ad:d4:3f:6f:f8:27:
                    1e:40:63:c1:74:6a:d5:32:d3:ea:4b:b1:40:ba:1a:
                    dd:03:6f:19:fc:df:be:97:57:cc:1d:00:13:87:6d:
                    1e:89:5c:14:23:a7:d0:c2:66:95:4d:e3:bb:6a:22:
                    5e:42:76:30:eb:dc:c9:c2:55:d3:38:2e:81:16:ae:
                    82:af:db:02:f9:aa:e2:af:19:91:36:c8:ca:b3:d6:
                    ef:57:f0:6d:15:d9:d1:27:68:0a:f1:0c:e4:15:9e:
                    6e:ec:5f:aa:32:b1:57:ef:c2:d9:45:59:a4:03:9d:
                    40:53:29:21:c0:24:3b:b3:02:92:e4:ee:cc:ca:16:
                    8a:a0:5e:5e:71:9c:79:97:91:ae:6a:9c:5b:0a:61:
                    48:36:ca:fe:ad:88:23:08:e5:18:ac:bc:ad:a4:63:
                    b9:98:bb:5b:a6:d4:c9:64:dd:15:bf:69:b9:58:a5:
                    b2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3E:B4:8E:E7:03:28:8A:C5:FD:BB:01:6C:DF:EF:99:A5:4E:13:B2
            X509v3 Authority Key Identifier:
                keyid:C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/4660810C41DE11F083E3205EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:63:a6:38:a3:38:74:23:40:37:63:44:48:16:6f:87:1b:cc:
         bf:c0:7d:de:ce:5c:7f:ae:a2:0a:3d:db:72:11:8c:96:3b:d3:
         9f:d5:08:1e:ab:e0:e6:af:36:62:0f:1f:36:07:2b:d4:21:11:
         26:52:47:31:f7:82:7d:53:c1:56:55:83:50:8a:65:0c:da:b3:
         e8:e9:d5:10:15:83:ec:a7:b7:46:8c:4f:bf:81:12:6e:ab:69:
         26:d6:78:ec:0d:64:29:fc:67:d0:95:f7:5b:ca:55:94:7f:11:
         82:00:2f:97:7e:28:27:9c:fd:5a:71:b3:9c:86:54:a3:b5:cf:
         21:bd:19:8b:94:a0:6a:e9:96:72:c7:ef:c8:a0:74:d4:4a:c6:
         56:09:27:73:0a:c5:1e:a5:6a:76:29:63:11:36:0b:b0:ff:24:
         4e:c9:3d:a4:85:45:4d:57:74:d9:26:cc:88:94:cd:9f:26:a6:
         54:aa:2a:32:a0:2b:ab:1d:9b:1d:da:3f:c6:cc:2e:7e:ee:ce:
         87:6b:92:aa:00:f0:01:93:ac:06:01:ee:cb:a5:f7:d0:a4:e2:
         37:16:17:2c:66:9e:83:c4:09:5f:17:b7:ed:f4:f2:0f:c8:2c:
         81:79:98:8d:d6:e4:33:f5:a3:7a:59:7e:5f:75:cb:56:76:03:
         da:6c:79:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:23:14 2026 by rpki-client