Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/7D164B822A2811F0819D8C13C4F9AE02.roa
File:                     7D164B822A2811F0819D8C13C4F9AE02.roa (raw, json)
Hash identifier:          U0yLO5Ev3zOcE/jWxDek+PewuFrsGyucjJ2jYS/L358=
Subject key identifier:   82:5B:F4:DE:D6:10:B8:C6:18:0B:6E:E9:E6:39:5E:C2:FD:0F:CC:4E
Certificate issuer:       /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
Certificate serial:       030A
Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/7D164B822A2811F0819D8C13C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:19:33 +0000
ROA not before:           Tue 05 Aug 2025 02:40:33 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        203.4.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl
                          rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:50:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 778 (0x30a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34
        Validity
            Not Before: Aug  5 02:40:33 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a59c75-baa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cc:cb:63:a4:91:7d:82:51:78:11:ee:85:45:
                    92:ea:cc:29:79:f2:fd:21:32:78:72:eb:bd:22:a2:
                    59:da:26:fb:f9:2c:3d:35:d8:e1:3a:d0:20:4c:16:
                    67:e2:2a:c3:e7:a5:4c:69:49:f0:54:c2:41:a5:eb:
                    0f:80:e9:33:4b:cd:c1:6f:eb:74:19:b7:cf:a1:2d:
                    53:1a:6b:4c:dc:05:2d:0a:06:6e:de:68:fe:cc:4a:
                    35:e1:b3:a8:08:83:d9:3e:be:e1:3b:ca:30:7c:50:
                    c8:f0:91:17:17:52:05:82:5c:a1:fc:ea:f5:4b:0b:
                    6f:e1:18:22:ef:f4:a0:61:c5:10:45:06:46:c5:c1:
                    7f:49:3c:d3:22:c9:07:d5:a3:8e:11:a2:91:5f:3c:
                    be:91:8d:15:21:e8:40:fe:3a:e1:fb:89:f2:f1:31:
                    a4:eb:d0:b0:b8:65:e7:76:72:47:7b:86:07:7a:b1:
                    91:51:e6:40:a3:02:47:3c:1e:d9:ee:a8:80:31:0c:
                    17:2c:74:8d:1e:90:9f:b8:77:1b:cb:04:2d:d6:ad:
                    c4:c7:4d:25:08:e7:bc:37:cb:dd:68:56:32:3b:fc:
                    a4:a1:5a:d6:ee:b1:1e:68:a6:77:9a:a1:90:c8:11:
                    21:b6:c8:66:9b:90:ad:63:39:77:3f:7d:7f:0a:13:
                    6e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5B:F4:DE:D6:10:B8:C6:18:0B:6E:E9:E6:39:5E:C2:FD:0F:CC:4E
            X509v3 Authority Key Identifier:
                keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/7D164B822A2811F0819D8C13C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.4.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:a0:bd:50:09:c6:d6:ea:d0:56:b2:5e:49:65:62:81:6b:df:
         31:26:80:d1:3b:6d:53:3e:51:a9:b4:af:63:bf:84:74:02:30:
         4c:0f:a9:d3:b8:70:0a:e6:ff:3a:0a:70:e4:4b:51:ff:26:66:
         61:bd:21:a0:b1:c9:2c:71:51:29:bd:ff:3d:c3:0b:9a:8c:9e:
         d9:70:38:85:df:e2:c7:64:96:93:b2:82:88:80:ca:cc:8f:6b:
         79:6b:2c:c0:6f:c0:c7:bb:13:8f:90:86:16:c1:cf:97:80:74:
         1c:ae:e7:70:3b:0a:32:7f:c3:ad:4d:51:f8:81:8c:5d:64:7c:
         72:5e:cb:07:8d:10:73:7b:7b:96:8d:19:be:57:20:f9:60:e6:
         42:17:11:8d:8a:b6:7f:6d:f2:d9:c5:2b:bd:ec:6c:c8:4c:41:
         32:d3:05:63:fc:60:08:27:ce:14:00:2d:4c:55:a8:f8:85:3d:
         d0:8d:46:1c:c8:09:f4:e6:ef:b9:a0:81:c3:40:b1:35:84:ec:
         e4:b2:45:90:85:45:20:ab:47:cf:46:00:ba:0a:5c:32:20:51:
         f9:cd:09:8c:93:c6:bf:93:2a:9f:93:08:9e:69:a3:ec:a2:db:
         f8:33:9c:42:e8:b6:ab:6c:df:32:30:a2:aa:d2:42:2f:b2:4c:
         26:4b:37:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:18 2026 by rpki-client