Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/1B34EF06FC1C11F0AA0D3BE4396F56BC.roa
File:                     1B34EF06FC1C11F0AA0D3BE4396F56BC.roa (raw, json)
Hash identifier:          Dds/tHpcyRYMFvjsIod+yPijDRVhgC1FwQ1db6dOAxA=
Subject key identifier:   09:16:D9:8F:CD:FA:51:38:1A:18:98:04:FB:F6:7C:21:FC:67:3B:54
Certificate issuer:       /CN=A91758EC/serialNumber=D827B6843EB7F6B9F0ED5F2FF72344A52C04B49F
Certificate serial:       86
Authority key identifier: D8:27:B6:84:3E:B7:F6:B9:F0:ED:5F:2F:F7:23:44:A5:2C:04:B4:9F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/1B34EF06FC1C11F0AA0D3BE4396F56BC.roa
Signing time:             Sun 01 Mar 2026 16:14:43 +0000
ROA not before:           Wed 28 Jan 2026 07:36:49 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     150683
IP address blocks:        165.101.240.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.crl
                          rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758EC, serialNumber=D827B6843EB7F6B9F0ED5F2FF72344A52C04B49F
        Validity
            Not Before: Jan 28 07:36:49 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a465f3-7e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:13:d2:ca:8d:53:b0:fc:08:d8:b9:a6:ed:66:
                    ff:ac:ef:9d:69:3d:5e:8e:d7:2d:f1:5c:f8:22:80:
                    12:2f:f9:27:f3:46:2f:38:27:74:13:a9:69:f9:e6:
                    f6:e5:d6:ec:a9:44:2e:10:e9:3a:5b:87:70:c4:bf:
                    67:5c:1e:e2:92:51:3a:91:be:53:e6:bb:4e:8d:63:
                    91:cd:8d:c0:32:19:0a:9f:b4:52:5d:a5:f2:7d:fc:
                    c8:95:b5:d7:dd:58:4c:0e:d1:40:2e:37:68:89:e5:
                    64:ea:d3:6a:c8:d1:b1:14:69:97:b8:06:ea:8e:a6:
                    32:26:19:51:9b:38:95:db:02:f7:b1:03:06:bf:5d:
                    33:c4:3a:f8:26:0f:03:2c:86:ad:a9:02:0a:31:a5:
                    5e:51:93:e9:64:33:f2:25:25:04:64:36:a3:fc:66:
                    85:54:41:e1:6a:dd:97:e2:77:1b:74:19:65:2d:9e:
                    20:44:50:7b:12:ff:a3:5d:99:0b:05:e9:88:e5:19:
                    59:d2:58:30:ba:31:6d:e4:41:0f:a9:4f:c1:1a:5b:
                    66:e1:5c:2e:37:87:44:fb:e7:cc:7a:45:e6:ff:c3:
                    0b:27:35:38:96:bb:6d:2d:0c:6e:ea:46:05:d6:b0:
                    0c:ef:28:97:ac:4c:14:2c:97:cc:42:98:72:39:07:
                    2d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:16:D9:8F:CD:FA:51:38:1A:18:98:04:FB:F6:7C:21:FC:67:3B:54
            X509v3 Authority Key Identifier:
                keyid:D8:27:B6:84:3E:B7:F6:B9:F0:ED:5F:2F:F7:23:44:A5:2C:04:B4:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/2Ce2hD639rnw7V8v9yNEpSwEtJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Ce2hD639rnw7V8v9yNEpSwEtJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758EC/6BF86B84663011F0B9DC4E64C4F9AE02/1B34EF06FC1C11F0AA0D3BE4396F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:3f:fd:b1:d6:84:f1:1a:e2:5c:4b:d7:32:d3:48:ba:38:c8:
         55:4f:80:ce:31:a2:d0:8b:be:e6:be:ef:8d:ea:32:26:df:fd:
         4d:38:ee:9b:e7:f4:d6:e0:9f:44:46:b2:2d:58:c3:5c:3a:05:
         9a:b2:fd:30:3e:e7:e4:37:d5:e2:27:18:93:81:ab:a6:1e:26:
         e4:cf:fa:da:0a:c0:b6:92:82:57:cd:5d:e1:fc:aa:8f:12:0a:
         7f:27:c7:30:1f:be:a1:22:79:5f:7e:41:1b:eb:8f:e3:e1:05:
         6a:8a:b6:40:1e:d4:0d:00:f6:c3:a7:13:d9:e4:82:d1:14:20:
         c4:2d:68:4d:d2:11:cf:2d:ee:a6:40:6b:16:9a:04:94:89:08:
         12:0b:46:eb:a5:b0:1a:bd:0a:4e:fe:36:9e:30:e2:dc:9e:ad:
         1a:4f:dd:98:e4:bd:b0:f5:d3:e9:98:4d:8f:fb:27:be:5a:d8:
         a0:14:30:67:4d:68:ff:c1:e2:c6:26:82:1b:10:b8:5d:86:81:
         bc:85:e3:13:b9:a5:a1:a8:e7:1a:1e:05:48:76:03:d4:b5:d2:
         b6:11:1c:6c:53:b7:67:e8:59:7a:7f:be:5f:c7:aa:77:7f:8d:
         a0:a5:a7:e6:4d:a0:81:2c:34:cc:a6:9e:0f:07:d8:e6:3f:1a:
         05:33:7f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:17:45 2026 by rpki-client