Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/A78653B2561F11F09624D128C4F9AE02.roa
File:                     A78653B2561F11F09624D128C4F9AE02.roa (raw, json)
Hash identifier:          U+SMdhKcC6YZLVwx7CjvcktHCkK7+pBrjdw40Tvbfas=
Subject key identifier:   31:98:D3:33:44:71:E4:17:18:E6:87:A9:91:62:9F:78:96:FF:A0:54
Certificate issuer:       /CN=A917DFDA/serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
Certificate serial:       85
Authority key identifier: 81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/A78653B2561F11F09624D128C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:10:55 +0000
ROA not before:           Tue 01 Jul 2025 02:04:00 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     152692
IP address blocks:        165.101.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl
                          rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DFDA, serialNumber=81A657EAAC7554CAB7A1A288F5B3FEEDD8A5CC4B
        Validity
            Not Before: Jul  1 02:04:00 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a58c5f-3d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:07:31:d3:3a:ed:d2:01:fa:b6:40:3a:c2:
                    81:29:8a:f3:3c:3e:a1:87:7b:34:cc:05:b3:6a:0b:
                    1c:d7:c8:b8:97:3c:da:ad:53:7b:36:76:02:ed:90:
                    9b:8a:12:f6:36:6a:9a:26:c4:03:49:0f:35:cc:a6:
                    88:a1:0f:f8:e6:47:4c:66:f7:9c:8c:86:7f:37:4a:
                    c4:32:cf:0c:ae:05:3b:9a:45:da:80:70:33:b9:c6:
                    16:44:c5:cd:59:62:69:22:12:da:00:15:48:0e:38:
                    9b:2c:ee:32:fc:92:68:d3:45:ea:e1:ac:69:59:52:
                    c0:5c:60:83:f6:ba:9b:81:aa:ec:b9:a0:b7:67:0c:
                    08:3e:48:d4:f0:0c:8e:1d:6a:d0:41:d9:0b:5c:f4:
                    51:2d:52:63:86:7b:9a:44:de:20:aa:e2:eb:52:63:
                    db:00:21:67:7e:29:d3:5c:12:78:59:73:75:7a:2b:
                    67:31:11:00:9f:3e:d7:3f:f4:ec:74:2a:72:72:6c:
                    8b:c2:0c:f5:7b:b1:ae:21:f2:a8:40:d1:4d:b4:35:
                    37:97:6b:d7:e2:69:6f:85:09:3c:f1:1a:bc:73:5b:
                    01:20:76:2f:cd:60:e3:cd:d0:aa:76:a3:68:b8:dc:
                    dd:60:de:99:42:8f:9c:e3:af:32:5a:79:96:35:d9:
                    6c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:98:D3:33:44:71:E4:17:18:E6:87:A9:91:62:9F:78:96:FF:A0:54
            X509v3 Authority Key Identifier:
                keyid:81:A6:57:EA:AC:75:54:CA:B7:A1:A2:88:F5:B3:FE:ED:D8:A5:CC:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/gaZX6qx1VMq3oaKI9bP-7dilzEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gaZX6qx1VMq3oaKI9bP-7dilzEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DFDA/7613F316531311F085DECE79C4F9AE02/A78653B2561F11F09624D128C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:68:43:41:75:11:b7:58:c6:f9:8f:e0:28:c9:6e:ec:b1:7f:
         af:73:db:cd:f4:f3:3e:ed:a6:b2:d5:4c:68:c1:97:8a:af:26:
         ae:05:d2:9f:29:e9:81:a8:92:36:ca:a7:4c:2e:00:96:a0:4c:
         14:d0:98:13:55:aa:e1:1e:c8:83:6c:88:b1:70:4f:c3:9a:70:
         4d:e6:bb:6f:9d:18:68:b1:1a:38:90:28:13:d2:29:a6:cb:c4:
         a3:1a:78:ba:d1:87:53:d7:3d:4c:7f:34:6c:67:50:4d:34:c4:
         dd:9a:5a:00:31:52:b8:03:18:6a:13:3e:01:be:f9:c7:29:87:
         45:da:bb:a0:e8:2c:7f:e5:93:cc:c1:c0:d3:b8:c7:3b:d7:d7:
         4a:84:af:f1:a3:65:19:e0:76:67:29:00:57:31:c8:ed:7b:d7:
         2e:38:3f:91:9b:be:c0:d8:cc:c3:5f:83:1b:3a:96:95:c9:c0:
         e0:0a:60:29:19:6c:6a:21:43:ba:59:6b:7f:a3:b0:8e:20:af:
         19:00:c3:be:be:fe:0f:68:ab:81:87:62:8b:ac:3f:6a:3a:5a:
         23:ec:ff:db:a5:b9:a9:4c:73:91:09:c0:66:5a:20:45:0f:90:
         ae:a0:88:70:5b:39:8e:d4:79:34:b0:8a:94:b2:18:3c:df:26:
         62:79:36:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:46:15 2026 by rpki-client