Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/B1291960691911F08409AD61C4F9AE02.roa
File:                     B1291960691911F08409AD61C4F9AE02.roa (raw, json)
Hash identifier:          xWeJUoZ8psX4j3Tsu87cK5nfSj2RIamnnHwKNIQT+YE=
Subject key identifier:   1D:DA:6E:28:34:33:27:B6:CB:20:DA:98:09:0D:02:43:D9:EE:85:00
Certificate issuer:       /CN=A918A2D9/serialNumber=A5AAEFA76153534CBB0EB64B68C429F5DC7F9E0A
Certificate serial:       DB
Authority key identifier: A5:AA:EF:A7:61:53:53:4C:BB:0E:B6:4B:68:C4:29:F5:DC:7F:9E:0A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/B1291960691911F08409AD61C4F9AE02.roa
Signing time:             Fri 11 Sep 2026 06:57:25 +0000
ROA not before:           Fri 11 Sep 2026 06:57:25 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154083
IP address blocks:        165.101.254.0/23 maxlen: 23
                          165.101.254.0/24 maxlen: 24
                          165.101.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.crl
                          rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A2D9, serialNumber=A5AAEFA76153534CBB0EB64B68C429F5DC7F9E0A
        Validity
            Not Before: Sep 11 06:57:25 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aa3a655-39c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:08:c3:58:03:17:6d:79:24:49:d8:bb:96:
                    70:bd:ce:69:a6:a3:26:93:c6:c5:19:97:36:31:f2:
                    97:0f:70:70:a1:7d:85:e8:24:64:ff:d3:44:96:9d:
                    f3:13:d9:24:86:29:1c:f2:00:70:b4:75:5a:fc:87:
                    cf:16:97:bc:6f:ce:5b:32:cd:66:f5:81:69:22:4d:
                    c6:08:d0:83:d5:9e:49:c5:94:c3:ac:48:fa:93:45:
                    11:25:78:c5:23:88:05:56:b3:cd:cf:b3:f0:24:be:
                    56:9b:b2:54:5b:8b:92:31:a0:69:ec:ef:6e:cd:ae:
                    c0:b8:13:62:ed:d5:28:d5:be:01:cc:53:5a:c0:7e:
                    34:be:f9:a7:e9:f3:14:12:bf:db:2e:f1:b3:06:3d:
                    5d:42:ba:8d:08:43:10:47:6c:61:43:57:16:ef:ec:
                    b8:ed:40:c2:fb:de:22:11:0c:43:cb:05:6e:5c:dc:
                    65:5a:c2:3d:38:7d:ff:84:5f:f3:cf:b4:8d:00:a4:
                    56:ed:67:5d:7a:d5:94:24:98:b5:ba:a1:7d:00:a6:
                    86:6a:6e:37:12:24:82:20:07:aa:8d:48:38:57:18:
                    d7:e8:7e:bb:b2:24:14:b1:6e:d2:a1:5c:92:fc:37:
                    03:e1:17:a1:93:de:33:c7:1c:93:90:2c:35:08:94:
                    36:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DA:6E:28:34:33:27:B6:CB:20:DA:98:09:0D:02:43:D9:EE:85:00
            X509v3 Authority Key Identifier:
                keyid:A5:AA:EF:A7:61:53:53:4C:BB:0E:B6:4B:68:C4:29:F5:DC:7F:9E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/B1291960691911F08409AD61C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:30:b2:d0:34:a5:31:0a:50:0b:10:3e:5a:cb:36:d5:86:e3:
         52:1b:99:f1:c3:01:a7:1a:a6:f8:28:58:51:47:15:1b:22:cc:
         d5:d3:0f:01:82:d1:10:d4:fd:2d:38:8a:1a:99:16:47:2e:c6:
         1d:30:bf:09:e4:15:0e:fe:05:bb:14:ed:69:85:5e:0f:47:c4:
         de:9c:8a:db:3f:c0:89:69:ac:de:9f:10:d5:45:ed:50:2d:fd:
         2d:39:80:9a:1c:e8:88:da:c3:d0:5e:b1:31:dc:78:fd:5a:73:
         51:95:43:53:75:eb:98:0a:60:17:6b:01:62:ad:c6:a6:22:42:
         3e:7f:04:90:7d:ee:96:0e:2d:11:22:a8:27:e4:82:78:45:49:
         d6:02:bc:89:13:32:68:6b:da:d8:02:c6:97:f9:2b:96:81:20:
         a2:31:ea:96:11:73:83:a4:05:70:52:21:e8:9a:40:12:51:59:
         11:d0:59:c3:9b:01:ae:9a:11:4b:1b:03:ab:43:61:84:4c:8f:
         5b:d8:d3:a8:89:3d:d0:d8:df:53:f7:85:45:b9:86:52:da:28:
         78:11:3e:32:a8:42:63:6c:7f:a7:5d:1e:97:d3:57:74:67:91:
         75:d0:0c:52:4b:8b:49:25:78:bb:a1:31:ec:9b:90:a3:e4:df:
         eb:78:39:55
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEyRDkxMTAvBgNVBAUTKEE1QUFFRkE3NjE1MzUzNENCQjBFQjY0QjY4QzQyOUY1
REM3RjlFMEEwHhcNMjYwOTExMDY1NzI1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEzYTY1NS0zOWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs0gIw1gDF215JEnYu5Zwvc5ppqMmk8bFGZc2MfKXD3BwoX2F6CRk/9NElp3z
E9kkhikc8gBwtHVa/IfPFpe8b85bMs1m9YFpIk3GCNCD1Z5JxZTDrEj6k0URJXjF
I4gFVrPNz7PwJL5Wm7JUW4uSMaBp7O9uza7AuBNi7dUo1b4BzFNawH40vvmn6fMU
Er/bLvGzBj1dQrqNCEMQR2xhQ1cW7+y47UDC+94iEQxDywVuXNxlWsI9OH3/hF/z
z7SNAKRW7WddetWUJJi1uqF9AKaGam43EiSCIAeqjUg4VxjX6H67siQUsW7SoVyS
/DcD4Rehk94zxxyTkCw1CJQ2xQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB3abig0
Mye2yyDamAkNAkPZ7oUAMB8GA1UdIwQYMBaAFKWq76dhU1NMuw62S2jEKfXcf54K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTJEOS9FOUUxNDc0QzY5
MTgxMUYwQTEwRjhCNUZDNEY5QUUwMi9wYXJ2cDJGVFUweTdEclpMYU1RcDlkeF9u
Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3BhcnZwMkZUVTB5N0RyWkxhTVFwOWR4X25nby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEEyRDkvRTlFMTQ3NEM2OTE4MTFGMEExMEY4QjVGQzRGOUFFMDIvQjEyOTE5NjA2
OTE5MTFGMDg0MDlBRDYxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWX+MA0GCSqGSIb3DQEBCwUAA4IBAQASMLLQNKUxClALED5ayzbV
huNSG5nxwwGnGqb4KFhRRxUbIszV0w8BgtEQ1P0tOIoamRZHLsYdML8J5BUO/gW7
FO1phV4PR8TenIrbP8CJaazenxDVRe1QLf0tOYCaHOiI2sPQXrEx3Hj9WnNRlUNT
deuYCmAXawFircamIkI+fwSQfe6WDi0RIqgn5IJ4RUnWAryJEzJoa9rYAsaX+SuW
gSCiMeqWEXODpAVwUiHomkASUVkR0FnDmwGumhFLGwOrQ2GETI9b2NOoiT3Q2N9T
94VFuYZS2ih4ET4yqEJjbH+nXR6X01d0Z5F10AxSS4tJJXi7oTHsm5Cj5N/reDlV
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:37:26 2026 by rpki-client