Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/EBF5F8EC9A1411F1A4DC90745311F970.roa
File:                     EBF5F8EC9A1411F1A4DC90745311F970.roa (raw, json)
Hash identifier:          1ySc2Bvow117QZwtu3UHKMj6qSm7s9WBIKTKvXWod2M=
Subject key identifier:   B1:7C:31:26:4F:9A:55:D1:E8:16:11:D3:4F:67:5F:80:FD:8C:2C:BB
Certificate issuer:       /CN=A9193B7A/serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680
Certificate serial:       F5
Authority key identifier: 0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/EBF5F8EC9A1411F1A4DC90745311F970.roa
Signing time:             Thu 05 Nov 2026 07:53:21 +0000
ROA not before:           Thu 05 Nov 2026 07:53:21 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     19905
IP address blocks:        65.181.114.0/24 maxlen: 24
                          65.181.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl
                          rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 06:38:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193B7A, serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680
        Validity
            Not Before: Nov  5 07:53:21 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6aec35f1-7aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:29:e8:0e:99:49:e5:de:e4:a1:20:73:e7:5c:
                    63:98:62:0f:9e:dd:1b:36:c7:af:5d:75:a5:71:d2:
                    91:34:03:40:8e:f1:80:84:92:f5:81:95:07:5d:13:
                    60:6b:b6:e6:da:96:b5:23:6c:a6:d1:20:39:ee:2c:
                    3e:bc:f1:fd:85:f5:5d:a3:ef:a0:8a:19:58:fe:89:
                    78:c4:b3:0a:b4:15:35:3e:2b:09:38:27:72:ae:66:
                    28:f0:5a:a2:de:de:64:0f:bb:9b:a7:b3:af:c7:ba:
                    9b:b4:91:c0:89:c3:a2:f4:34:5c:13:22:24:3c:8d:
                    d7:4b:a7:5b:d1:f8:4a:fa:eb:a5:b9:1d:0e:ec:da:
                    38:16:ac:b3:ff:93:5e:fd:8c:8b:c2:c2:2b:1a:6d:
                    0f:3b:c7:ed:78:41:81:a3:4f:70:9a:28:96:91:13:
                    66:9d:94:78:5a:4f:b3:31:99:e8:d6:30:38:0d:1f:
                    a2:0e:39:d9:55:67:e9:2a:ca:f7:c6:25:fa:bd:58:
                    2a:42:78:fd:08:1b:b7:9d:bd:80:11:30:9c:a0:e4:
                    c2:e2:07:8a:b7:4c:57:28:7e:11:8a:02:32:27:53:
                    74:53:f2:a6:0c:0d:70:30:8f:70:c3:a2:bc:65:4d:
                    f2:f5:d8:25:01:9b:dd:c7:eb:0b:5d:04:02:57:6c:
                    fb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7C:31:26:4F:9A:55:D1:E8:16:11:D3:4F:67:5F:80:FD:8C:2C:BB
            X509v3 Authority Key Identifier:
                keyid:0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/EBF5F8EC9A1411F1A4DC90745311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.181.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:3e:0f:09:c7:57:72:ca:45:bb:f3:8a:86:1d:c1:cf:8a:36:
         72:21:1e:00:cc:f0:26:30:61:f1:c6:a0:78:26:15:42:63:c0:
         2d:54:a8:2d:d7:19:95:17:ce:d6:36:bf:aa:77:4b:ef:3d:d9:
         4a:13:c4:5c:47:17:d0:86:47:77:e3:bf:3a:0a:fa:a7:76:e2:
         02:f9:de:53:3a:ff:50:cf:1e:6c:9e:c7:22:70:00:34:b1:ad:
         e3:93:09:69:cc:b9:e9:b7:76:2e:4e:3d:1e:1c:ba:93:be:fb:
         ad:df:0f:91:64:b3:7b:97:66:d5:50:6d:93:24:b9:53:f5:b7:
         e1:a5:f8:54:21:1b:98:0f:c3:e2:07:cb:ed:fa:21:c4:3b:ef:
         4c:ee:c4:4c:43:0c:cd:ee:51:7d:4e:5d:6d:86:e4:a9:a9:52:
         7c:4a:53:40:42:4e:44:15:29:b7:e3:ba:16:ce:87:43:0a:95:
         c6:59:89:04:91:a0:82:24:8a:11:cd:d7:8f:a3:90:d1:a9:a0:
         c3:cb:73:8a:68:72:c6:0c:09:f7:be:52:73:68:bc:37:e3:1e:
         ec:66:4a:a5:f6:dc:75:93:ed:6d:c3:05:3b:33:f9:a6:1f:e5:
         c9:9b:47:88:55:fb:aa:a5:58:57:7e:10:d6:d5:14:7a:ad:e5:
         48:c4:6c:4c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTNCN0ExMTAvBgNVBAUTKDBDMkY0NUI2Qzg4NjIyMzI0MkVDOUJGOTNCMzQ2OTdG
NjREREY2ODAwHhcNMjYxMTA1MDc1MzIxWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWVjMzVmMS03YWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzCnoDplJ5d7koSBz51xjmGIPnt0bNsevXXWlcdKRNANAjvGAhJL1gZUHXRNg
a7bm2pa1I2ym0SA57iw+vPH9hfVdo++gihlY/ol4xLMKtBU1PisJOCdyrmYo8Fqi
3t5kD7ubp7Ovx7qbtJHAicOi9DRcEyIkPI3XS6db0fhK+uuluR0O7No4Fqyz/5Ne
/YyLwsIrGm0PO8fteEGBo09wmiiWkRNmnZR4Wk+zMZno1jA4DR+iDjnZVWfpKsr3
xiX6vVgqQnj9CBu3nb2AETCcoOTC4geKt0xXKH4RigIyJ1N0U/KmDA1wMI9ww6K8
ZU3y9dglAZvdx+sLXQQCV2z79wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLF8MSZP
mlXR6BYR009nX4D9jCy7MB8GA1UdIwQYMBaAFAwvRbbIhiIyQuyb+Ts0aX9k3faA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0I3QS9DMDg1MDY5MjdE
QkIxMUYwQkM0RDc3NjFDNEY5QUUwMi9EQzlGdHNpR0lqSkM3SnY1T3pScGYyVGQ5
b0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0RDOUZ0c2lHSWpKQzdKdjVPelJwZjJUZDlvQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTNCN0EvQzA4NTA2OTI3REJCMTFGMEJDNEQ3NzYxQzRGOUFFMDIvRUJGNUY4RUM5
QTE0MTFGMUE0REM5MDc0NTMxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBQbVyMA0GCSqGSIb3DQEBCwUAA4IBAQAdPg8Jx1dyykW784qGHcHP
ijZyIR4AzPAmMGHxxqB4JhVCY8AtVKgt1xmVF87WNr+qd0vvPdlKE8RcRxfQhkd3
4786CvqnduIC+d5TOv9Qzx5snscicAA0sa3jkwlpzLnpt3YuTj0eHLqTvvut3w+R
ZLN7l2bVUG2TJLlT9bfhpfhUIRuYD8PiB8vt+iHEO+9M7sRMQwzN7lF9Tl1thuSp
qVJ8SlNAQk5EFSm347oWzodDCpXGWYkEkaCCJIoRzdePo5DRqaDDy3OKaHLGDAn3
vlJzaLw34x7sZkql9tx1k+1twwU7M/mmH+XJm0eIVfuqpVhXfhDW1RR6reVIxGxM
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:44:57 2026 by rpki-client