Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91940AE/AAF56688EF9D11F0A2D6B779676F56BC/8A73482EEF9F11F0944076B3686F56BC.roa
File:                     8A73482EEF9F11F0944076B3686F56BC.roa (raw, json)
Hash identifier:          55+QpeWERY9vUyB/stpPBnaXl4cuii9O5JyG/1Hwg0o=
Subject key identifier:   DB:11:87:DA:A6:17:D1:82:62:AC:BC:58:B0:5A:67:EB:B6:55:A1:52
Certificate issuer:       /CN=A91940AE/serialNumber=9969A18B3A01B3EBAB5D563D2B0DC1E79FE1E165
Certificate serial:       71
Authority key identifier: 99:69:A1:8B:3A:01:B3:EB:AB:5D:56:3D:2B:0D:C1:E7:9F:E1:E1:65
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mWmhizoBs-urXVY9Kw3B55_h4WU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91940AE/AAF56688EF9D11F0A2D6B779676F56BC/8A73482EEF9F11F0944076B3686F56BC.roa
Signing time:             Mon 03 Aug 2026 09:58:33 +0000
ROA not before:           Mon 03 Aug 2026 09:58:33 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     154036
IP address blocks:        165.101.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91940AE/AAF56688EF9D11F0A2D6B779676F56BC/mWmhizoBs-urXVY9Kw3B55_h4WU.crl
                          rsync://rpki.apnic.net/member_repository/A91940AE/AAF56688EF9D11F0A2D6B779676F56BC/mWmhizoBs-urXVY9Kw3B55_h4WU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mWmhizoBs-urXVY9Kw3B55_h4WU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 08:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91940AE, serialNumber=9969A18B3A01B3EBAB5D563D2B0DC1E79FE1E165
        Validity
            Not Before: Aug  3 09:58:33 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a706649-c047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6b:0b:27:af:ac:bc:51:79:f6:bd:9d:0b:55:
                    f5:3f:ec:21:d5:5f:00:cd:ac:91:ec:cc:ea:c8:5d:
                    aa:d5:3a:e9:14:69:b8:b2:80:6b:e0:ea:3f:a7:2f:
                    21:c9:e5:8d:e8:2d:63:c6:af:b2:c2:bb:07:a0:c8:
                    ba:53:5c:a4:b1:94:0e:83:51:9c:3c:fb:5e:26:fe:
                    ea:53:50:3d:90:14:b9:f7:4e:76:18:c3:e0:f2:96:
                    b3:47:3f:8b:2e:5d:64:d0:87:80:46:2a:85:3e:38:
                    8b:7d:d9:46:c5:90:8f:a1:e8:a8:e1:4a:45:28:fd:
                    00:9c:71:3d:c4:85:19:f9:1a:30:86:b5:5f:2d:2a:
                    86:ab:63:ac:33:a6:ca:a0:fc:d6:38:67:79:4f:c5:
                    fc:1b:4c:15:d1:6e:05:d3:98:6f:90:5f:54:15:ab:
                    9c:d6:a7:33:50:c5:01:14:b5:f9:af:60:e4:a4:00:
                    42:98:60:8c:8a:64:62:96:99:f2:78:5e:26:07:e1:
                    7f:b1:6e:f0:68:c7:28:9b:15:cf:09:f8:0d:ee:70:
                    f2:d1:bc:48:f9:75:55:44:b0:f2:aa:20:42:aa:56:
                    ab:90:b5:81:54:f8:8c:7d:35:5b:06:0f:94:5f:b7:
                    f8:5e:7b:1f:95:59:a3:3f:52:9c:22:d0:2f:e8:cc:
                    19:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:11:87:DA:A6:17:D1:82:62:AC:BC:58:B0:5A:67:EB:B6:55:A1:52
            X509v3 Authority Key Identifier:
                keyid:99:69:A1:8B:3A:01:B3:EB:AB:5D:56:3D:2B:0D:C1:E7:9F:E1:E1:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91940AE/AAF56688EF9D11F0A2D6B779676F56BC/mWmhizoBs-urXVY9Kw3B55_h4WU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mWmhizoBs-urXVY9Kw3B55_h4WU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91940AE/AAF56688EF9D11F0A2D6B779676F56BC/8A73482EEF9F11F0944076B3686F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:a6:c4:30:e1:64:e4:d7:3c:04:96:b2:3b:a8:19:49:1e:e1:
         7f:10:17:a9:eb:aa:eb:aa:bb:8a:e2:70:af:fa:30:1f:ae:d5:
         b3:97:b3:4a:28:2e:ca:6f:02:d1:32:15:20:2a:e1:f6:5f:cf:
         bf:a4:19:7a:5e:a7:3b:4e:ce:c9:6f:88:40:5e:61:65:cc:08:
         d8:49:a5:cb:16:e1:72:5f:e7:d3:16:06:42:7e:69:5a:38:22:
         2a:25:08:8d:4e:36:02:f5:d8:db:05:e1:7d:b8:62:32:01:86:
         77:97:98:b5:c4:ba:cb:b5:a9:73:e5:1d:44:fa:68:a7:e7:25:
         77:6b:ba:05:bc:c2:06:8b:70:6c:67:cf:ce:da:36:1e:fa:c7:
         50:0a:14:bf:56:ee:01:3b:f0:cf:86:7a:3f:04:83:1b:72:9e:
         d7:95:0c:67:a7:cd:77:6b:80:3d:db:66:9b:fa:6e:10:9b:c9:
         7c:46:12:f9:a8:03:c7:20:ac:e4:cd:ab:d8:9b:95:58:b3:4e:
         f1:6b:af:90:5f:75:65:cb:0b:dc:09:e3:de:3e:52:70:68:24:
         90:88:62:d4:fb:66:26:58:cb:46:d6:a4:56:14:eb:f5:d5:2c:
         5a:d3:66:16:4a:c5:73:af:5b:7b:b8:32:31:57:7b:c5:fc:63:
         2c:d3:f6:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 10 20:49:43 2026 by rpki-client