Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/A7C3D2B2316811F19417970E9A833773.roa
File:                     A7C3D2B2316811F19417970E9A833773.roa (raw, json)
Hash identifier:          tapVWMYlaRVDB9x1KJh3fh4Ygoi4OLRA4yRspnT+Bxw=
Subject key identifier:   2D:46:4F:21:CD:BA:10:A9:53:D0:C1:14:F0:7A:F1:F5:BE:89:51:02
Certificate issuer:       /CN=A9196DC9/serialNumber=B109DA950576E66267795A34EBA91BC37A9923B4
Certificate serial:       CD
Authority key identifier: B1:09:DA:95:05:76:E6:62:67:79:5A:34:EB:A9:1B:C3:7A:99:23:B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/A7C3D2B2316811F19417970E9A833773.roa
Signing time:             Mon 21 Sep 2026 07:57:57 +0000
ROA not before:           Mon 21 Sep 2026 07:57:57 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154080
IP address blocks:        165.101.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.crl
                          rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 07:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DC9, serialNumber=B109DA950576E66267795A34EBA91BC37A9923B4
        Validity
            Not Before: Sep 21 07:57:57 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6ab0e384-cfed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d2:04:e7:c3:98:70:ec:d4:44:c8:47:a7:e2:
                    d5:ae:6a:f4:ef:bb:db:55:dc:48:64:46:85:c9:da:
                    43:ca:24:dd:a6:f6:bb:16:6b:66:61:17:ba:be:c8:
                    1b:b0:14:50:b3:60:75:f3:4c:d2:f5:27:6c:e9:c2:
                    c2:2e:ea:cb:d4:51:30:7b:fc:aa:14:cb:17:78:b5:
                    7f:d0:d0:3d:38:3d:45:0c:a3:12:29:21:c3:6c:d7:
                    5e:3f:83:a9:03:70:91:0d:5f:21:95:95:06:98:a5:
                    69:db:c8:36:19:56:83:5a:bf:25:7f:7b:b7:43:8f:
                    f6:0d:39:16:03:0a:6d:ca:6e:96:81:28:45:92:b7:
                    9d:88:5c:7b:a4:2d:49:02:45:23:58:e8:1f:8b:a5:
                    71:fc:9c:8e:67:04:96:65:4c:54:66:72:f7:2f:5e:
                    db:1e:27:68:33:27:36:42:0d:bb:f9:cc:81:6f:0b:
                    18:56:ad:c2:a9:69:39:01:2b:e1:02:18:1a:b2:65:
                    79:0e:67:a2:35:91:81:45:c6:73:e1:6c:e7:f1:0c:
                    96:f3:06:cd:84:a5:37:40:5c:9b:57:f9:ad:6e:b7:
                    fe:b1:5e:c2:c3:25:63:43:33:a9:ad:13:92:e0:b9:
                    14:84:1d:45:c8:2b:d6:48:74:6c:24:72:54:c8:e3:
                    33:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:46:4F:21:CD:BA:10:A9:53:D0:C1:14:F0:7A:F1:F5:BE:89:51:02
            X509v3 Authority Key Identifier:
                keyid:B1:09:DA:95:05:76:E6:62:67:79:5A:34:EB:A9:1B:C3:7A:99:23:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/A7C3D2B2316811F19417970E9A833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:fc:8f:f5:b5:75:da:45:8e:c7:b5:50:06:5a:59:98:44:6d:
         6b:b9:7a:ce:13:f6:1a:5a:96:18:aa:db:2c:7d:d0:5d:2b:af:
         96:b8:aa:f8:90:0a:6c:47:ff:3d:91:65:6c:ee:12:e1:59:da:
         ef:c3:ed:af:34:27:8b:ef:03:2b:70:1b:44:59:4c:19:08:c7:
         03:ca:df:93:63:55:49:e0:6b:84:42:fa:5a:6e:43:ba:29:9b:
         c9:ac:11:45:95:46:c5:58:6f:94:ee:5f:8f:ff:3b:a6:cc:2e:
         42:b5:ec:c2:4e:5c:b5:b0:e4:da:cb:c2:06:95:bb:a1:3e:cf:
         2e:38:6f:b9:69:68:b9:69:6e:84:a5:3c:bc:46:bd:67:50:7c:
         58:80:0d:8d:df:2a:90:21:b6:f3:07:cb:31:a4:b4:ed:ca:e2:
         5f:11:3b:98:48:d9:4d:e2:1b:7f:5f:22:78:76:5b:97:aa:89:
         8c:fc:00:cf:94:50:b7:fc:b0:31:d4:43:64:13:66:8b:61:78:
         71:6f:cf:27:96:97:4b:db:1c:ad:dc:43:75:cb:da:e7:a2:47:
         ad:4e:54:02:1b:75:01:05:9c:79:82:e6:8e:74:dd:08:42:7e:
         67:7e:f1:d9:d7:14:a4:a0:48:ca:fb:ed:98:00:a9:f6:e5:a6:
         07:da:6b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:45:19 2026 by rpki-client