Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/07026748564511F09ED8993AC4F9AE02.roa
File:                     07026748564511F09ED8993AC4F9AE02.roa (raw, json)
Hash identifier:          6QcYqyX5KFb0vGx40KSlwE5riWI0V4vT0LCNn9S8ZHQ=
Subject key identifier:   DB:B0:8E:AF:8E:2F:F6:FE:B8:A6:99:BA:46:7E:3A:DB:B2:49:8D:7F
Certificate issuer:       /CN=A91B13FE/serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D
Certificate serial:       04
Authority key identifier: 52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/07026748564511F09ED8993AC4F9AE02.roa
Signing time:             Wed 02 Jul 2025 12:19:19 +0000
ROA not before:           Wed 02 Jul 2025 12:19:19 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     154006
IP address blocks:        165.101.100.0/23 maxlen: 23
                          165.101.100.0/24 maxlen: 24
                          165.101.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl
                          rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B13FE, serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D
        Validity
            Not Before: Jul  2 12:19:19 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=686523c6-6cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f5:eb:8f:57:93:01:9a:87:e7:a1:1e:d1:7e:
                    86:f0:66:1b:c5:93:3b:8a:ea:b0:ef:69:12:20:b7:
                    62:e6:cd:a4:58:6b:4d:d7:f7:74:a3:b6:b8:7d:06:
                    fc:69:4c:4c:fe:a3:1f:dc:90:f0:4c:6f:ae:74:f3:
                    cf:a1:10:d5:77:d3:df:bd:45:ec:84:44:d8:c9:eb:
                    73:78:df:b1:0c:3f:dd:08:87:36:49:85:99:3e:23:
                    e4:06:04:a9:63:04:cf:bd:08:07:4c:6d:66:1e:af:
                    7c:5c:e6:40:cc:44:7e:ef:05:54:94:84:9e:0c:f4:
                    c0:89:ba:fe:84:08:1f:98:01:c7:b9:da:f1:7c:3d:
                    77:e5:7b:69:2f:dc:b3:2c:6a:86:3e:37:cd:fa:a2:
                    ed:98:bf:b2:f6:4d:8d:b5:b3:03:b5:4a:4d:b0:05:
                    85:fc:11:ab:b6:64:2d:eb:3b:e0:81:e2:7c:04:46:
                    61:5f:c3:d2:17:2c:b3:0b:fb:3a:ca:52:6f:ca:70:
                    6c:62:8e:d2:26:31:04:a7:b1:16:9a:05:1f:9e:6f:
                    bb:15:43:db:63:72:6a:d8:f6:39:18:86:46:21:d0:
                    84:cd:99:d0:f4:d2:71:6d:ec:65:e9:33:8f:f4:f8:
                    11:70:da:67:1d:4c:d6:7c:a2:3d:dc:a6:6b:d7:4f:
                    af:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B0:8E:AF:8E:2F:F6:FE:B8:A6:99:BA:46:7E:3A:DB:B2:49:8D:7F
            X509v3 Authority Key Identifier:
                keyid:52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/07026748564511F09ED8993AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:ae:cd:1c:64:5e:d0:7c:83:7b:c0:1e:b0:34:74:e1:76:d7:
         20:1f:e2:c7:24:90:c1:e3:7e:9b:80:86:e7:1e:70:f5:3b:4e:
         48:03:f8:c7:b4:54:bf:27:60:90:d9:91:92:7c:dc:da:2e:1c:
         a5:e5:e5:32:28:36:fa:21:f9:4b:68:ab:32:fc:e1:57:bd:23:
         5f:b4:86:00:d8:a7:b6:c3:89:cd:0c:d0:e7:63:2c:d2:f6:83:
         a0:8d:6a:16:3c:7a:1d:4f:4f:96:f5:35:5b:b1:97:85:94:b6:
         f9:9b:bf:e8:15:5d:1f:6f:b4:c6:c1:5d:6f:e1:d2:69:e9:e8:
         3b:5a:bd:7f:11:cf:b5:90:9f:e3:18:b7:dc:7e:fc:90:d8:d7:
         cf:11:73:85:b3:ca:f1:18:4a:28:0d:ab:9d:70:9e:7e:a8:e6:
         ee:73:2b:30:06:c0:f0:6e:f6:f1:a7:47:b3:a4:90:7a:f4:a2:
         42:ca:f9:51:b5:4f:1e:e1:04:89:9b:a5:79:2f:49:08:db:b2:
         b9:6d:65:82:ab:00:71:cb:7b:9e:62:d3:d6:69:72:25:4a:36:
         56:78:9c:3a:d1:be:0a:2c:9a:c0:8a:88:9c:39:df:1f:0c:f7:
         4a:07:c8:6c:b2:37:8d:7e:5b:d1:ee:22:7e:8d:f8:ca:88:d1:
         6d:d1:66:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:43:47 2025 by rpki-client