Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/E0FC9A944D3111F08F258733C4F9AE02.roa
File:                     E0FC9A944D3111F08F258733C4F9AE02.roa (raw, json)
Hash identifier:          lsJzZcQXucRSGsDa9fqzcB68LdkVMfXeXekEmDJWeX0=
Subject key identifier:   B3:29:24:79:61:5A:CD:A5:C9:2A:5A:4B:7C:37:69:68:26:24:B8:0D
Certificate issuer:       /CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F
Certificate serial:       A0
Authority key identifier: 72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/E0FC9A944D3111F08F258733C4F9AE02.roa
Signing time:             Thu 19 Jun 2025 17:21:47 +0000
ROA not before:           Thu 19 Jun 2025 17:21:47 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     151081
IP address blocks:        165.101.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl
                          rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 06:28:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7175, serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F
        Validity
            Not Before: Jun 19 17:21:47 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=6854472b-488e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:27:e1:cc:b4:08:fd:f0:14:c1:2e:a0:c2:51:
                    b0:03:a0:f4:c9:32:33:fe:ee:99:62:5d:e1:ad:e8:
                    f9:95:bd:b2:72:a2:17:a5:0d:61:9d:0c:4b:02:cd:
                    c2:3e:f2:35:4c:29:46:6b:48:3b:69:5f:b6:fa:e2:
                    de:c7:48:5b:52:15:fd:92:e8:53:86:16:92:22:9b:
                    f8:fa:8e:43:62:b6:58:94:dc:50:c8:b7:90:cd:44:
                    ab:2e:88:b7:b6:6d:f5:94:9b:32:8f:64:2e:b8:3a:
                    8c:73:7f:8e:cb:08:f4:cb:29:25:e2:c8:64:c7:2d:
                    0b:8b:58:28:11:35:36:28:88:fc:cb:0c:4d:b4:d7:
                    8e:59:2b:39:03:af:60:06:a7:4c:d3:02:4f:7b:71:
                    b1:ba:ce:6b:b7:e5:8b:c1:b0:e6:11:b6:51:4b:ef:
                    29:d5:a6:b7:01:02:45:59:4c:6b:de:6c:d5:d9:f1:
                    98:1e:3f:78:48:35:22:df:67:9b:50:7a:29:91:7d:
                    50:5a:da:21:aa:8b:06:80:40:4c:6d:22:51:8c:9b:
                    04:91:49:d6:01:72:b4:c4:0b:4f:99:7d:49:bb:a0:
                    a1:e2:e4:69:d3:8e:52:02:f3:17:26:4a:98:56:ad:
                    62:c9:94:d8:59:7f:50:73:46:23:9d:b3:7b:9f:0b:
                    17:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:29:24:79:61:5A:CD:A5:C9:2A:5A:4B:7C:37:69:68:26:24:B8:0D
            X509v3 Authority Key Identifier:
                keyid:72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/E0FC9A944D3111F08F258733C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:ec:0f:b5:28:b1:a2:a5:ca:f9:08:3b:77:eb:70:7b:c8:db:
         e5:36:50:e2:35:e2:75:ef:ee:d7:1b:80:d1:2c:0e:70:c7:55:
         da:5c:c4:ac:7d:a1:4b:0e:b8:46:52:1f:55:07:f5:f9:08:8f:
         2f:b8:a9:88:bd:fa:2b:a9:0a:34:ca:8c:5a:f6:b0:ca:37:c7:
         2a:af:16:bf:5e:2a:01:6b:74:de:7b:25:d6:fb:ac:40:d6:3c:
         01:3c:8f:18:ca:d6:d6:64:8d:3a:31:ac:cd:26:b2:f1:9a:2c:
         ae:86:dd:4c:cc:0d:8f:04:d2:03:4d:5d:b1:58:7c:4c:8e:4e:
         b9:c6:c6:a1:41:8b:d0:77:e1:1f:5b:2d:69:a1:d5:9a:dc:1e:
         71:2e:e8:64:80:c2:5e:bd:e2:c0:44:76:49:8e:26:0d:c6:de:
         2b:4c:e5:2f:ee:55:72:55:0e:b4:1d:fb:16:71:eb:ab:7f:7c:
         06:e9:de:9c:34:3a:09:53:3b:65:28:b4:6c:f8:62:f2:b6:f7:
         0f:f2:5b:54:59:55:85:12:5d:3a:08:30:23:06:11:1a:8e:6f:
         f1:a2:e7:ff:ba:c2:2b:1a:63:7a:7b:6b:3d:6a:64:00:df:b9:
         87:bd:9d:8c:f2:53:a6:aa:f8:c0:21:c8:8e:95:8f:53:72:d2:
         48:9d:a1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 17 11:28:14 2025 by rpki-client