Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/0CEE97B4563411F09FBF271BC4F9AE02.roa
File:                     0CEE97B4563411F09FBF271BC4F9AE02.roa (raw, json)
Hash identifier:          nJI9dcMqdyDU+381sT1cH4j3pOhhrWFojDMSGC0xOMY=
Subject key identifier:   F2:79:94:05:95:6B:00:A7:46:70:52:87:C9:2A:0B:50:A9:6C:E1:60
Certificate issuer:       /CN=A913E83E/serialNumber=26A11C57F50BF3A1F7A2784A1D494D5E898361CD
Certificate serial:       B4
Authority key identifier: 26:A1:1C:57:F5:0B:F3:A1:F7:A2:78:4A:1D:49:4D:5E:89:83:61:CD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/0CEE97B4563411F09FBF271BC4F9AE02.roa
Signing time:             Fri 05 Jun 2026 07:40:43 +0000
ROA not before:           Fri 05 Jun 2026 07:40:43 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     64072
IP address blocks:        165.101.78.0/24 maxlen: 24
                          165.101.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.crl
                          rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E83E, serialNumber=26A11C57F50BF3A1F7A2784A1D494D5E898361CD
        Validity
            Not Before: Jun  5 07:40:43 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a227d7b-771a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:57:99:3a:30:20:c8:79:e6:53:ec:43:a0:2f:
                    14:ae:80:58:c3:09:bc:ec:38:c1:f3:4a:eb:5c:d8:
                    da:13:b3:8e:a2:4a:ac:de:36:f2:2d:44:fd:f6:f7:
                    49:4a:88:3a:6b:be:63:b7:58:0a:fa:6d:b4:f6:aa:
                    6a:1b:5b:c6:a6:13:a9:5f:30:6b:60:80:8a:19:a4:
                    ec:49:bd:4d:19:6b:bc:1c:0e:15:7c:c1:7d:8e:37:
                    f3:2d:18:53:d2:10:e8:cb:c4:d5:62:c1:88:2b:dc:
                    38:7f:09:17:5f:ec:0d:80:55:9e:50:79:be:f2:d7:
                    41:e0:df:b9:c8:2e:78:16:bd:73:17:20:7c:a3:c7:
                    bc:02:08:f6:17:e4:d1:a6:98:7f:bb:2f:88:ba:e9:
                    07:b8:4a:4d:b3:48:da:9a:4c:c8:49:2d:28:74:b0:
                    46:1f:c8:1c:08:d3:68:ec:68:cc:c8:6d:a1:42:28:
                    79:16:da:74:42:a2:11:08:98:8e:f0:14:4a:d3:19:
                    e3:4f:7d:d0:e6:d8:88:cd:47:75:97:38:cb:39:f1:
                    06:a0:8b:f7:73:b1:e9:fd:6a:73:b3:64:d3:ab:90:
                    98:bc:0c:20:58:a1:35:77:79:34:3b:8f:11:4c:8e:
                    b7:2c:5e:65:2c:53:04:3e:c1:6d:58:5b:b8:2f:47:
                    6f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:79:94:05:95:6B:00:A7:46:70:52:87:C9:2A:0B:50:A9:6C:E1:60
            X509v3 Authority Key Identifier:
                keyid:26:A1:1C:57:F5:0B:F3:A1:F7:A2:78:4A:1D:49:4D:5E:89:83:61:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/0CEE97B4563411F09FBF271BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:b9:c1:55:a1:90:22:1c:a9:e8:13:9a:33:e4:f2:f1:5c:a7:
         cb:5a:08:df:e6:da:6b:cb:9a:6e:39:fe:40:e7:1e:3c:e7:1a:
         61:e6:b3:14:06:f1:c4:f6:6e:72:8b:cc:97:7d:9e:39:bb:48:
         42:78:b5:d6:07:5f:ea:90:54:5c:e7:76:0b:79:c2:fa:ce:45:
         df:26:da:3d:42:b4:0e:d2:6a:99:19:8c:29:f9:71:c7:47:4d:
         96:d8:5d:61:41:93:e9:25:1d:a7:1d:be:8e:ee:ac:e3:9b:55:
         99:85:ff:5f:c8:06:32:10:bd:3e:e9:51:f7:6b:da:a0:96:e0:
         ef:e3:78:03:a8:e5:5b:d2:4e:78:04:55:50:e5:53:36:d7:9b:
         04:c0:d9:e3:c0:cb:99:77:cd:82:ec:1f:0c:11:e1:f8:d9:2f:
         79:d3:0d:cf:c2:2f:54:8b:1e:10:15:c6:e7:32:c7:07:cc:e3:
         48:94:0a:a4:1e:f7:2a:99:f3:d1:62:a5:dd:ec:e4:ce:35:a6:
         20:23:19:c7:a7:b8:7f:cc:1d:75:04:d4:ee:95:7f:40:f6:a9:
         2c:11:89:3c:df:45:86:aa:51:02:f0:81:63:e2:14:a6:e6:f5:
         5f:62:7a:f0:c8:5d:0b:87:8c:90:30:43:3b:63:f0:66:a0:b0:
         68:4e:b0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:15:19 2026 by rpki-client