Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/4FCEA4DEAB7411F1AEAF1A494011F970.roa
File:                     4FCEA4DEAB7411F1AEAF1A494011F970.roa (raw, json)
Hash identifier:          k0ikLn1bTTuiT/l3ng6w+BqXHzkn74K1k/UHZrJqSe4=
Subject key identifier:   CF:B0:58:BF:F1:6B:E4:9F:BE:A8:BF:B9:AE:77:7B:8D:F9:36:E1:48
Certificate issuer:       /CN=A913F772/serialNumber=AA43CDD8F343C1B5DDE5916A72DF7688CAAE7A81
Certificate serial:       21
Authority key identifier: AA:43:CD:D8:F3:43:C1:B5:DD:E5:91:6A:72:DF:76:88:CA:AE:7A:81
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkPN2PNDwbXd5ZFqct92iMqueoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/4FCEA4DEAB7411F1AEAF1A494011F970.roa
Signing time:             Tue 08 Sep 2026 10:59:07 +0000
ROA not before:           Tue 08 Sep 2026 10:59:07 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     6453
IP address blocks:        165.101.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.crl
                          rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkPN2PNDwbXd5ZFqct92iMqueoE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F772, serialNumber=AA43CDD8F343C1B5DDE5916A72DF7688CAAE7A81
        Validity
            Not Before: Sep  8 10:59:07 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a9fea7b-0028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:52:bd:34:91:80:53:68:ab:05:24:b4:43:23:
                    ab:ed:b0:e7:5a:28:ad:7d:dc:56:17:d7:df:ec:8a:
                    4b:2a:7e:60:57:26:2f:da:5c:61:45:65:6f:91:33:
                    e4:6a:6f:77:08:13:c0:60:71:10:88:53:5e:f3:dd:
                    16:67:dc:54:d0:a7:9b:12:2c:9f:8e:9b:45:a8:f6:
                    d0:60:50:77:cf:87:44:d3:e6:78:5b:d4:24:40:cb:
                    fc:68:6f:3a:ce:fb:0d:e8:99:2a:3c:53:db:7b:57:
                    b2:c8:8b:4f:66:61:d3:4d:b1:f6:54:b9:3a:0e:d6:
                    c9:ea:94:fe:ad:2a:6b:8c:a2:34:da:01:66:53:de:
                    ba:d0:bf:1f:c2:67:4f:68:a9:ba:13:87:9a:75:7f:
                    9c:f3:10:58:46:77:9a:55:31:d5:ff:97:ec:1e:67:
                    1c:a1:80:ae:33:a1:38:89:f1:b3:43:8d:bd:87:d8:
                    28:3a:c2:6b:3e:93:b0:6c:e4:25:c8:93:a9:ee:06:
                    e1:1c:87:17:14:f6:3f:f3:71:ab:7d:85:0c:e8:61:
                    4b:d3:3b:b6:d3:f2:77:73:4c:07:6f:80:7a:e5:de:
                    c6:32:73:19:f9:fe:e0:76:58:b1:c6:21:90:eb:db:
                    93:82:8f:3f:bb:8a:72:71:33:14:d9:0d:b3:0a:88:
                    47:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B0:58:BF:F1:6B:E4:9F:BE:A8:BF:B9:AE:77:7B:8D:F9:36:E1:48
            X509v3 Authority Key Identifier:
                keyid:AA:43:CD:D8:F3:43:C1:B5:DD:E5:91:6A:72:DF:76:88:CA:AE:7A:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/qkPN2PNDwbXd5ZFqct92iMqueoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkPN2PNDwbXd5ZFqct92iMqueoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F772/D003CC8884D211F1B663606C59A30FBC/4FCEA4DEAB7411F1AEAF1A494011F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:73:86:de:c2:3e:cf:19:09:4b:20:84:89:80:52:07:83:e4:
         82:ee:7f:f0:e4:98:d3:1a:9f:fd:98:09:97:56:7b:c8:cc:ed:
         20:88:30:b1:a0:2c:e8:da:4a:f2:fd:1d:97:c2:d0:88:ab:30:
         36:58:30:05:08:41:6e:26:a3:8b:82:d5:9e:b6:9b:4b:42:a1:
         5e:b0:16:3b:fc:14:19:16:e3:c6:df:4c:09:da:ec:2f:ec:13:
         07:cc:87:8a:10:e3:3d:63:97:66:79:6f:26:59:e6:7b:f7:07:
         04:91:8f:4b:ec:89:e4:cf:fa:a2:b1:d9:ce:39:df:fd:6f:ce:
         42:b6:9b:71:c6:8e:c4:6d:b3:93:36:e3:d8:f9:1e:8a:2a:fe:
         d9:23:5d:86:0d:05:b5:15:6c:18:c6:46:30:b9:8a:9f:c8:13:
         60:40:0a:b4:5a:e6:6a:c6:de:35:48:3e:cb:b5:f6:9d:35:8b:
         a3:bd:2e:46:aa:de:b4:ed:72:1c:c3:dc:a2:9a:9f:d7:1d:16:
         a1:a3:49:57:bd:b6:18:dc:65:82:ad:5b:85:05:b1:31:92:1a:
         2e:3c:2b:e8:3b:6a:62:14:59:a7:f0:22:9a:cc:15:78:12:12:
         ad:3d:5c:77:05:b0:92:c6:55:a8:6a:a5:d1:38:03:b3:09:e6:
         21:ee:1c:ec
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
Rjc3MjExMC8GA1UEBRMoQUE0M0NERDhGMzQzQzFCNURERTU5MTZBNzJERjc2ODhD
QUFFN0E4MTAeFw0yNjA5MDgxMDU5MDdaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhOWZlYTdiLTAwMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDeUr00kYBTaKsFJLRDI6vtsOdaKK193FYX19/siksqfmBXJi/aXGFFZW+RM+Rq
b3cIE8BgcRCIU17z3RZn3FTQp5sSLJ+Om0Wo9tBgUHfPh0TT5nhb1CRAy/xobzrO
+w3omSo8U9t7V7LIi09mYdNNsfZUuToO1snqlP6tKmuMojTaAWZT3rrQvx/CZ09o
qboTh5p1f5zzEFhGd5pVMdX/l+weZxyhgK4zoTiJ8bNDjb2H2Cg6wms+k7Bs5CXI
k6nuBuEchxcU9j/zcat9hQzoYUvTO7bT8ndzTAdvgHrl3sYycxn5/uB2WLHGIZDr
25OCjz+7inJxMxTZDbMKiEe3AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUz7BYv/Fr
5J++qL+5rnd7jfk24UgwHwYDVR0jBBgwFoAUqkPN2PNDwbXd5ZFqct92iMqueoEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNGNzcyL0QwMDNDQzg4ODRE
MjExRjFCNjYzNjA2QzU5QTMwRkJDL3FrUE4yUE5Ed2JYZDVaRnFjdDkyaU1xdWVv
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcWtQTjJQTkR3YlhkNVpGcWN0OTJpTXF1ZW9FLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Rjc3Mi9EMDAzQ0M4ODg0RDIxMUYxQjY2MzYwNkM1OUEzMEZCQy80RkNFQTRERUFC
NzQxMUYxQUVBRjFBNDk0MDExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAClZZIwDQYJKoZIhvcNAQELBQADggEBABVzht7CPs8ZCUsghImAUgeD
5ILuf/DkmNMan/2YCZdWe8jM7SCIMLGgLOjaSvL9HZfC0IirMDZYMAUIQW4mo4uC
1Z62m0tCoV6wFjv8FBkW48bfTAna7C/sEwfMh4oQ4z1jl2Z5byZZ5nv3BwSRj0vs
ieTP+qKx2c453/1vzkK2m3HGjsRts5M249j5Hooq/tkjXYYNBbUVbBjGRjC5ip/I
E2BACrRa5mrG3jVIPsu19p01i6O9Lkaq3rTtchzD3KKan9cdFqGjSVe9thjcZYKt
W4UFsTGSGi48K+g7amIUWafwIprMFXgSEq09XHcFsJLGVahqpdE4A7MJ5iHuHOw=
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:48:22 2026 by rpki-client