Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/3195F9E62C6711F0B5DEE20CC4F9AE02.roa
File:                     3195F9E62C6711F0B5DEE20CC4F9AE02.roa (raw, json)
Hash identifier:          eJNqSsgVwpcsQg2beMNYNXlFNiDiSYEYUWJ9Bn6L/vw=
Subject key identifier:   4A:C3:0B:9F:93:A6:3C:F3:17:1D:CD:78:1B:60:74:98:2F:89:34:15
Certificate issuer:       /CN=A9147049/serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3
Certificate serial:       97
Authority key identifier: 83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/3195F9E62C6711F0B5DEE20CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:04:48 +0000
ROA not before:           Thu 08 May 2025 23:50:17 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     134090
IP address blocks:        165.99.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl
                          rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147049, serialNumber=833BD79CF17E66023F70A6252D5159C9CD7A50E3
        Validity
            Not Before: May  8 23:50:17 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3e510-78e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:12:8c:cc:17:3a:24:15:f4:35:7d:b2:ff:f0:
                    b9:27:2a:24:08:4a:9e:7c:51:21:c3:ff:5b:a2:85:
                    1d:18:3e:3a:b3:13:2e:8c:8e:21:cf:3c:3c:11:d7:
                    8e:f2:47:89:a8:3e:af:10:7e:d3:75:9d:a2:a7:27:
                    3a:2f:ef:a0:1a:9d:a9:2d:98:fa:a8:94:0e:f7:f1:
                    c9:18:0a:23:30:2d:21:a6:1a:c1:6b:70:5f:4d:8a:
                    0a:8d:0e:59:10:57:27:8a:25:77:68:84:52:66:3b:
                    1c:fc:33:04:2d:41:84:b5:42:46:b5:74:b0:98:92:
                    85:a1:05:52:dc:2f:22:32:3c:2a:8a:65:5e:44:5c:
                    92:e8:d5:37:37:37:36:22:da:a2:6c:bb:d7:b4:26:
                    25:d1:2d:ec:7e:f6:6f:49:4a:99:ec:91:7a:d6:27:
                    c9:fb:4f:e7:a0:0b:ed:fa:31:a2:dd:d5:25:09:2c:
                    2f:01:b6:01:6d:fe:31:01:6a:a5:89:c2:5a:ec:37:
                    b7:47:72:a7:61:57:50:d5:56:3d:c1:eb:2b:c1:22:
                    f3:cc:e9:24:b7:c3:14:8f:28:f4:db:ea:ab:2d:a7:
                    59:45:6b:a7:97:bf:47:f8:61:85:3f:78:bf:32:dd:
                    55:31:ac:99:09:f3:11:3c:f7:43:b3:91:19:22:d7:
                    e8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C3:0B:9F:93:A6:3C:F3:17:1D:CD:78:1B:60:74:98:2F:89:34:15
            X509v3 Authority Key Identifier:
                keyid:83:3B:D7:9C:F1:7E:66:02:3F:70:A6:25:2D:51:59:C9:CD:7A:50:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/gzvXnPF-ZgI_cKYlLVFZyc16UOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gzvXnPF-ZgI_cKYlLVFZyc16UOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/A804A48E2C6611F09DA56B0BC4F9AE02/3195F9E62C6711F0B5DEE20CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:ab:66:98:79:bf:9a:70:12:5a:12:0e:23:aa:c3:85:52:fa:
         62:20:b3:04:b5:0a:24:bf:61:9e:74:9c:fc:42:21:7c:19:d7:
         3a:fd:7d:6e:10:79:89:74:7a:a8:f6:f2:e4:31:5f:a5:1b:b0:
         97:d2:87:f4:32:61:34:7c:11:2f:28:63:11:55:44:e3:3b:ed:
         a9:c4:48:2a:b0:58:9a:ef:25:95:2c:76:df:23:f7:9c:f3:80:
         0c:8e:3e:fa:51:5e:b8:71:ec:42:a0:1e:e3:e9:37:41:43:aa:
         82:fc:5c:28:8e:e8:ee:b2:8b:1a:fa:bc:03:f8:ba:d5:74:3e:
         52:f1:d0:7a:8e:1b:69:24:32:f9:f7:81:7d:3c:11:ac:5f:6c:
         bb:d6:ec:b2:d5:c7:54:f1:b5:3d:1d:fe:98:3c:d6:96:6c:0d:
         32:f6:3b:8d:d0:1e:c4:32:5d:10:a7:5f:c5:2f:e8:da:86:2a:
         1e:24:25:2d:85:b4:57:77:be:b1:64:4a:99:ac:cf:a3:51:e5:
         53:34:05:f8:10:ca:e0:51:27:b1:f7:01:4e:c6:e4:6c:c0:13:
         09:9b:4d:33:91:ff:a7:07:22:f3:2e:39:35:c0:04:2c:55:84:
         79:21:15:50:69:e0:4c:78:b9:03:b6:9d:d2:77:b0:3b:ee:0b:
         e5:54:e4:b9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDcwNDkxMTAvBgNVBAUTKDgzM0JENzlDRjE3RTY2MDIzRjcwQTYyNTJENTE1OUM5
Q0Q3QTUwRTMwHhcNMjUwNTA4MjM1MDE3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZTUxMC03OGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuRKMzBc6JBX0NX2y//C5JyokCEqefFEhw/9booUdGD46sxMujI4hzzw8EdeO
8keJqD6vEH7TdZ2ipyc6L++gGp2pLZj6qJQO9/HJGAojMC0hphrBa3BfTYoKjQ5Z
EFcniiV3aIRSZjsc/DMELUGEtUJGtXSwmJKFoQVS3C8iMjwqimVeRFyS6NU3Nzc2
ItqibLvXtCYl0S3sfvZvSUqZ7JF61ifJ+0/noAvt+jGi3dUlCSwvAbYBbf4xAWql
icJa7De3R3KnYVdQ1VY9wesrwSLzzOkkt8MUjyj02+qrLadZRWunl79H+GGFP3i/
Mt1VMayZCfMRPPdDs5EZItfo5wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFErDC5+T
pjzzFx3NeBtgdJgviTQVMB8GA1UdIwQYMBaAFIM715zxfmYCP3CmJS1RWcnNelDj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzA0OS9BODA0QTQ4RTJD
NjYxMUYwOURBNTZCMEJDNEY5QUUwMi9nenZYblBGLVpnSV9jS1lsTFZGWnljMTZV
T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2d6dlhuUEYtWmdJX2NLWWxMVkZaeWMxNlVPTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDcwNDkvQTgwNEE0OEUyQzY2MTFGMDlEQTU2QjBCQzRGOUFFMDIvMzE5NUY5RTYy
QzY3MTFGMEI1REVFMjBDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWMaMA0GCSqGSIb3DQEBCwUAA4IBAQACq2aYeb+acBJaEg4jqsOF
UvpiILMEtQokv2GedJz8QiF8Gdc6/X1uEHmJdHqo9vLkMV+lG7CX0of0MmE0fBEv
KGMRVUTjO+2pxEgqsFia7yWVLHbfI/ec84AMjj76UV64cexCoB7j6TdBQ6qC/Fwo
jujusosa+rwD+LrVdD5S8dB6jhtpJDL594F9PBGsX2y71uyy1cdU8bU9Hf6YPNaW
bA0y9juN0B7EMl0Qp1/FL+jahioeJCUthbRXd76xZEqZrM+jUeVTNAX4EMrgUSex
9wFOxuRswBMJm00zkf+nByLzLjk1wAQsVYR5IRVQaeBMeLkDtp3Sd7A77gvlVOS5
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:34 2026 by rpki-client