Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/EB6E0EE8677811F08B1EA154C4F9AE02.roa
File:                     EB6E0EE8677811F08B1EA154C4F9AE02.roa (raw, json)
Hash identifier:          MMOwPnwsVwQiBGtfRhC6fRE74wLsOmC1//fo0Gh9Pfw=
Subject key identifier:   0C:26:4B:6E:CC:7B:75:AA:7E:D3:B8:45:37:43:09:8C:63:94:62:3E
Certificate issuer:       /CN=A9147150/serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292
Certificate serial:       73
Authority key identifier: C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/EB6E0EE8677811F08B1EA154C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:12:23 +0000
ROA not before:           Wed 23 Jul 2025 03:55:49 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152565
IP address blocks:        165.101.250.0/23 maxlen: 23
                          165.101.250.0/24 maxlen: 24
                          165.101.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl
                          rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:12:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147150, serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292
        Validity
            Not Before: Jul 23 03:55:49 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3e6d7-7a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:af:46:9c:8d:5d:2e:5d:f2:67:64:ea:3e:6d:
                    3a:8f:f1:52:24:e3:23:6e:50:b5:98:2d:0d:97:95:
                    68:6b:c0:50:16:cd:83:f5:5b:82:2b:a0:5c:4b:da:
                    12:4b:9f:ea:b1:cf:e0:8c:3e:f9:cc:a8:57:f9:e3:
                    02:54:e7:e3:bc:f9:12:39:1c:ba:96:8b:3b:b1:97:
                    03:66:30:e4:50:f0:ea:85:6e:9d:ed:d4:70:2b:d2:
                    58:e5:67:5d:81:24:f1:66:80:6e:39:ed:63:f4:a9:
                    2f:c4:9a:00:99:76:bd:43:73:f2:61:f2:9a:59:0c:
                    7e:b3:ee:30:cf:7d:28:4e:6f:4f:81:f1:e3:65:83:
                    5a:24:18:ac:49:1e:cc:ba:ac:0f:3b:94:39:79:a4:
                    69:21:84:41:ac:4f:ac:dc:3d:7d:96:c4:84:25:00:
                    d9:33:c5:28:8f:16:cd:5a:4c:ef:03:6c:82:96:f9:
                    28:60:b6:63:a2:e6:6c:f6:b1:3c:23:f3:40:bf:b7:
                    60:b0:1c:8b:16:74:8f:6c:e6:c8:d5:a8:b7:cd:0d:
                    f4:f3:af:d6:70:76:cf:35:39:1d:ee:29:8d:a3:e5:
                    75:bc:e8:e3:b0:82:ed:a1:05:20:2a:3a:de:c8:96:
                    b6:f4:44:32:28:79:6f:25:ae:2b:c2:94:19:29:17:
                    ed:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:26:4B:6E:CC:7B:75:AA:7E:D3:B8:45:37:43:09:8C:63:94:62:3E
            X509v3 Authority Key Identifier:
                keyid:C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/EB6E0EE8677811F08B1EA154C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:36:a4:47:ec:2d:67:37:a0:cc:5d:10:a5:79:14:a1:e0:8c:
         77:d0:36:4b:04:90:35:45:03:76:26:0e:20:3d:92:87:a6:56:
         81:47:ae:0b:91:dc:a3:ff:62:54:92:a3:1a:b7:2a:5b:02:99:
         de:ac:09:15:fb:a1:9b:1d:ba:09:7e:30:81:83:dc:84:3e:ca:
         e3:62:31:51:77:eb:34:9c:f5:81:ee:12:01:fb:32:1e:64:d5:
         39:43:ec:fc:bf:05:a5:d3:d4:e3:99:fe:1b:29:21:b7:f8:f0:
         33:d3:e7:e1:d9:46:f2:fd:83:a9:a0:41:cb:c4:c2:04:ec:a0:
         60:db:27:bf:9e:a3:a8:e8:f9:e9:7a:7a:ed:95:65:19:64:ae:
         72:f0:ba:f8:23:cb:10:54:af:f4:21:b2:12:b0:13:fd:76:5a:
         ff:b2:f3:aa:0a:b8:8a:8b:5b:f6:ff:9d:51:06:3d:9c:cd:b5:
         f0:3e:a5:48:f8:58:16:eb:a9:ee:e5:18:0a:76:34:b1:1c:7f:
         bd:a4:c4:1c:ee:15:4f:96:69:ea:a5:30:7e:e7:f6:47:ae:fb:
         57:50:39:ee:35:37:57:fe:26:fd:0e:4a:9d:d9:2b:72:bf:0a:
         78:ea:07:ec:01:92:0a:aa:fd:9d:40:ff:d1:9e:ed:88:84:7a:
         51:40:82:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:38 2026 by rpki-client