Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/9904EDFA857E11ECA6A4FB59C4F9AE02.roa
File:                     9904EDFA857E11ECA6A4FB59C4F9AE02.roa (raw, json)
Hash identifier:          hsyU9ucBpi23PMC4mmqVEasuZz9mOgo+14XtXXVB3bA=
Subject key identifier:   36:F5:9D:45:4F:2B:0A:D4:2B:AD:B1:00:BD:84:7B:27:19:DB:CB:34
Certificate issuer:       /CN=A9150080/serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643
Certificate serial:       046F
Authority key identifier: C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/9904EDFA857E11ECA6A4FB59C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:52:46 +0000
ROA not before:           Sat 15 Mar 2025 00:15:59 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     141757
IP address blocks:        165.173.184.0/23 maxlen: 24
                          199.67.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl
                          rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1135 (0x46f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150080, serialNumber=C3C3B6A2ABCD715DE59A30B35DFC614905BFE643
        Validity
            Not Before: Mar 15 00:15:59 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3fe5e-5d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7c:34:3a:ec:f6:3a:a5:76:60:12:c8:d0:7f:
                    8a:48:8a:79:51:61:24:9e:aa:fc:12:a5:7d:b9:2c:
                    ee:4e:1d:f5:1c:d7:e4:43:15:31:00:e0:44:2f:10:
                    ce:48:4e:f4:53:0b:3b:a9:ba:ec:bb:e0:46:61:4c:
                    08:ab:67:9b:f1:c5:2d:8b:47:03:72:df:fd:31:68:
                    b8:6d:39:fc:35:37:1b:c5:01:c2:7d:c1:83:b5:bc:
                    b6:88:69:3f:bc:8a:3f:31:2b:93:31:48:7c:34:65:
                    d2:a8:b4:91:33:da:76:8d:4f:42:6e:ea:1a:bb:19:
                    dd:22:1b:8a:0e:db:c3:60:43:f7:37:35:27:4a:e4:
                    a5:a0:53:67:74:fb:1b:bf:1d:73:e5:e0:d7:98:a3:
                    85:81:52:95:cc:2f:f8:76:28:37:62:30:f1:ba:87:
                    37:5d:59:3b:ab:37:86:14:1c:0c:71:e5:2d:72:0a:
                    7e:49:a2:27:f5:cf:94:51:80:e8:38:2c:68:ca:e2:
                    6f:98:b5:08:32:a1:82:43:c0:e0:8e:13:a5:4f:fc:
                    bf:b1:69:56:e9:de:44:46:10:19:9c:6d:8a:b2:8a:
                    12:85:13:96:7c:39:bd:c2:cd:9b:8b:44:f5:6f:10:
                    ac:f0:c8:9e:1a:a6:bf:49:25:69:7f:58:25:eb:d1:
                    ab:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F5:9D:45:4F:2B:0A:D4:2B:AD:B1:00:BD:84:7B:27:19:DB:CB:34
            X509v3 Authority Key Identifier:
                keyid:C3:C3:B6:A2:AB:CD:71:5D:E5:9A:30:B3:5D:FC:61:49:05:BF:E6:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/w8O2oqvNcV3lmjCzXfxhSQW_5kM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w8O2oqvNcV3lmjCzXfxhSQW_5kM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/185AE8A2857011EC9820E837C4F9AE02/9904EDFA857E11ECA6A4FB59C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.173.184.0/23
                  199.67.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:e0:ea:87:ca:1a:b3:85:5f:45:ef:f5:8c:89:ff:65:bf:b3:
         da:49:5f:77:39:47:b2:4d:a1:b2:eb:27:9d:c8:6c:e6:40:f4:
         1e:ea:f5:25:61:2b:da:b6:30:3d:9e:27:8e:16:52:54:15:e9:
         2f:1f:8c:e6:09:2f:12:5d:27:6e:ad:39:9e:c7:85:4c:dd:ee:
         af:bd:43:3a:9e:06:ac:a1:ec:b0:73:3e:ef:5a:b3:ec:7a:f2:
         5f:3b:40:22:66:35:07:8a:1e:54:cd:7c:18:40:75:98:b4:0e:
         69:57:ef:42:b6:3a:44:fc:2f:b4:31:12:97:13:18:fc:5c:6c:
         2f:bf:c5:dd:3d:66:6d:86:2a:c7:4f:7c:89:88:dc:d5:ae:09:
         18:47:84:9a:fe:42:98:1a:53:a1:35:9b:a2:c6:72:44:7c:7f:
         9a:ae:e7:18:bd:19:fc:c1:28:ac:ba:fd:a7:1c:27:98:0d:ed:
         f1:0f:10:dd:20:c1:6d:69:a3:7b:52:bd:af:f3:ff:08:11:34:
         e0:39:de:c3:35:f2:04:05:ec:5f:03:7b:8c:56:83:79:b5:5a:
         6b:88:62:85:7c:e7:53:c5:6a:ca:c3:c4:cf:ab:7d:b3:74:42:
         17:94:66:00:9f:94:5e:0b:d4:4d:38:7e:1b:3d:e1:63:51:ae:
         60:55:9c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:44 2026 by rpki-client