Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/7A8E45ACB3D211F0B405AB5CC4F9AE02.roa
File:                     7A8E45ACB3D211F0B405AB5CC4F9AE02.roa (raw, json)
Hash identifier:          kftEz2Tfg3Kb3IWiOsruleWhE1FzlQVN5rLfpMr1NHg=
Subject key identifier:   3D:CD:7A:0C:B9:7F:29:CD:8D:B5:F5:8E:17:F4:DB:24:EE:45:3B:77
Certificate issuer:       /CN=A9150F54/serialNumber=69D663354C6BB2FA3431D42AF8568210447FDBE1
Certificate serial:       A0
Authority key identifier: 69:D6:63:35:4C:6B:B2:FA:34:31:D4:2A:F8:56:82:10:44:7F:DB:E1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/adZjNUxrsvo0MdQq-FaCEER_2-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/7A8E45ACB3D211F0B405AB5CC4F9AE02.roa
Signing time:             Tue 25 Aug 2026 07:57:03 +0000
ROA not before:           Tue 25 Aug 2026 07:57:03 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     154009
IP address blocks:        165.101.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/adZjNUxrsvo0MdQq-FaCEER_2-E.crl
                          rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/adZjNUxrsvo0MdQq-FaCEER_2-E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/adZjNUxrsvo0MdQq-FaCEER_2-E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 07:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150F54, serialNumber=69D663354C6BB2FA3431D42AF8568210447FDBE1
        Validity
            Not Before: Aug 25 07:57:03 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a8d4acf-e77d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:96:a2:d7:31:36:6c:a4:dc:ce:48:7d:6e:39:
                    e8:e2:d9:e0:7a:02:0e:c6:b8:85:5f:10:b9:75:77:
                    c8:ca:92:09:d3:a8:c9:21:3f:ea:a4:06:73:3a:5f:
                    5f:8d:49:eb:d1:1f:66:8e:bd:58:09:b1:83:26:8c:
                    90:06:14:43:ec:49:ff:dc:11:29:f7:34:95:d6:0e:
                    f1:1a:08:40:3c:54:1e:2d:5b:22:3e:ea:92:26:71:
                    29:cf:cc:b7:54:2e:7b:84:64:9a:81:9c:cd:a1:78:
                    cb:a1:5b:42:48:68:b6:49:66:e0:e2:03:06:e4:1c:
                    ea:3a:4b:8d:9c:7d:5b:b8:90:08:87:92:7d:45:46:
                    da:9b:bb:ec:6c:d7:5d:95:dc:cf:19:70:49:c4:71:
                    17:b2:f4:4b:df:a5:65:5d:ce:56:69:e8:07:d5:29:
                    1c:73:d4:cf:28:ca:f5:3b:b4:aa:f5:09:54:4f:71:
                    c1:01:64:10:12:b0:3a:cd:3c:a0:06:80:74:24:10:
                    92:ac:e4:8a:74:b4:bb:12:96:1f:01:6d:1a:bd:d5:
                    87:54:a4:dc:29:9e:54:29:80:d1:8e:8b:f2:ff:65:
                    27:f9:29:d9:3a:57:d0:3c:aa:92:f8:56:f0:8f:89:
                    24:35:c9:08:e8:f5:49:a4:03:15:72:59:69:09:65:
                    75:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CD:7A:0C:B9:7F:29:CD:8D:B5:F5:8E:17:F4:DB:24:EE:45:3B:77
            X509v3 Authority Key Identifier:
                keyid:69:D6:63:35:4C:6B:B2:FA:34:31:D4:2A:F8:56:82:10:44:7F:DB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/adZjNUxrsvo0MdQq-FaCEER_2-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/adZjNUxrsvo0MdQq-FaCEER_2-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150F54/E1163E0CB3D111F08886A75BC4F9AE02/7A8E45ACB3D211F0B405AB5CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:8a:d6:6a:08:cd:a4:d1:72:18:d1:43:df:0c:2e:44:ba:63:
         3d:b6:ad:60:74:88:f5:95:00:15:1f:30:4a:57:d7:d0:be:21:
         eb:5a:c3:87:1d:9e:dc:5a:f1:37:3b:f9:9c:02:6f:a9:36:37:
         f4:be:0f:97:6d:4b:8a:85:f0:28:1d:e0:b0:7b:5f:c2:4f:31:
         99:1f:cb:95:cb:f3:c7:7b:ae:d2:fd:c5:17:10:6c:86:1c:f5:
         f5:67:64:50:cb:7f:f2:29:d2:04:35:98:72:42:28:9a:f6:b7:
         ff:30:15:10:49:1f:33:3c:58:e5:db:12:5e:63:b4:32:e5:16:
         65:f4:9b:5c:69:78:93:16:7e:cd:c0:71:f7:9b:6d:a2:f8:40:
         a2:37:33:0c:85:11:38:e0:f9:b1:2b:43:51:82:38:4c:e9:27:
         59:c1:21:13:4f:d3:ef:7d:26:0a:6a:4f:61:b2:57:ba:cd:59:
         8d:fe:09:d7:f7:01:49:eb:8e:70:a7:d9:28:52:65:4e:89:89:
         78:f8:1d:80:7e:15:1f:c6:76:b6:9b:e8:77:f8:45:0b:38:58:
         a2:75:d3:d5:a7:11:4c:a9:c9:06:98:1a:69:81:d2:e1:4e:5c:
         70:44:46:cb:5a:64:5b:56:fe:bc:ad:3f:4e:d4:ca:93:6e:d7:
         e6:35:2d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 15:53:29 2026 by rpki-client