Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/5FBB084EAE6A11ECAA9D756AC4F9AE02.roa
File:                     5FBB084EAE6A11ECAA9D756AC4F9AE02.roa (raw, json)
Hash identifier:          FqlE9fSFXdXS5GIVYg88FabUhHOpGkCxLxf9baIvlL4=
Subject key identifier:   FA:B2:32:48:A8:A3:1F:6D:67:9E:BA:7F:F4:7F:A3:25:AE:49:62:48
Certificate issuer:       /CN=A9165FF3/serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E
Certificate serial:       3554
Authority key identifier: 7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/5FBB084EAE6A11ECAA9D756AC4F9AE02.roa
Signing time:             Thu 04 Jun 2026 15:13:09 +0000
ROA not before:           Thu 04 Jun 2026 15:13:09 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     131190
IP address blocks:        203.16.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl
                          rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:59:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13652 (0x3554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165FF3, serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E
        Validity
            Not Before: Jun  4 15:13:09 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a219605-64da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3c:e6:12:02:8c:4f:63:73:d2:b2:b5:69:77:
                    a5:0a:97:ac:19:8f:22:95:0f:e8:c4:fa:96:a6:e9:
                    02:1d:5e:36:11:d3:7f:0c:91:6e:13:2b:1a:c8:7b:
                    2b:7e:79:2a:5f:32:40:e9:d7:2a:42:bd:b3:77:33:
                    09:2c:49:4c:30:de:cd:ff:a2:42:a5:a4:af:b9:b4:
                    6d:20:6e:3e:46:ea:d8:bb:0a:9f:73:18:f6:7b:98:
                    00:d1:f3:98:73:f5:95:05:ce:d7:73:33:f4:da:67:
                    e7:47:88:3c:7c:80:05:cb:3b:41:a3:a0:50:36:ea:
                    37:10:c8:06:3a:bf:12:a9:81:36:4c:53:60:ff:06:
                    cf:ae:43:b4:05:6f:6a:b3:8d:93:95:5a:11:3b:c6:
                    2d:a5:f2:61:a7:75:8c:74:74:d6:eb:83:aa:13:09:
                    88:ad:18:3a:1a:2b:21:7a:0b:8e:df:f3:13:80:0b:
                    9b:a0:61:d6:cc:bb:28:0f:cc:8d:e9:60:42:63:f6:
                    09:e8:3f:fe:d5:15:47:9f:61:2d:1f:d5:27:e8:35:
                    66:5b:21:08:02:09:38:ef:42:17:d2:67:87:c0:10:
                    7d:03:56:91:0b:dd:6a:85:ea:d6:d0:26:e9:7e:2f:
                    71:bf:55:b9:05:87:c5:f3:94:5e:60:1f:2f:04:5d:
                    25:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B2:32:48:A8:A3:1F:6D:67:9E:BA:7F:F4:7F:A3:25:AE:49:62:48
            X509v3 Authority Key Identifier:
                keyid:7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/5FBB084EAE6A11ECAA9D756AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.16.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:3e:c2:37:52:42:1a:43:43:45:03:b7:41:9a:a6:1d:63:99:
         65:fa:e5:dd:43:21:f9:22:65:b8:4c:61:07:99:2a:7a:2d:d9:
         d0:60:20:69:0d:b0:98:cc:a1:ad:81:d9:31:dc:80:bb:f4:8e:
         cd:c4:b2:13:ba:df:62:8e:ad:ac:d7:be:6b:26:7f:2a:31:42:
         8e:a0:6c:63:50:d1:c7:8b:82:28:70:1b:32:5f:36:66:97:9c:
         3b:42:fa:59:86:23:41:7c:70:84:e6:28:e9:f3:ec:3e:03:9c:
         24:be:dc:2c:9f:4e:24:fe:22:d8:f0:2c:7b:b4:7d:af:e3:7a:
         38:a5:a4:b5:6b:66:0c:5a:37:c9:55:a1:bb:39:10:da:65:22:
         84:28:60:bf:bb:10:8a:c9:72:f3:ae:6a:88:2e:39:aa:d8:36:
         e3:d2:5d:7b:04:72:00:fe:b1:5b:26:af:ec:3d:29:74:33:3b:
         a6:46:b7:84:a5:4d:b8:5d:1a:d6:cb:f1:e3:50:41:10:a4:2c:
         b7:c1:78:ef:b8:32:d4:ec:23:d1:cc:c0:2d:6d:1b:87:59:b3:
         bb:43:65:09:ec:08:d7:ff:99:48:e3:98:67:d7:d9:5c:b4:0d:
         be:3a:0d:73:6c:4c:bf:b1:c1:30:32:66:2a:3b:ea:b6:23:57:
         1c:c5:7d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:23:53 2026 by rpki-client