Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/C92D041297BE11F08D37F648C4F9AE02.roa
File:                     C92D041297BE11F08D37F648C4F9AE02.roa (raw, json)
Hash identifier:          1yGUy+FEcu5CKxFiOOSQ5RewENgHpvN09c5O9/FyM64=
Subject key identifier:   AC:A0:A6:57:F3:B6:14:8D:26:A9:6B:83:91:0C:E6:8D:48:5C:F3:13
Certificate issuer:       /CN=A9166279/serialNumber=474BF735ED28F3518BCE0AC462958BEC582CD765
Certificate serial:       86
Authority key identifier: 47:4B:F7:35:ED:28:F3:51:8B:CE:0A:C4:62:95:8B:EC:58:2C:D7:65
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/C92D041297BE11F08D37F648C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:16:09 +0000
ROA not before:           Mon 02 Feb 2026 13:08:13 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     142647
IP address blocks:        165.101.118.0/24 maxlen: 24
                          165.101.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl
                          rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166279, serialNumber=474BF735ED28F3518BCE0AC462958BEC582CD765
        Validity
            Not Before: Feb  2 13:08:13 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a45839-466f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ec:33:b0:23:bd:1e:ed:ad:39:1d:d6:ba:06:
                    03:6d:eb:71:72:66:73:f6:a3:67:dd:dc:b8:25:bc:
                    de:84:88:aa:58:f9:1e:4a:cf:71:47:90:b7:fa:db:
                    00:60:f8:cf:03:14:5d:12:48:3c:16:80:5e:aa:e1:
                    08:35:06:30:da:20:b7:1b:63:48:57:2c:54:41:5c:
                    ba:2c:ac:27:25:09:09:5d:8d:ce:28:dd:d4:3f:71:
                    73:0a:2a:60:09:79:ec:df:cf:cd:f5:8a:1a:35:e7:
                    09:3c:e5:5e:53:b3:0d:09:3a:dd:f8:84:ed:55:67:
                    6e:ec:0b:44:92:bb:06:8f:5b:ff:05:dd:a9:4b:13:
                    31:c5:cd:a7:83:29:f9:db:97:26:e0:b5:31:93:26:
                    ae:d5:55:13:8c:a7:ab:50:10:31:23:c4:91:cd:05:
                    b8:c1:c7:6b:52:97:74:6f:52:62:e3:5d:9c:d6:44:
                    e7:f8:d0:ee:cb:df:b7:7b:1c:fb:21:ab:0d:fe:63:
                    0b:48:2c:7b:c8:18:34:ad:ba:e5:58:de:bf:f6:21:
                    8f:26:79:b1:65:45:76:1d:52:1f:5d:44:17:e2:0d:
                    63:34:8a:c4:62:86:4b:ae:74:16:2d:ee:4f:ea:99:
                    33:e8:3a:c2:2f:2d:fa:e6:0f:db:97:1d:d0:9d:4f:
                    e8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A0:A6:57:F3:B6:14:8D:26:A9:6B:83:91:0C:E6:8D:48:5C:F3:13
            X509v3 Authority Key Identifier:
                keyid:47:4B:F7:35:ED:28:F3:51:8B:CE:0A:C4:62:95:8B:EC:58:2C:D7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/C92D041297BE11F08D37F648C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:f9:b2:e3:5e:00:d2:3d:4d:5e:49:e0:44:b1:d7:57:d9:95:
         f7:ad:f1:ac:7e:5b:f2:a5:1e:fb:70:33:90:a0:ba:62:53:b8:
         ec:64:68:2c:54:b0:a0:cc:d7:1d:49:fe:1c:a5:7e:dc:f9:60:
         56:31:a2:82:ec:d7:6d:42:f0:75:b2:f3:57:39:9c:51:44:2d:
         20:e0:d8:13:28:47:9b:84:b8:44:3b:0f:a6:ce:cb:29:c2:6c:
         b4:d2:07:02:4a:33:d7:0f:94:cd:ad:fd:e5:fc:3b:5d:15:ad:
         dc:ca:67:f1:d4:a2:07:9c:a5:68:ea:25:2e:52:3f:07:63:2c:
         70:e4:b8:f6:62:d1:e1:c2:7e:93:40:60:40:98:a2:7c:f6:85:
         15:fa:a3:3a:3c:15:d1:78:1a:02:3a:92:a6:f6:f6:ba:9a:71:
         92:96:6a:5d:87:d9:1c:60:3c:b6:a5:58:89:8b:e3:fd:30:99:
         64:30:73:72:66:9a:ad:49:d0:3f:a1:cb:a5:dc:15:6c:8c:0d:
         5e:b4:89:5b:0f:9e:17:d5:ad:d5:42:29:bf:ee:cb:a1:98:e3:
         bc:27:1b:02:87:f7:97:35:1d:64:d8:c1:22:b1:ed:14:fe:a1:
         3d:19:f1:0c:63:2a:6d:93:d4:f8:13:39:4e:cb:f4:eb:af:21:
         11:58:c3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:20 2026 by rpki-client