Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/E92F49E661EA11F087750C23C4F9AE02.roa
File:                     E92F49E661EA11F087750C23C4F9AE02.roa (raw, json)
Hash identifier:          TR3KMntthAwVhbNksuMzt3WXfXIJDm+0sJy4E3HFO4A=
Subject key identifier:   D9:A9:CD:19:75:A3:43:C3:22:C2:CF:FE:B0:0F:61:3D:4E:73:62:29
Certificate issuer:       /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
Certificate serial:       B1
Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/E92F49E661EA11F087750C23C4F9AE02.roa
Signing time:             Thu 04 Jun 2026 22:28:15 +0000
ROA not before:           Thu 04 Jun 2026 22:28:15 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     142049
IP address blocks:        165.101.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl
                          rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
        Validity
            Not Before: Jun  4 22:28:15 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21fbff-0cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f1:f1:c6:51:81:ef:21:b6:7c:52:6c:09:c1:
                    99:2f:2e:6e:b6:2f:1b:ff:48:67:51:f8:6e:3c:88:
                    9b:a7:03:56:a5:64:4f:81:94:93:2a:85:38:d4:f0:
                    e3:b6:c3:04:a8:d8:1e:8b:31:8a:de:27:f8:fa:84:
                    bb:72:62:d0:fc:4e:3b:a6:c1:4f:3e:18:15:e8:85:
                    05:2b:cf:4c:8c:25:56:70:0e:37:0f:c3:8a:99:92:
                    7f:c8:f1:46:3a:19:b3:c8:7e:aa:6d:b0:6c:ba:a5:
                    b7:3b:f3:f3:60:a8:d7:08:54:48:06:59:c2:6e:2e:
                    6b:90:7e:df:03:c3:9a:9f:34:3a:41:fa:26:41:36:
                    22:fe:45:4b:8e:a7:c5:6b:02:e4:7a:b1:54:b7:0e:
                    b4:85:eb:43:7b:c8:cb:37:8c:1e:41:38:e2:6c:29:
                    49:ed:d7:65:38:07:6b:ed:12:6a:0c:42:39:b7:f4:
                    de:4b:63:c2:7e:5a:9a:79:01:7e:48:a8:8d:d0:4d:
                    f7:4c:60:9d:a3:92:91:ce:69:d5:e6:c2:24:a9:e5:
                    77:56:b9:20:de:75:09:06:5d:f2:2c:1d:ca:c7:d9:
                    9b:e1:fb:55:cd:aa:bf:ac:e8:fb:25:07:b7:8b:83:
                    c6:3a:c9:a2:77:98:35:73:62:57:5e:9e:df:d8:8d:
                    87:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A9:CD:19:75:A3:43:C3:22:C2:CF:FE:B0:0F:61:3D:4E:73:62:29
            X509v3 Authority Key Identifier:
                keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/E92F49E661EA11F087750C23C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:06:37:ae:ee:f5:cb:93:f3:b0:44:7f:82:aa:59:2f:51:7b:
         82:7a:5d:13:fb:6f:42:89:1e:35:e6:8f:e1:24:74:60:e8:38:
         96:77:d3:ad:90:44:74:80:95:7e:5c:c6:df:18:a1:94:3a:cb:
         fb:8f:3e:44:16:e5:29:27:36:84:78:7e:3d:33:9f:ae:fb:55:
         2e:c6:3f:97:22:c5:7f:8f:26:4a:59:ac:26:56:1e:54:21:3c:
         b3:08:59:1c:14:e0:0c:b4:3a:88:ba:41:e3:35:a3:33:92:6c:
         a3:54:cd:ec:1e:0c:19:2d:39:f1:a9:ff:21:a4:0f:db:ec:ee:
         10:fe:94:79:52:17:ae:14:de:9a:69:25:81:29:09:d4:ff:48:
         e6:63:9f:28:dd:80:fb:49:39:fd:a8:04:dd:58:d9:85:78:c3:
         ed:46:58:3c:db:38:e1:6c:23:72:b4:9f:6c:80:bb:17:c4:c0:
         ad:62:49:fc:a1:0e:f5:31:48:28:93:ca:87:54:4c:64:19:87:
         ef:6c:ac:7b:f1:e9:3d:39:ca:cb:39:ea:7c:50:7e:92:95:94:
         fc:cc:1d:66:14:51:ce:0d:94:d3:56:62:c5:fe:9b:b8:93:f6:
         a1:b5:07:4b:83:a0:7d:c2:09:17:a0:f7:70:28:aa:50:5a:93:
         38:43:4a:f5
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjhEMDAxMTAvBgNVBAUTKDIxNDI5MzNGQkU2RTdDNUZCNzY3QTg2QTVFMjFERDYw
MTc4RUEzOUQwHhcNMjYwNjA0MjIyODE1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIxZmJmZi0wY2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApPHxxlGB7yG2fFJsCcGZLy5uti8b/0hnUfhuPIibpwNWpWRPgZSTKoU41PDj
tsMEqNgeizGK3if4+oS7cmLQ/E47psFPPhgV6IUFK89MjCVWcA43D8OKmZJ/yPFG
OhmzyH6qbbBsuqW3O/PzYKjXCFRIBlnCbi5rkH7fA8OanzQ6QfomQTYi/kVLjqfF
awLkerFUtw60hetDe8jLN4weQTjibClJ7ddlOAdr7RJqDEI5t/TeS2PCflqaeQF+
SKiN0E33TGCdo5KRzmnV5sIkqeV3Vrkg3nUJBl3yLB3Kx9mb4ftVzaq/rOj7JQe3
i4PGOsmid5g1c2JXXp7f2I2H5wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNmpzRl1
o0PDIsLP/rAPYT1Oc2IpMB8GA1UdIwQYMBaAFCFCkz++bnxft2eoal4h3WAXjqOd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQwMC9GMUFGMTA1MjYx
REYxMUYwQTZGNzREN0ZDNEY5QUUwMi9JVUtUUDc1dWZGLTNaNmhxWGlIZFlCZU9v
NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0lVS1RQNzV1ZkYtM1o2aHFYaUhkWUJlT281MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjhEMDAvRjFBRjEwNTI2MURGMTFGMEE2Rjc0RDdGQzRGOUFFMDIvRTkyRjQ5RTY2
MUVBMTFGMDg3NzUwQzIzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQApWXTMA0GCSqGSIb3DQEBCwUAA4IBAQBNBjeu7vXLk/OwRH+Cqlkv
UXuCel0T+29CiR415o/hJHRg6DiWd9OtkER0gJV+XMbfGKGUOsv7jz5EFuUpJzaE
eH49M5+u+1Uuxj+XIsV/jyZKWawmVh5UITyzCFkcFOAMtDqIukHjNaMzkmyjVM3s
HgwZLTnxqf8hpA/b7O4Q/pR5UheuFN6aaSWBKQnU/0jmY58o3YD7STn9qATdWNmF
eMPtRlg82zjhbCNytJ9sgLsXxMCtYkn8oQ71MUgok8qHVExkGYfvbKx78ek9OcrL
Oep8UH6SlZT8zB1mFFHODZTTVmLF/pu4k/ahtQdLg6B9wgkXoPdwKKpQWpM4Q0r1
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:48:35 2026 by rpki-client