Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/E92F49E661EA11F087750C23C4F9AE02.roa
File:                     E92F49E661EA11F087750C23C4F9AE02.roa (raw, json)
Hash identifier:          I1AL4lbWGPIfV3u+8QvI9wVl+esLP3oBbI38pSI4a6c=
Subject key identifier:   3F:20:B5:7C:FA:6F:24:68:91:09:A8:8F:E8:D4:EA:FA:00:BB:E2:E0
Certificate issuer:       /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
Certificate serial:       7C
Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/E92F49E661EA11F087750C23C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:48:48 +0000
ROA not before:           Wed 16 Jul 2025 02:16:41 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     142049
IP address blocks:        165.101.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl
                          rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D
        Validity
            Not Before: Jul 16 02:16:41 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a40b80-3535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:b5:20:ba:c1:d1:1d:41:93:23:57:3c:32:
                    ba:95:91:9b:4a:74:30:73:7f:ab:fa:2d:6c:e0:c6:
                    6e:7d:e3:ca:0f:55:f4:aa:34:4e:f8:b5:ed:2f:ef:
                    42:a9:7c:f3:b2:6e:c8:59:69:12:45:67:76:2f:f0:
                    46:95:a0:69:8f:7b:e0:ae:b6:e9:c2:3f:67:de:d6:
                    b1:40:27:2c:be:05:00:bf:4f:bc:a1:e2:d0:03:3c:
                    f4:3e:ef:a7:2e:07:97:bd:44:8c:1d:58:a1:5a:be:
                    54:2f:83:c5:aa:14:3c:13:fc:56:f8:04:a4:ec:b0:
                    53:9c:53:22:e9:2a:aa:67:6f:4d:a6:a7:02:bd:be:
                    ec:98:65:56:88:ba:b1:e4:d8:d9:c6:04:f3:fb:28:
                    85:60:9f:ef:b4:f1:95:b1:5d:07:00:ab:60:a7:5f:
                    d7:e4:1c:ca:34:b7:fd:44:98:7a:e6:c6:ce:62:0d:
                    5f:e7:83:78:26:fb:8e:9d:78:ca:08:b8:e4:a1:8d:
                    3c:f2:a1:89:4d:a0:21:20:8b:21:d7:2d:20:4b:ca:
                    2d:17:90:85:a8:7e:26:db:bb:24:d5:6f:52:15:59:
                    2a:1f:40:2f:31:51:51:37:62:a2:cc:9c:01:7d:94:
                    0d:69:f7:5a:08:80:fc:8c:e8:99:3a:72:88:eb:bc:
                    ef:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:20:B5:7C:FA:6F:24:68:91:09:A8:8F:E8:D4:EA:FA:00:BB:E2:E0
            X509v3 Authority Key Identifier:
                keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/E92F49E661EA11F087750C23C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:b0:65:3d:05:db:d7:94:76:87:da:75:3f:90:23:9c:59:94:
         37:97:54:fc:3d:3d:81:e0:35:cd:19:59:31:81:ef:5f:25:25:
         78:3a:89:5f:bf:7b:7e:e3:22:89:2f:c9:3f:0f:19:fd:7d:e2:
         46:0e:ca:75:74:f9:d5:9a:70:0a:05:db:2e:3d:e7:14:b7:6b:
         d1:19:89:ac:e3:b9:a7:cf:b4:33:06:d2:f8:4b:0a:09:aa:e8:
         61:5f:18:87:1d:ae:a3:62:5f:68:14:b5:97:ab:1e:c6:ff:79:
         ed:c9:a5:44:f7:cc:11:6c:87:3f:31:b4:77:64:7b:f9:bc:dd:
         f8:d7:43:bf:0f:a0:09:55:a0:27:13:65:0e:5b:bd:97:a9:e5:
         99:c8:cd:d1:64:5e:16:84:57:6f:bf:91:04:a4:ca:77:f1:fe:
         8c:89:64:4a:46:67:c1:3a:75:09:fd:0e:c2:15:4d:58:24:b0:
         8b:9f:e4:65:49:93:eb:0c:74:95:60:65:93:7e:7e:1d:04:32:
         56:de:6c:aa:4c:6b:5b:92:70:ed:ea:90:d4:5b:ae:a4:fa:ec:
         e8:70:cd:d5:4e:8c:21:d6:c9:60:ea:5e:c1:bc:41:dd:49:0d:
         63:e0:22:26:af:1f:65:fa:22:02:09:c4:ad:38:7f:73:5a:1a:
         70:08:8b:a1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:27 2026 by rpki-client