Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/554EE88487D911F08B837C49C4F9AE02.roa
File:                     554EE88487D911F08B837C49C4F9AE02.roa (raw, json)
Hash identifier:          KnUN81UlQodoF87eK+aMyyLj9TmAgnUYNMTKbDpsY9w=
Subject key identifier:   40:66:17:B9:CC:8E:20:C1:7E:FE:36:E7:6E:27:DC:DE:F5:13:51:24
Certificate issuer:       /CN=A9169E54/serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F
Certificate serial:       85
Authority key identifier: EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/554EE88487D911F08B837C49C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:10:44 +0000
ROA not before:           Tue 02 Sep 2025 08:46:36 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     58768
IP address blocks:        165.101.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl
                          rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169E54, serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F
        Validity
            Not Before: Sep  2 08:46:36 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3f484-43b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7c:77:05:99:02:e6:85:98:1e:44:62:df:de:
                    d6:cb:25:d1:9e:19:a9:fc:61:fa:a9:64:d1:b5:cf:
                    00:08:03:80:9e:67:c2:90:74:a6:9a:c9:39:d1:11:
                    69:43:9e:e7:90:59:e6:04:d9:2b:e8:9f:7f:6c:f8:
                    d5:1f:26:92:f1:d3:44:d9:26:a1:75:a2:07:45:e3:
                    6d:0d:b0:52:5d:e5:cd:a2:32:b6:06:b6:2f:f0:4e:
                    8f:bb:b8:7e:de:9d:0c:08:a4:96:27:1d:6c:cf:f8:
                    84:23:f1:ed:7e:cf:db:90:1c:c8:59:97:d0:27:b2:
                    e5:09:50:4a:e0:15:bf:14:43:4d:00:bf:c7:3d:2c:
                    e0:a8:d0:f6:c4:e3:b5:f6:2b:84:c3:90:1f:f1:2d:
                    e4:95:08:67:e6:f2:9c:26:e2:8b:16:41:1c:8d:48:
                    85:ad:96:12:e7:49:73:ab:4e:31:5a:1e:60:50:c2:
                    4b:52:86:cc:5e:16:ef:71:d4:d6:4a:57:56:93:5d:
                    ab:81:20:87:7f:8e:61:51:49:b0:0f:0c:ea:33:1e:
                    a0:98:ec:68:c7:7a:f0:cf:c0:14:d2:72:a1:ac:17:
                    7e:b0:ff:42:b0:07:26:3d:b8:0a:81:4c:85:eb:5d:
                    24:19:49:07:b5:5f:71:4d:7e:90:d0:17:bc:f0:a7:
                    b9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:66:17:B9:CC:8E:20:C1:7E:FE:36:E7:6E:27:DC:DE:F5:13:51:24
            X509v3 Authority Key Identifier:
                keyid:EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/554EE88487D911F08B837C49C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:b1:d0:19:22:13:7c:e8:7b:ac:4d:f1:55:72:aa:07:7b:33:
         45:a1:2f:11:f6:7e:e9:f6:cb:e0:14:38:28:0d:97:c9:5f:b5:
         bb:18:a2:04:c7:d6:31:66:8d:21:6d:7b:18:8e:51:90:bf:b6:
         70:54:67:98:f3:5d:18:db:2b:82:ea:30:f2:25:5f:1c:6a:28:
         a3:a4:a3:47:90:5f:8d:57:8b:52:80:44:f2:ca:d8:20:8e:07:
         2e:73:7f:92:8d:70:cf:e1:c3:e4:66:ab:9f:20:13:91:ae:23:
         c4:f8:9b:4a:2c:55:92:71:58:01:7d:9a:54:b0:af:7a:1d:9e:
         0a:f8:36:6b:59:fe:32:e7:58:0d:2f:ee:33:5a:62:97:bf:4d:
         9b:da:d2:07:62:ec:68:46:c9:3d:63:e5:d6:72:a2:1a:8a:dc:
         a8:28:53:45:2b:6c:01:3b:c2:b1:70:c6:d5:bf:d2:e9:1f:29:
         07:41:96:df:91:ac:7f:3f:e4:13:44:f3:c2:8a:a9:61:4a:3f:
         d8:99:bf:2a:5b:5c:b7:d2:e8:55:5d:d3:6e:0f:3b:ef:31:58:
         4d:b7:ef:ed:be:fa:41:44:02:82:4a:7a:73:84:36:cc:e5:6d:
         c6:9c:6c:33:ea:4c:87:27:c6:66:6c:a2:d3:c0:20:dd:c4:08:
         85:25:89:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:26:50 2026 by rpki-client