Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa
File:                     DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa (raw, json)
Hash identifier:          eC+Ca7N9y7VnPMiNtCOnwDbBNDTPawuOGNwqU/JVjQc=
Subject key identifier:   36:20:48:EF:04:90:0B:40:B1:6D:E0:A6:49:76:FB:5D:13:08:43:4A
Certificate issuer:       /CN=A916C473/serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF
Certificate serial:       79
Authority key identifier: 82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:10:12 +0000
ROA not before:           Thu 10 Jul 2025 22:54:37 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135310
IP address blocks:        165.101.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl
                          rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C473, serialNumber=826AA83BBE0240D13906ABAB464317E9E7AB70EF
        Validity
            Not Before: Jul 10 22:54:37 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3e654-b16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ea:fe:fe:87:04:45:1e:20:5a:f2:c9:3b:cc:
                    c0:6c:41:a6:5d:a3:68:a8:99:2e:03:39:14:8d:27:
                    cc:78:86:fe:e8:b8:86:96:c3:d1:51:ae:16:54:f9:
                    87:ca:1c:fa:a1:99:13:d9:66:ee:3d:50:65:25:e4:
                    84:4e:f8:4a:55:3c:ad:2d:e6:23:78:f2:d2:58:19:
                    74:d5:71:ac:3b:0e:02:a6:b5:eb:b3:1b:86:93:23:
                    53:6c:82:b1:bc:d7:82:15:70:3e:cb:9d:de:4e:e6:
                    db:4e:4f:6b:0d:42:07:01:04:ac:d2:34:4e:6f:53:
                    b4:94:51:c6:20:57:89:91:cf:94:c3:8e:59:40:22:
                    19:fd:ee:53:36:50:03:1c:2b:f6:3a:ef:04:c5:e4:
                    7d:ea:f3:e8:f4:c2:28:1c:72:28:3b:8b:9c:c5:7a:
                    38:7c:d2:69:fa:35:34:af:80:17:fd:38:e3:8a:91:
                    fc:ab:37:0d:da:a0:31:28:15:b4:ab:59:97:a5:34:
                    fc:3f:42:03:fb:e4:40:95:d9:5d:c3:59:a7:4f:19:
                    54:1e:4d:36:6b:1d:13:e0:1e:42:0c:06:cb:ca:46:
                    34:c2:7b:dc:3e:9c:05:f7:8a:96:cd:57:ea:a6:b1:
                    2f:f1:2b:e6:d7:65:58:b6:5d:d7:36:ba:89:c1:14:
                    ee:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:20:48:EF:04:90:0B:40:B1:6D:E0:A6:49:76:FB:5D:13:08:43:4A
            X509v3 Authority Key Identifier:
                keyid:82:6A:A8:3B:BE:02:40:D1:39:06:AB:AB:46:43:17:E9:E7:AB:70:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/gmqoO74CQNE5BqurRkMX6eercO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmqoO74CQNE5BqurRkMX6eercO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C473/F57D23305DDF11F0A5BFD66FC4F9AE02/DA98BA4C5DE011F0B1CD4C75C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:74:fe:6e:8a:d1:6e:94:2b:df:74:a8:f2:26:56:f8:2a:07:
         5b:c9:89:66:3f:87:e1:a5:6e:73:60:f2:ea:64:9d:6e:13:74:
         cb:16:f5:94:55:84:64:ed:84:bc:bc:05:5b:e6:95:d8:7a:72:
         3d:10:67:9e:f2:3f:3c:03:ab:60:87:68:9e:ec:2f:bc:f6:e3:
         eb:2a:30:21:30:07:b2:a5:1d:ab:87:ce:3c:21:90:6a:f7:f0:
         98:d5:b2:f5:9c:7d:bc:74:5c:78:f1:bf:83:f4:77:5d:57:79:
         f5:a5:67:1a:ba:a0:00:d5:52:f6:6b:ae:41:b4:fc:cc:6b:ea:
         17:66:c3:63:1e:9f:77:10:91:2c:99:4c:8d:55:a6:06:19:8a:
         09:b2:1b:cb:12:3c:68:84:c5:4a:be:59:87:cd:db:9d:04:4b:
         e8:41:a1:a4:11:55:f2:dd:8d:6e:5f:b4:67:aa:a9:2d:1f:0c:
         e6:28:20:eb:6c:04:e7:b9:a1:60:6f:e8:21:d1:4d:a1:2f:0b:
         89:47:9d:fb:b5:d5:dd:dd:97:47:52:49:d6:3f:11:1c:19:4e:
         98:a4:84:58:b9:09:26:c8:76:7c:3d:bb:4e:be:3b:cb:2a:10:
         71:78:8a:ef:48:26:4f:50:2d:6b:71:ca:ac:39:5a:e4:dd:b5:
         5b:35:8d:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:33 2026 by rpki-client