Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/991FC9309CFA11F08F0A1549C4F9AE02.roa
File:                     991FC9309CFA11F08F0A1549C4F9AE02.roa (raw, json)
Hash identifier:          vBEx8MN3paA8oMvLUSfioDhDYGeEtTZ7/oH2tL94g1c=
Subject key identifier:   E9:70:8A:1B:31:03:4F:C1:64:DF:2A:39:C9:8F:A2:CB:78:12:33:8B
Certificate issuer:       /CN=A9185259/serialNumber=745036097429CC1AC76C4C99898D06F83E075C13
Certificate serial:       53
Authority key identifier: 74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/991FC9309CFA11F08F0A1549C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:17:25 +0000
ROA not before:           Tue 24 Feb 2026 08:56:57 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     154022
IP address blocks:        165.101.130.0/24 maxlen: 24
                          165.101.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl
                          rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185259, serialNumber=745036097429CC1AC76C4C99898D06F83E075C13
        Validity
            Not Before: Feb 24 08:56:57 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a3d9f5-7b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b5:a2:bb:c4:5f:d4:8c:47:18:66:62:eb:fe:
                    27:67:9d:2a:4d:de:dd:75:cf:4d:42:83:d9:59:4a:
                    79:9e:44:57:a0:b8:ee:8c:12:f2:07:a7:55:68:c0:
                    b2:e7:36:95:ac:5a:26:80:d7:c0:f8:0b:aa:72:b8:
                    68:e4:4b:cf:83:a6:32:f3:33:77:5e:70:b8:0d:68:
                    88:b1:3c:ac:7a:45:3a:1a:65:de:91:68:22:53:11:
                    6a:bb:ab:1b:80:43:fd:26:55:c0:3d:0a:03:c6:2b:
                    f3:70:09:ef:b9:45:ca:ea:82:80:0b:a9:45:b5:59:
                    ec:8f:44:a3:69:14:30:12:8d:aa:b9:3a:ef:15:e7:
                    2d:69:f2:32:a1:3f:7f:cf:67:9b:df:ce:45:f3:6f:
                    8c:68:b8:f2:a3:c5:b7:1e:ba:7d:e4:79:e5:63:30:
                    c0:c4:20:a6:07:0a:1e:d0:4f:f7:ef:04:ac:4c:3a:
                    1b:e4:29:fa:01:e5:ee:15:02:a4:0f:4f:91:d9:99:
                    bd:90:44:f4:0b:da:0f:ab:6f:13:16:82:6b:c7:5e:
                    ce:ee:92:a8:e2:2b:ec:73:97:8d:34:3c:b1:b2:56:
                    4b:ba:ad:74:db:cb:2e:7b:e4:5c:95:36:72:2f:e6:
                    1f:36:45:eb:02:4f:e9:94:52:7d:df:68:4b:bf:02:
                    91:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:70:8A:1B:31:03:4F:C1:64:DF:2A:39:C9:8F:A2:CB:78:12:33:8B
            X509v3 Authority Key Identifier:
                keyid:74:50:36:09:74:29:CC:1A:C7:6C:4C:99:89:8D:06:F8:3E:07:5C:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/dFA2CXQpzBrHbEyZiY0G-D4HXBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dFA2CXQpzBrHbEyZiY0G-D4HXBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185259/FF90928C9CF811F08812DE1EC4F9AE02/991FC9309CFA11F08F0A1549C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:93:e1:f3:14:6a:5e:83:9b:17:96:d3:0f:f5:fd:11:96:95:
         e8:3a:fb:62:45:15:26:7b:01:b8:8f:38:6d:71:10:08:97:86:
         96:3e:96:30:69:76:53:c0:cc:a6:cb:3d:81:d3:a4:66:7d:1d:
         76:78:1a:b7:63:75:84:e1:56:56:22:86:f3:52:2b:13:7d:50:
         c5:90:d6:0e:c2:4f:a4:14:bf:25:10:aa:39:55:68:f7:05:2a:
         2e:5b:2c:ba:d8:85:1a:c4:64:ef:b5:04:b0:c9:97:02:88:42:
         4c:ad:79:cc:f7:ae:4d:c1:74:62:ea:2c:34:10:d2:29:47:b9:
         c3:75:0d:29:7a:d1:b0:3c:a9:ea:e1:63:6f:39:49:65:f7:d7:
         5b:3b:9f:89:4e:c3:a8:6e:78:eb:ac:af:84:8d:e0:1e:a4:a3:
         dc:af:10:2c:c2:d5:04:4b:c4:58:0b:b3:92:78:1a:63:ed:f0:
         43:b0:68:5a:f1:63:fa:6d:c7:72:0c:a2:f8:62:da:51:6f:71:
         7e:d3:a5:93:ea:2f:6b:56:64:22:a2:50:d3:b1:0b:92:32:18:
         1f:0c:62:c8:64:5f:ac:29:91:aa:0c:a5:0c:a2:c1:98:77:77:
         b6:84:8b:ee:b9:72:1d:a5:0e:b6:41:11:9b:97:60:fb:96:30:
         01:f8:28:a4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:07:39 2026 by rpki-client