Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/A1E831AA623B11F0BEB49510C4F9AE02.roa
File:                     A1E831AA623B11F0BEB49510C4F9AE02.roa (raw, json)
Hash identifier:          Fv0Xb1YYHPsAbUT9W+oUlhh14/EKgGomSuYZO2ZemCg=
Subject key identifier:   2D:8B:61:08:10:C3:A1:C8:9B:6C:F6:DB:1E:3D:A2:A0:CE:2C:79:44
Certificate issuer:       /CN=A918E951/serialNumber=15BB835DDB5F28B7E3F512887E57E9FE31738744
Certificate serial:       AB
Authority key identifier: 15:BB:83:5D:DB:5F:28:B7:E3:F5:12:88:7E:57:E9:FE:31:73:87:44
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/A1E831AA623B11F0BEB49510C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 07:41:00 +0000
ROA not before:           Fri 05 Jun 2026 07:41:00 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     45773
IP address blocks:        165.101.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl
                          rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E951, serialNumber=15BB835DDB5F28B7E3F512887E57E9FE31738744
        Validity
            Not Before: Jun  5 07:41:00 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a227d8c-b7dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:39:b1:a7:b9:8f:e6:c3:25:7a:d4:2d:57:3a:
                    ff:6b:ba:b4:c1:dd:b8:d8:ba:c9:ff:a8:57:cd:a3:
                    d8:97:96:43:1b:20:ee:57:40:c9:0d:26:68:fd:b4:
                    e2:49:6f:50:c8:83:b4:12:95:95:ef:f3:6e:3e:47:
                    4e:8f:bd:30:7d:0b:ed:f8:83:65:50:0b:71:7e:d6:
                    45:17:54:61:d4:90:21:7f:1c:6c:a5:48:a6:f4:34:
                    72:31:2d:bf:dc:34:cc:9f:b9:eb:aa:40:15:2e:8b:
                    9e:78:75:f2:fa:37:74:fe:ce:64:df:95:39:16:54:
                    17:4b:7e:e9:e5:7f:51:22:8b:b4:f6:51:2d:da:f3:
                    99:f0:95:43:ab:74:a0:7e:57:51:a8:32:04:5e:af:
                    22:7c:e9:56:3f:81:0b:4c:8e:1c:1f:d7:72:44:fa:
                    c0:1d:c8:cf:5d:b8:1a:61:b9:ed:0d:c4:43:87:38:
                    4d:0c:1e:46:78:cc:00:38:d3:eb:3d:c1:4d:84:2e:
                    b2:01:de:4d:22:21:bb:b0:82:fa:8f:66:89:0e:63:
                    96:8f:ec:cb:7e:1a:de:0a:25:cf:f5:b5:29:0c:a1:
                    82:83:0d:a5:3d:19:a6:0b:4c:0a:47:28:2a:77:ba:
                    70:a2:9c:ca:2b:8e:a1:be:35:7b:4f:e2:1a:74:90:
                    46:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8B:61:08:10:C3:A1:C8:9B:6C:F6:DB:1E:3D:A2:A0:CE:2C:79:44
            X509v3 Authority Key Identifier:
                keyid:15:BB:83:5D:DB:5F:28:B7:E3:F5:12:88:7E:57:E9:FE:31:73:87:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/FbuDXdtfKLfj9RKIflfp_jFzh0Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FbuDXdtfKLfj9RKIflfp_jFzh0Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/51BD7DDA623A11F0A7E2760BC4F9AE02/A1E831AA623B11F0BEB49510C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:15:ca:5b:77:75:18:ae:97:25:c9:b7:67:f2:42:88:9b:2c:
         e6:6e:72:cf:07:ee:2c:bc:91:7e:ad:ab:84:78:d7:b8:7f:5e:
         69:10:c6:7a:27:98:5b:17:8e:ad:05:8e:7a:3e:c5:ce:5a:4b:
         65:17:20:01:8b:c4:9d:d2:10:20:e5:bc:36:86:60:20:fd:bc:
         6b:73:7c:80:b1:02:1c:aa:2a:0d:33:fb:4c:b5:76:ae:dc:d6:
         88:37:62:80:af:8a:8c:f7:37:1a:0f:61:4e:de:ea:63:8e:e5:
         e8:d1:30:c7:23:2a:85:89:e0:e0:3b:2b:78:ce:96:a3:2d:6b:
         e4:22:cb:59:b1:00:ee:fd:5e:90:f3:f4:ad:60:ee:58:8c:11:
         ab:19:ff:03:97:ce:07:26:c2:f9:d3:d4:61:70:e7:a3:fc:c8:
         47:24:b4:66:37:06:48:4a:86:92:55:f3:a3:e8:06:22:85:7e:
         9b:70:29:d6:82:81:29:e6:ea:3c:5d:b1:67:b7:69:50:01:d2:
         e5:49:4b:26:56:74:54:8b:be:16:5c:2c:f0:d4:2a:69:e6:cd:
         d2:1e:f3:b7:21:2d:68:8d:70:bb:97:d6:87:a0:57:05:80:d2:
         0a:b1:24:f2:bf:4f:a4:dc:74:da:16:05:6b:99:4b:23:3e:8b:
         34:61:13:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:52:53 2026 by rpki-client