Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B4E4B08E66CE11F093600D43C4F9AE02.roa
File:                     B4E4B08E66CE11F093600D43C4F9AE02.roa (raw, json)
Hash identifier:          voxdo9f7O2a6M99z/t24vHE2yEwQwJAHurGKK/Kvzg8=
Subject key identifier:   BC:E6:9A:33:21:9F:A0:C4:20:32:E0:06:E2:A8:6D:25:48:1B:66:91
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2CA0
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B4E4B08E66CE11F093600D43C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:48:55 +0000
ROA not before:           Tue 22 Jul 2025 07:37:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154057
IP address blocks:        165.101.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11424 (0x2ca0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul 22 07:37:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c257-0a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5d:32:1c:ff:3c:a7:e9:33:ee:b6:da:eb:f0:
                    83:9b:b0:c1:64:99:4d:c5:d9:a5:02:2e:f7:4c:ed:
                    9d:29:2d:21:b0:2f:95:40:7f:95:e9:c6:0f:21:38:
                    4d:82:0f:98:f3:38:20:a7:98:63:d5:cc:ed:b2:19:
                    d6:4e:d8:5b:66:b0:77:9b:4b:01:1b:2b:39:a1:e1:
                    cd:df:f2:fc:79:8d:d8:c5:5b:d3:2d:94:db:a8:74:
                    23:0e:63:0d:e9:fc:75:f6:b0:2d:ad:9f:47:f2:41:
                    5f:4f:9e:a9:8f:2f:0a:d7:2b:b3:0b:c4:c7:1e:d3:
                    db:90:21:34:5e:bb:38:d9:61:15:69:86:02:3c:1d:
                    5f:b8:4a:01:79:4d:5c:66:39:c3:79:1f:a2:88:17:
                    05:b2:5b:d9:62:56:ff:8f:67:42:3b:c9:d5:f5:0b:
                    63:bf:4c:a3:2b:fe:f7:7d:24:da:9f:7b:5f:1f:23:
                    8a:9c:6c:2e:7e:c3:a6:15:37:42:a3:c8:b7:8b:76:
                    f2:91:63:71:3f:fc:d5:79:58:17:85:0c:10:20:e8:
                    4e:8b:cc:4f:43:fc:3c:03:1c:c4:cb:66:ab:67:7e:
                    89:db:87:37:01:ff:72:4d:72:f8:22:d4:4d:0e:11:
                    40:eb:c7:b4:15:f0:30:67:2b:9a:3f:36:7a:e8:0d:
                    94:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E6:9A:33:21:9F:A0:C4:20:32:E0:06:E2:A8:6D:25:48:1B:66:91
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/B4E4B08E66CE11F093600D43C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:0e:9c:c2:22:4f:62:69:67:49:0b:cd:2d:3f:99:e2:75:81:
         61:84:41:21:ce:30:ef:88:33:a3:94:08:b7:d0:8a:2b:4d:12:
         eb:f9:1f:b7:6f:ad:3b:1c:52:92:40:e4:b4:8c:0a:e3:8b:eb:
         9d:02:fb:ef:da:15:09:c9:b2:32:86:49:78:4c:a7:2a:5d:06:
         ba:03:ee:6b:ef:f0:b9:5b:e4:62:91:78:fb:17:a7:3b:0d:e0:
         2a:51:eb:8f:cf:5f:47:8d:30:70:20:60:71:9f:0b:3e:81:56:
         f2:81:dc:da:b7:86:f7:a1:c2:a5:08:9e:51:b9:3b:ba:8d:89:
         d0:12:5e:d0:4a:b6:34:8d:95:91:f1:69:e0:f4:7b:da:1b:9e:
         13:59:89:35:c4:81:d5:31:e6:27:1b:34:00:ea:e8:90:26:98:
         93:7a:2d:dc:2b:34:8b:60:2f:72:4c:3b:06:76:d5:80:89:89:
         86:ef:84:c5:c8:b3:42:68:da:bb:03:0c:5a:29:b3:17:0b:34:
         c6:05:62:49:f0:b1:ad:77:de:28:40:7e:99:0f:bc:18:07:74:
         24:39:c1:15:81:b4:bd:42:03:04:2c:1d:c5:81:df:c1:ac:b1:
         e9:ed:19:84:53:d7:58:1f:fb:58:69:22:7f:6d:3c:71:18:28:
         df:4f:6b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:12:40 2026 by rpki-client