Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D38BF5DCA5D111F0A6C84E41C4F9AE02.roa
File:                     D38BF5DCA5D111F0A6C84E41C4F9AE02.roa (raw, json)
Hash identifier:          EIljuUAnhRQooGjnbXBXWO272joDFZu0eui9lOMqMFk=
Subject key identifier:   B5:E2:EF:D5:89:9C:4D:4D:E7:7A:3C:F4:0A:65:09:CB:71:67:2F:95
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2CC0
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D38BF5DCA5D111F0A6C84E41C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:49:41 +0000
ROA not before:           Fri 10 Oct 2025 12:08:27 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154059
IP address blocks:        165.101.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11456 (0x2cc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Oct 10 12:08:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c285-95f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:93:d1:ba:cc:a3:96:5b:b0:0e:87:5d:c9:
                    4f:f5:53:01:72:d7:2d:bd:cc:6a:67:83:23:b4:f4:
                    36:9b:b3:da:7b:0f:6c:1a:90:77:a8:f8:6e:a5:12:
                    c3:e7:96:34:04:52:c1:75:3d:0c:93:0b:91:46:85:
                    7b:9d:0f:69:05:b5:82:70:8f:ae:cc:a4:f2:5b:5f:
                    21:55:54:90:a0:e3:0d:6d:5b:39:7c:59:a5:2a:1f:
                    cb:20:5f:4f:68:81:0f:3c:8a:08:86:fd:e5:7c:e9:
                    74:c3:1c:cd:4c:b1:ad:a9:2e:f8:d1:35:e8:40:d7:
                    cc:48:bf:38:f5:d5:23:ed:ac:dd:9e:fa:13:d2:38:
                    39:61:c0:3f:f0:0d:0a:b4:6a:c0:d8:67:ac:16:cb:
                    e3:61:33:1e:ea:68:d2:74:34:7c:a7:9f:ff:fb:fa:
                    e6:b9:c7:4b:2f:5b:c8:9f:e4:ca:7a:a9:e8:bd:36:
                    57:46:bf:59:f5:6d:0a:c3:6b:83:9e:e6:9c:45:42:
                    dc:82:6a:da:32:ab:8c:de:f6:3f:ad:15:a4:f6:48:
                    f2:c4:7d:df:c9:ea:ff:03:d2:43:20:02:48:77:4c:
                    34:af:aa:a3:6a:ff:95:9d:01:34:1b:bc:b2:6a:cc:
                    6a:fe:69:88:fe:f0:45:88:0f:79:36:d3:85:77:46:
                    ac:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E2:EF:D5:89:9C:4D:4D:E7:7A:3C:F4:0A:65:09:CB:71:67:2F:95
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D38BF5DCA5D111F0A6C84E41C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:f4:8f:58:8c:09:01:d6:e3:7d:7f:d6:04:c7:40:9f:ad:14:
         09:65:1b:59:83:de:f0:8b:b1:38:f9:7c:48:1f:71:73:d7:84:
         b2:b8:a6:fb:b4:53:7b:98:91:3d:c5:39:5b:9f:1a:29:ba:e6:
         d1:6d:b2:28:2b:dd:f1:34:82:46:f3:e1:50:92:25:54:cb:39:
         a2:86:67:bc:95:3c:73:57:fb:ed:55:9a:58:fa:b8:ee:d4:87:
         fa:91:78:23:43:5f:50:f4:dc:d3:20:f5:b8:ab:b8:22:62:a7:
         af:62:03:99:87:96:8c:58:5a:da:0f:40:00:6a:da:8c:31:9d:
         66:5d:ff:12:a2:49:20:70:7e:71:28:ef:e4:a2:36:0e:9c:da:
         ad:c0:dd:98:67:f0:c6:1c:77:fc:a8:fc:5b:34:35:76:61:fe:
         68:24:80:d9:41:d0:3b:30:cc:07:d4:3b:6f:c0:b1:de:af:65:
         71:2e:38:fc:65:62:d5:b1:fd:18:b1:11:dd:1b:97:2c:80:03:
         14:91:0c:94:ad:a6:c9:59:dd:1c:d3:a7:6a:9e:58:24:aa:aa:
         98:c0:7c:75:c5:ae:01:32:bb:e3:46:8c:f7:06:84:cb:8d:e4:
         60:86:4b:2f:67:7c:63:39:1b:8d:89:bc:72:6f:3d:cd:4a:4c:
         9a:6d:e4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:19:24 2026 by rpki-client