Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/0B9DC9A2623711F0B8A15A64C4F9AE02.roa
File:                     0B9DC9A2623711F0B8A15A64C4F9AE02.roa (raw, json)
Hash identifier:          4gDTb37IJyZ+JBazZaPsyxB7SJI6xxcbthYmqr0Dp8I=
Subject key identifier:   D0:D3:6F:11:17:CC:5B:F4:B6:81:CE:E1:CF:00:90:D1:F2:5D:FA:9A
Certificate issuer:       /CN=A9190587/serialNumber=A9B53F7B619631870928902FF484765741BDA2E9
Certificate serial:       78
Authority key identifier: A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/0B9DC9A2623711F0B8A15A64C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:11:24 +0000
ROA not before:           Wed 16 Jul 2025 11:21:40 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153056
IP address blocks:        165.101.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl
                          rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190587, serialNumber=A9B53F7B619631870928902FF484765741BDA2E9
        Validity
            Not Before: Jul 16 11:21:40 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3e69c-caeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2b:04:b0:c2:1f:6d:b0:c6:75:ff:23:36:3a:
                    70:c5:68:86:70:2c:42:02:34:37:9e:1e:bf:10:a1:
                    47:98:16:0d:77:cd:d8:e5:f1:f3:6b:f1:1e:36:d0:
                    fe:ad:ac:99:c4:1d:7e:a8:0c:01:00:ab:37:94:2d:
                    99:9f:d9:df:88:8b:56:45:14:6c:4b:2d:4f:43:a8:
                    8b:29:2b:da:c2:a6:6a:5a:61:c6:34:8c:6f:a3:8d:
                    f0:c7:25:2d:69:42:60:29:a4:f8:23:cf:aa:4e:9f:
                    c4:fd:5c:52:d7:c8:fa:d3:d4:32:a2:2b:40:1d:ac:
                    1d:6a:ca:61:63:31:fa:7d:e9:ce:8e:cb:7d:d8:ac:
                    1b:a2:c2:11:3e:df:30:5b:40:0f:ad:a6:ca:66:56:
                    54:a2:2a:7a:81:8d:c9:e3:61:d8:8d:52:25:29:49:
                    48:39:2d:0e:81:87:02:e4:3a:44:58:5c:74:18:06:
                    ac:5a:83:50:d7:32:bc:a3:03:ce:41:7d:60:c3:5f:
                    af:b0:e4:5d:ec:19:d0:3f:05:55:e1:a6:a2:80:18:
                    39:ca:e4:bb:85:18:8e:94:5e:fe:0e:fa:33:47:87:
                    bc:51:e4:ab:83:77:ce:13:f9:13:b2:02:01:07:79:
                    e8:f4:dd:60:a8:cb:30:f0:3b:f0:e0:73:a3:34:86:
                    41:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D3:6F:11:17:CC:5B:F4:B6:81:CE:E1:CF:00:90:D1:F2:5D:FA:9A
            X509v3 Authority Key Identifier:
                keyid:A9:B5:3F:7B:61:96:31:87:09:28:90:2F:F4:84:76:57:41:BD:A2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/qbU_e2GWMYcJKJAv9IR2V0G9ouk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qbU_e2GWMYcJKJAv9IR2V0G9ouk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190587/90F1435A621811F0AA22A026C4F9AE02/0B9DC9A2623711F0B8A15A64C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:3f:8d:be:46:4e:69:f3:c3:18:0b:37:74:93:d2:a6:4d:3c:
         76:ae:dc:c5:f1:e0:53:21:71:94:7b:3d:7f:a4:ea:3d:61:7c:
         fc:9c:ff:c8:83:9a:5f:e2:a1:f5:6d:ef:f6:9a:c9:a5:7a:70:
         db:56:df:34:53:b8:06:6b:ad:a2:a1:37:bc:a2:6a:70:7f:d7:
         f9:e7:61:77:d1:a4:1a:d8:26:c7:51:64:6e:26:e6:72:c9:f7:
         37:7a:99:66:c1:10:2f:1a:ba:32:c5:e3:5f:c6:3a:63:c2:21:
         42:94:f9:12:49:ed:b9:c4:a6:a5:9c:89:7f:49:24:e5:46:0b:
         22:25:c8:3e:49:40:af:9d:c2:d5:b4:da:c1:3f:09:ea:d6:ee:
         ee:3d:35:56:fd:24:f6:64:69:0a:df:08:98:ad:c2:c9:16:44:
         ec:26:7d:6d:43:97:f5:6f:db:07:6a:95:43:54:bc:39:09:fe:
         a2:e0:db:ac:51:de:49:a3:50:df:a1:0a:80:f0:c3:90:79:32:
         cf:d0:00:25:77:e2:9a:bd:7c:8b:67:08:04:a8:56:16:8a:ba:
         a3:68:f5:21:b7:5c:28:9f:92:25:ea:7e:16:84:6c:d1:67:25:
         b4:6c:ad:9f:aa:bf:52:94:ac:79:ec:67:95:b5:1d:3b:43:9a:
         7f:a5:0b:ed
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:35 2026 by rpki-client