Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/8CB6031052AB11F0BFD3D952C4F9AE02.roa
File:                     8CB6031052AB11F0BFD3D952C4F9AE02.roa (raw, json)
Hash identifier:          wfT6L50IJJ1HQiWFUXD5dfPtDNu1dKe1T4vh9B1U844=
Subject key identifier:   9D:AA:A4:74:DD:A2:AF:2E:48:74:A4:AA:99:34:5A:BE:DE:17:A1:CA
Certificate issuer:       /CN=A9196780/serialNumber=9FCD8F67692DBD821E7BDE6A6FBBD67C780757F9
Certificate serial:       83
Authority key identifier: 9F:CD:8F:67:69:2D:BD:82:1E:7B:DE:6A:6F:BB:D6:7C:78:07:57:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n82PZ2ktvYIee95qb7vWfHgHV_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/8CB6031052AB11F0BFD3D952C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:09:14 +0000
ROA not before:           Thu 26 Jun 2025 16:35:20 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     153991
IP address blocks:        165.101.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.crl
                          rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n82PZ2ktvYIee95qb7vWfHgHV_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196780, serialNumber=9FCD8F67692DBD821E7BDE6A6FBBD67C780757F9
        Validity
            Not Before: Jun 26 16:35:20 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a3e61a-6c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ae:94:70:fa:03:26:47:59:fb:9c:91:be:bf:
                    3d:ff:a9:b3:f4:ff:ad:d5:44:39:31:e8:81:b1:e3:
                    fe:6e:d3:49:e7:c3:36:3d:d1:d3:16:f2:4e:39:bd:
                    1b:98:4b:0f:32:f7:cc:9a:45:79:33:b5:75:54:c9:
                    04:1f:56:45:b9:57:2a:d9:ce:ca:c7:e8:5d:1f:af:
                    1e:3c:96:cb:12:4c:48:f4:31:0c:36:ba:37:34:b3:
                    5a:54:a2:c1:8c:6d:86:1b:2f:79:d7:d6:03:18:64:
                    58:df:a2:1a:cc:40:3b:5f:de:65:6d:dc:bd:17:a7:
                    bf:d1:af:d2:81:4b:29:83:f5:9a:4b:1f:f7:d8:05:
                    e3:65:4a:d5:2b:3e:6b:b0:cb:44:19:19:95:f7:d2:
                    91:17:1d:d7:96:b5:65:5a:67:ae:79:50:17:4a:ee:
                    d9:e3:37:73:c8:22:e1:67:79:c4:d4:f5:6d:ce:18:
                    b8:86:73:17:27:44:85:fb:1b:5b:66:a3:ea:25:8c:
                    31:ba:c0:8a:56:e2:f0:0d:cb:37:3d:62:4d:75:e7:
                    10:a2:52:f3:2c:e7:af:0e:86:b1:86:f8:a0:72:50:
                    00:2e:f3:c7:1c:8c:e8:bf:6e:f5:53:a4:e4:6d:69:
                    f0:24:ad:9e:ed:68:18:f0:ad:55:c5:7a:5b:7b:9a:
                    3a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AA:A4:74:DD:A2:AF:2E:48:74:A4:AA:99:34:5A:BE:DE:17:A1:CA
            X509v3 Authority Key Identifier:
                keyid:9F:CD:8F:67:69:2D:BD:82:1E:7B:DE:6A:6F:BB:D6:7C:78:07:57:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n82PZ2ktvYIee95qb7vWfHgHV_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/8CB6031052AB11F0BFD3D952C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:d3:41:08:6a:00:e3:95:fc:17:e8:85:a8:87:53:91:cf:87:
         9f:8a:61:2b:a1:06:ed:dd:9f:07:60:9d:33:4f:ac:e5:82:88:
         a7:83:67:e6:d8:d4:80:cf:71:09:a7:33:72:15:38:d4:dc:33:
         20:24:5b:29:48:92:3a:60:8a:73:52:26:2f:c5:ca:fe:2f:10:
         38:3d:51:fc:c7:fa:99:28:6d:7d:fb:0e:28:6f:35:16:a1:33:
         14:51:3b:4c:ba:b8:5c:cd:f6:09:6a:cc:9c:80:01:3f:a7:4e:
         3d:38:d1:e6:8c:14:fd:e6:ea:1f:cc:9c:98:05:d7:8e:36:e6:
         b8:9b:74:9d:b9:65:f0:7d:86:58:bb:76:c7:44:39:cf:46:78:
         8c:c9:0b:8a:08:67:04:53:57:39:ec:c4:6b:7e:af:d3:1a:fc:
         10:f1:31:31:9a:ee:89:a6:69:b7:e6:e1:82:38:3b:25:10:5b:
         b9:80:92:ac:01:bd:44:a4:b4:05:b5:68:83:4e:37:2f:e6:19:
         bb:71:ec:91:9d:d6:b7:b1:9a:51:d1:a3:03:52:75:ee:9a:fd:
         5c:89:fb:6f:52:de:c7:4a:0e:49:e6:1d:c9:f3:65:20:3c:fb:
         51:41:e4:da:8d:32:1f:70:32:51:4b:f2:73:fd:be:0a:7e:81:
         03:ef:6c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:56:39 2026 by rpki-client