Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/C75F23C4319A11F1AC7C94E0AD833773.roa
File:                     C75F23C4319A11F1AC7C94E0AD833773.roa (raw, json)
Hash identifier:          1Ajgj3M7Y6gTIT79eYTCLQ55nPjbdLfEyaEufEH+E5M=
Subject key identifier:   3E:16:27:7F:B9:60:5E:E1:BE:E7:14:A0:86:2C:76:E0:D3:14:8E:3D
Certificate issuer:       /CN=A9196DC9/serialNumber=B109DA950576E66267795A34EBA91BC37A9923B4
Certificate serial:       75
Authority key identifier: B1:09:DA:95:05:76:E6:62:67:79:5A:34:EB:A9:1B:C3:7A:99:23:B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/C75F23C4319A11F1AC7C94E0AD833773.roa
Signing time:             Mon 06 Apr 2026 09:27:06 +0000
ROA not before:           Mon 06 Apr 2026 09:27:06 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     18187
IP address blocks:        165.101.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.crl
                          rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:44:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DC9, serialNumber=B109DA950576E66267795A34EBA91BC37A9923B4
        Validity
            Not Before: Apr  6 09:27:06 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69d37c6a-532f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3b:b8:36:2b:f6:07:df:49:92:a8:dd:96:d9:
                    9a:b5:63:25:f4:22:48:8c:4b:d1:fb:a6:08:4d:b6:
                    d5:64:40:7c:f2:86:49:25:eb:4d:2e:26:1f:55:ca:
                    76:45:0d:96:a7:a8:ed:7a:06:c3:d9:b3:bf:ff:2a:
                    dc:2a:97:9a:d1:25:95:d1:de:3f:4a:9f:81:36:6c:
                    6a:ec:13:08:31:1a:6e:55:b1:17:ac:a9:d7:e4:a4:
                    85:70:d7:c1:15:58:a1:65:a1:ea:fc:47:29:bb:c4:
                    10:4e:20:db:f6:5d:2a:34:27:fe:14:81:21:19:01:
                    da:d5:36:d0:b1:70:c7:34:a7:89:3c:da:9e:f3:b3:
                    33:08:48:3d:14:1b:19:f0:4f:c8:44:fa:72:9f:06:
                    31:ae:87:94:44:b5:6b:47:84:c1:85:16:9a:3c:3c:
                    c5:e1:14:b5:33:4c:d3:8d:51:b2:65:fc:66:9d:9c:
                    13:61:4a:c1:ab:38:95:bb:f0:0f:7b:5d:05:5b:96:
                    51:c6:2c:24:49:fc:a9:b4:6b:a7:76:ed:d2:f6:a4:
                    11:2b:02:bb:9f:7d:7e:e5:22:ff:c6:7c:98:c7:b4:
                    ce:b7:7f:70:78:0f:8e:fc:3e:79:e8:cf:d7:a3:d7:
                    b3:a9:6a:6d:f5:4d:4d:93:f3:93:37:32:b4:76:72:
                    d3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:16:27:7F:B9:60:5E:E1:BE:E7:14:A0:86:2C:76:E0:D3:14:8E:3D
            X509v3 Authority Key Identifier:
                keyid:B1:09:DA:95:05:76:E6:62:67:79:5A:34:EB:A9:1B:C3:7A:99:23:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/sQnalQV25mJneVo066kbw3qZI7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sQnalQV25mJneVo066kbw3qZI7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DC9/0E6FF54AAE5B11F08C7CAC53C4F9AE02/C75F23C4319A11F1AC7C94E0AD833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:b7:55:2d:3e:91:03:c5:8e:6b:75:17:c0:9f:e4:fe:a3:c5:
         bc:96:10:ea:51:56:fa:6e:ec:de:3c:44:5d:68:5e:b6:eb:c1:
         8d:77:d6:02:5d:e0:de:e6:e9:28:39:2c:a7:ca:d7:50:ad:18:
         11:1e:23:4b:f6:62:01:76:f4:54:2f:c7:e5:aa:d5:27:1b:f3:
         64:01:cf:50:25:6a:8a:36:7a:f9:ea:ef:09:98:a1:df:57:d1:
         bb:f2:2a:93:44:4b:f0:03:60:81:8b:92:9e:e4:e4:be:dd:f3:
         25:0b:40:94:4a:8a:4f:9c:92:b3:40:09:82:b4:27:bf:54:a5:
         a7:0e:cf:cc:f6:5c:25:d4:9b:c3:93:54:1c:03:0f:74:d3:5a:
         56:26:79:d0:98:3e:e9:c3:f1:ac:30:58:72:3b:85:53:a4:36:
         f9:0d:0e:ad:b8:c5:48:04:cd:ec:1d:7c:dc:dd:fd:48:79:79:
         65:ab:c0:59:66:c7:d0:24:00:10:38:f1:1b:5a:3d:8d:1b:2d:
         e9:d6:5e:ea:c2:35:0b:28:93:91:41:9f:0c:93:c5:fa:25:2a:
         cf:7a:13:e5:39:eb:8a:08:31:93:ff:03:de:46:34:cc:c8:b3:
         c1:f5:bd:db:27:6b:f2:63:9f:e0:31:2c:bd:60:da:a7:6b:a8:
         64:48:bc:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:07 2026 by rpki-client