Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/7CC500A86DEC11F0BD1BF429C4F9AE02.roa
File:                     7CC500A86DEC11F0BD1BF429C4F9AE02.roa (raw, json)
Hash identifier:          ZaIebFS4/8vVvAF/zkH7WP2QeQVx2pb6rObiWL8nH0k=
Subject key identifier:   36:9F:E5:27:2F:49:F9:84:42:DF:CD:AD:3F:A8:77:77:49:4E:E5:04
Certificate issuer:       /CN=A91D61DF/serialNumber=BAF355F03A2ED884A617A47427C25CFCCCE31276
Certificate serial:       86
Authority key identifier: BA:F3:55:F0:3A:2E:D8:84:A6:17:A4:74:27:C2:5C:FC:CC:E3:12:76
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/7CC500A86DEC11F0BD1BF429C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:37:31 +0000
ROA not before:           Thu 31 Jul 2025 08:58:12 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     141199
IP address blocks:        165.101.48.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.crl
                          rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D61DF, serialNumber=BAF355F03A2ED884A617A47427C25CFCCCE31276
        Validity
            Not Before: Jul 31 08:58:12 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a3deab-7516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fb:9f:86:6a:e3:9c:7d:f5:9c:e7:43:39:4c:
                    67:ef:04:47:06:5e:c7:44:b7:43:31:1d:bb:da:84:
                    16:ec:e3:80:87:51:24:80:82:a3:2f:0e:37:ff:fe:
                    70:cf:bf:53:f7:55:68:bf:07:56:91:63:d9:ce:be:
                    7b:85:19:8e:7c:ab:6f:26:be:11:33:55:06:fa:7e:
                    5e:d3:90:ee:3f:a4:d5:55:5c:d2:bd:4d:14:04:34:
                    be:e7:a0:ee:92:8a:26:62:a5:ce:a0:19:b4:06:d0:
                    ea:32:31:d2:6d:26:39:a1:d5:2f:1c:0d:08:96:25:
                    bf:a2:8d:3a:ba:a2:af:8b:20:07:00:5d:01:31:64:
                    c6:6e:0e:6e:18:af:71:d5:fb:17:0e:1c:05:9f:2a:
                    fa:cb:7f:a6:5a:75:14:50:4b:25:d9:14:73:2d:ea:
                    c9:35:b2:12:81:43:f5:3d:73:29:12:8c:63:38:0c:
                    71:87:9a:a5:e7:16:ee:b2:fe:b0:61:6f:ed:19:20:
                    c9:c4:bb:f5:7e:28:78:ec:fc:fc:bd:4c:b4:e7:71:
                    95:14:6e:ed:51:b2:53:62:7d:06:a5:91:67:d1:17:
                    16:61:c8:ef:35:f6:47:82:9a:d9:cb:91:3d:0c:2e:
                    2c:a7:f8:41:56:90:fa:96:11:0b:8c:93:c8:00:8b:
                    17:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9F:E5:27:2F:49:F9:84:42:DF:CD:AD:3F:A8:77:77:49:4E:E5:04
            X509v3 Authority Key Identifier:
                keyid:BA:F3:55:F0:3A:2E:D8:84:A6:17:A4:74:27:C2:5C:FC:CC:E3:12:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/7CC500A86DEC11F0BD1BF429C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:b5:26:81:46:a6:dc:9c:55:9e:17:5f:2c:ae:7e:94:22:73:
         cc:37:50:de:74:55:48:09:92:ec:c0:de:50:aa:2a:45:23:15:
         cc:2a:6b:fc:24:3c:8c:ac:ae:07:3f:52:b4:37:9e:f4:ee:ee:
         8e:34:b6:e8:b5:a0:64:ea:27:17:84:96:2f:24:91:c3:39:92:
         59:32:c0:fb:99:70:db:3b:e4:4f:17:b1:e4:21:40:43:b0:5e:
         b0:83:eb:58:09:3f:e7:41:63:69:27:78:54:10:99:b6:ad:d6:
         b9:44:33:34:c4:3e:cb:4c:64:14:11:e0:9f:e3:2f:ab:18:1f:
         6b:3f:33:19:dc:bc:14:fb:a7:f4:4a:21:96:ee:81:d4:71:a5:
         60:f8:54:07:e8:0a:cc:f7:21:50:06:af:c4:77:de:aa:b2:99:
         45:3a:cc:4b:a8:14:ca:34:79:1d:53:fc:aa:7e:1b:d5:33:ca:
         e2:90:9f:60:09:52:28:5f:d9:8d:1b:99:df:1c:36:12:5d:6e:
         a9:ec:5e:e7:37:01:87:f0:aa:b6:bf:ed:c3:fb:92:12:2b:56:
         43:6f:9b:86:2e:a3:7d:f6:87:27:f0:40:e8:bf:02:a3:06:35:
         03:53:20:d9:98:67:c1:19:a0:b6:97:de:40:c8:b3:a8:9e:6f:
         b1:cd:0a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:08 2026 by rpki-client