Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/7CC500A86DEC11F0BD1BF429C4F9AE02.roa
File:                     7CC500A86DEC11F0BD1BF429C4F9AE02.roa (raw, json)
Hash identifier:          vlCeUsTn4mY21TfBNS55XRxHxgBmoj36GLwP2Y1GJ1Y=
Subject key identifier:   C7:D2:5C:91:B5:55:0A:EF:E6:D2:98:DF:E5:0D:62:AE:42:4A:4E:0B
Certificate issuer:       /CN=A91D61DF/serialNumber=BAF355F03A2ED884A617A47427C25CFCCCE31276
Certificate serial:       9C
Authority key identifier: BA:F3:55:F0:3A:2E:D8:84:A6:17:A4:74:27:C2:5C:FC:CC:E3:12:76
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/7CC500A86DEC11F0BD1BF429C4F9AE02.roa
Signing time:             Fri 03 Apr 2026 03:35:18 +0000
ROA not before:           Fri 03 Apr 2026 03:35:17 +0000
ROA not after:            Sat 01 Aug 2026 00:00:00 +0000
asID:                     141199
IP address blocks:        165.101.48.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.crl
                          rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:44:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D61DF, serialNumber=BAF355F03A2ED884A617A47427C25CFCCCE31276
        Validity
            Not Before: Apr  3 03:35:17 2026 GMT
            Not After : Aug  1 00:00:00 2026 GMT
        Subject: CN=69cf3575-fec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0b:71:28:b1:36:02:3d:94:27:d9:8e:e5:87:
                    7b:31:eb:3d:80:40:53:06:6c:7f:e4:7c:15:96:9e:
                    02:e9:a9:8f:71:5f:3e:2a:19:ab:97:05:14:0a:7b:
                    ea:ad:0a:5b:c6:30:a6:84:f5:c7:3b:27:c7:1e:70:
                    c8:f0:50:75:05:62:e8:18:a0:34:0f:34:75:bd:21:
                    86:24:d0:0c:4e:61:e2:24:b1:00:3e:96:e3:b6:20:
                    30:68:04:a0:88:4f:a3:08:31:f0:4d:73:7a:47:0e:
                    df:db:be:69:a8:f2:34:9a:ed:f9:72:f7:bd:fc:b6:
                    42:33:24:a4:26:33:4f:65:5f:98:2f:f3:23:a5:3d:
                    7c:c0:26:da:3f:be:14:1c:4e:fa:d7:f0:98:9c:a5:
                    b5:2b:72:dd:c3:d7:2e:11:28:7a:8c:ad:4a:3c:ae:
                    2d:4e:32:48:dc:ce:9c:4e:a6:28:13:d8:d3:37:77:
                    99:bf:f4:b5:a5:99:1f:7f:ac:9e:c1:80:2d:ba:4d:
                    2e:ab:95:6a:c1:42:80:3f:46:1b:6f:7d:15:41:ec:
                    2a:d6:c4:3b:db:1c:99:8f:bb:cd:bd:71:97:c8:45:
                    c1:1a:a9:4c:08:7d:2d:be:e3:2e:5b:60:a4:78:1f:
                    1d:4b:30:c3:d6:8e:e0:f8:18:21:cc:05:b5:e3:8f:
                    6f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D2:5C:91:B5:55:0A:EF:E6:D2:98:DF:E5:0D:62:AE:42:4A:4E:0B
            X509v3 Authority Key Identifier:
                keyid:BA:F3:55:F0:3A:2E:D8:84:A6:17:A4:74:27:C2:5C:FC:CC:E3:12:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/7CC500A86DEC11F0BD1BF429C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:7f:81:84:30:49:92:1d:4c:6e:e1:db:89:40:21:6f:44:27:
         81:dc:74:09:90:d6:35:dc:9b:ff:b6:88:f4:12:5d:e1:d1:6d:
         80:f2:6c:2f:b2:57:32:53:e5:4b:d0:a8:ee:5d:f6:d7:cd:06:
         12:50:a7:3d:b4:34:f1:4a:e7:5b:55:93:1d:d0:74:df:72:ec:
         25:ae:ca:3a:be:8b:1e:f6:45:af:9b:89:4b:12:6b:38:b8:3e:
         f0:0c:85:c0:6f:0c:53:72:ed:a9:8b:42:75:0b:ea:e1:a3:6d:
         07:e7:d0:5e:a5:68:75:c3:2a:26:62:d0:12:4e:9d:90:42:a9:
         2e:22:00:4c:66:58:c4:24:ac:f6:65:be:46:88:a6:83:e8:56:
         c4:7f:59:83:31:16:cd:de:85:3c:d7:83:6d:17:04:e1:e3:9d:
         16:b6:2e:cb:c9:bd:e5:97:d2:95:f9:cc:c9:46:c4:d8:d6:82:
         c4:e3:f6:f2:bf:2d:ec:5b:7e:0f:a5:ea:d4:06:9f:77:26:d8:
         13:b7:a0:a7:1e:cf:6f:61:10:ef:81:87:4e:7e:0f:c2:5f:31:
         d7:c3:78:75:1f:6a:84:03:6a:07:f9:e9:87:30:aa:a4:24:ca:
         50:74:33:86:ec:32:86:c9:ee:18:4c:5a:cb:cc:58:db:2f:af:
         4c:c4:69:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:57:32 2026 by rpki-client