Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/58893B2878DC11F084C71D2BC4F9AE02.roa
File:                     58893B2878DC11F084C71D2BC4F9AE02.roa (raw, json)
Hash identifier:          cA1zRf5hGPx366nz55tbLEUSAsNqCtNhxK7+ift/7Yw=
Subject key identifier:   6A:FE:49:29:55:10:D1:BA:BC:68:81:ED:0C:C1:D3:18:4E:72:B6:A3
Certificate issuer:       /CN=A91D901E/serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
Certificate serial:       69
Authority key identifier: 03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/58893B2878DC11F084C71D2BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:13:17 +0000
ROA not before:           Thu 14 Aug 2025 07:00:22 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     152595
IP address blocks:        165.101.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl
                          rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:18:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D901E, serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
        Validity
            Not Before: Aug 14 07:00:22 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a3f51d-a972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:df:e7:ab:a3:3c:19:12:fe:1e:b3:63:e6:ec:
                    1f:e5:c7:4a:bb:d7:ab:ee:bc:6f:66:a0:34:98:c0:
                    33:52:e8:4c:cb:90:9e:89:8e:a0:dc:b3:b1:b5:a0:
                    c4:17:42:59:0c:81:32:6f:54:33:a3:85:4a:48:e4:
                    b5:ed:86:9e:77:7c:84:a0:b7:75:95:4b:60:50:60:
                    07:06:35:25:d7:1d:b5:36:71:d2:e2:18:76:6c:d9:
                    fc:12:05:2e:99:3a:13:93:11:f6:24:b5:7c:30:d7:
                    b0:07:94:e5:43:14:e7:cd:13:53:88:13:d2:e6:4c:
                    51:13:58:6c:8a:4c:60:f6:ea:6b:24:14:25:53:d9:
                    7e:ae:2a:9e:10:da:3f:72:f2:fd:f6:cd:c0:86:ef:
                    d9:3e:70:51:67:18:a0:ef:23:06:f4:09:14:8a:f1:
                    d8:40:ec:2e:24:ec:b6:15:1b:e4:20:85:f8:7a:7f:
                    eb:e6:90:f6:40:53:93:6b:3a:47:20:12:5a:cf:c5:
                    ef:22:96:bc:09:e5:b4:e4:43:2d:94:dc:95:3c:2f:
                    8e:3e:4c:c7:92:65:a7:ee:d6:02:46:17:6d:29:d1:
                    53:6b:18:72:c3:7b:91:38:b3:ec:82:13:b3:7e:e3:
                    c0:56:ac:ea:e3:73:fd:47:da:5b:0f:e5:32:b1:f0:
                    7e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FE:49:29:55:10:D1:BA:BC:68:81:ED:0C:C1:D3:18:4E:72:B6:A3
            X509v3 Authority Key Identifier:
                keyid:03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/58893B2878DC11F084C71D2BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:73:29:0a:e9:dd:eb:de:99:15:39:39:45:c4:ca:7d:c4:76:
         66:f0:43:af:cd:8c:0d:0c:2f:32:3f:7f:ac:f0:3f:f3:2d:cc:
         53:8e:22:fc:f0:41:74:78:1b:f3:1b:1f:fe:48:83:b3:49:94:
         0a:52:bf:7e:81:e8:38:4d:0d:96:d6:16:9d:5c:76:47:bd:bf:
         c0:7f:82:60:a4:84:72:f0:24:76:33:1c:64:4a:72:27:d5:e1:
         54:38:bd:7f:51:cb:08:2e:c5:10:3c:dc:c3:15:fd:85:8a:3a:
         41:d3:7e:80:79:93:8c:de:69:c0:66:37:55:ff:4b:75:eb:fc:
         87:b8:70:7d:67:e9:55:95:d5:54:6b:52:14:52:b3:f2:2c:b8:
         8f:69:db:85:72:65:1a:ec:71:17:39:be:db:16:71:f6:19:8e:
         25:41:79:ff:1a:89:03:57:73:b1:51:98:33:47:cf:fa:2e:21:
         bc:9e:e3:fd:1d:cf:00:c0:34:53:62:55:b6:9d:25:05:01:86:
         9d:b4:73:9c:b3:fd:b0:e9:b0:2c:0d:26:72:b6:38:fe:92:e7:
         49:cb:e2:33:6d:7f:fa:a7:1d:69:9c:e4:d7:cd:2e:69:a3:f3:
         bb:f2:12:3a:66:bc:19:91:d1:88:32:a7:8e:7a:ac:17:91:67:
         9f:7c:af:06
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:52:29 2026 by rpki-client