Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/7DF6251A74B311F0A365281CC4F9AE02.roa
File:                     7DF6251A74B311F0A365281CC4F9AE02.roa (raw, json)
Hash identifier:          CSo2AGQqGn0kd2y3BxFVD7WYUjWebI85PFFaDCSVnE8=
Subject key identifier:   F6:F5:CB:51:90:34:16:36:AE:74:5E:5D:BC:75:4A:5B:7A:3F:4E:1C
Certificate issuer:       /CN=A91F0BDE/serialNumber=19F2A46E2C490387535E945F6B14867000685761
Certificate serial:       CE
Authority key identifier: 19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/7DF6251A74B311F0A365281CC4F9AE02.roa
Signing time:             Mon 07 Sep 2026 06:57:26 +0000
ROA not before:           Mon 07 Sep 2026 06:57:26 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     54309
IP address blocks:        165.101.218.0/24 maxlen: 24
                          165.101.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl
                          rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0BDE, serialNumber=19F2A46E2C490387535E945F6B14867000685761
        Validity
            Not Before: Sep  7 06:57:26 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9e6056-fc27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:64:23:09:c1:e1:56:2e:15:08:95:75:d8:
                    46:5b:ee:08:63:60:56:e8:86:b0:2e:f2:2d:78:19:
                    d2:91:1f:81:1a:a1:b1:81:b9:d2:83:15:02:31:ae:
                    76:51:3f:59:d9:28:9a:bd:4e:5e:f0:ef:12:f3:1d:
                    9a:2e:52:c7:16:2a:bd:5e:91:a9:96:d5:41:ce:0c:
                    6f:2d:74:8a:1f:d1:14:1d:57:35:36:d3:5f:21:7f:
                    a8:53:15:b0:8f:41:1f:bb:3c:7d:3e:2e:d0:4b:aa:
                    b3:c0:7e:35:40:cd:20:ce:f8:2e:df:9a:d8:24:3d:
                    a3:d8:18:b5:eb:9b:13:71:6e:89:9b:8f:59:ca:87:
                    6f:4f:c3:50:5c:ae:c4:78:ea:98:52:c5:ac:c2:60:
                    1c:fa:4c:bc:ce:ba:58:ed:5b:ad:0c:f3:b4:35:84:
                    4c:3b:8a:50:fc:36:9f:25:e3:b3:4e:fd:21:09:bd:
                    f1:a6:86:b1:74:a0:2c:ee:39:2f:e9:80:b3:c1:95:
                    99:8f:c3:0b:b1:ed:8d:64:a1:65:2b:d7:c3:df:fc:
                    7b:26:31:f4:bb:0e:dd:79:70:d9:44:ad:63:d6:66:
                    1e:19:06:4a:8a:5f:5b:52:91:67:0d:7f:fe:c1:f2:
                    05:c7:b8:c5:6e:8a:06:b0:f3:db:d2:00:26:2c:66:
                    de:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F5:CB:51:90:34:16:36:AE:74:5E:5D:BC:75:4A:5B:7A:3F:4E:1C
            X509v3 Authority Key Identifier:
                keyid:19:F2:A4:6E:2C:49:03:87:53:5E:94:5F:6B:14:86:70:00:68:57:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/GfKkbixJA4dTXpRfaxSGcABoV2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GfKkbixJA4dTXpRfaxSGcABoV2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0BDE/29D1E76C74B311F0AE29521BC4F9AE02/7DF6251A74B311F0A365281CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:fa:79:fb:a8:a1:b6:0d:bc:ce:78:e6:86:9f:3c:38:81:7f:
         43:d4:63:ac:bf:f9:03:f4:5d:34:df:92:78:81:17:a5:34:68:
         2b:7b:ad:45:7b:13:b2:63:2a:81:62:30:7e:ff:8d:80:06:00:
         9c:a9:cc:aa:9c:fc:ca:9f:34:cf:04:e4:f7:f0:38:00:d7:75:
         92:84:36:a4:5f:5b:0a:54:7b:15:50:cd:e2:93:08:e5:d9:7f:
         7d:95:b1:bc:ae:95:26:29:f2:28:a7:78:de:a9:c3:87:de:b5:
         fa:61:23:2c:f5:40:74:b4:6a:64:95:67:90:37:23:94:44:2f:
         80:d5:0a:20:ba:95:93:fe:a7:5f:09:0f:bc:1e:42:11:7d:c4:
         2f:66:7d:ab:02:04:fa:f6:6e:cf:25:b0:39:12:9a:c2:31:98:
         a4:71:c8:b8:84:0d:17:54:db:d1:ff:85:23:e7:af:43:db:c6:
         38:24:0f:e7:e2:7b:d0:60:2c:76:e1:5e:5f:9e:fb:7f:80:bf:
         5a:33:ca:f4:8f:de:4e:fd:41:6b:df:ec:49:a6:d3:4a:4a:45:
         fd:96:1c:20:ba:66:3a:d4:2a:a7:1d:26:a9:48:fe:21:51:bf:
         69:fd:d0:9a:49:1b:14:17:32:b3:c2:a4:a8:26:f0:85:d2:96:
         87:a1:63:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:22:30 2026 by rpki-client