Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/7523EB28671811F0B26A8C1AC4F9AE02.roa
File:                     7523EB28671811F0B26A8C1AC4F9AE02.roa (raw, json)
Hash identifier:          lm86AbCRcdzPDBKNa+uwq/jScnKUTOerK/ZRzjBHp4k=
Subject key identifier:   94:F6:E8:7F:3F:4D:39:1B:0D:64:30:A3:88:D3:1D:7E:01:ED:DB:D0
Certificate issuer:       /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Certificate serial:       2C71
Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/7523EB28671811F0B26A8C1AC4F9AE02.roa
Signing time:             Thu 20 Aug 2026 16:22:41 +0000
ROA not before:           Thu 20 Aug 2026 16:22:41 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     153987
IP address blocks:        165.99.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Sep 2026 15:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11377 (0x2c71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
        Validity
            Not Before: Aug 20 16:22:41 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a8729d1-2589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ea:9c:e4:01:6a:8f:69:16:a2:ce:6d:c2:6f:
                    88:45:0e:71:cf:d7:83:e2:ea:76:99:07:c8:82:0a:
                    59:d3:d7:8f:8e:6b:72:ff:a7:ec:e9:e5:ae:d8:dc:
                    ca:0a:bd:2a:9a:08:81:6a:68:cf:66:34:e1:70:2a:
                    4c:01:6c:8f:7a:46:b1:07:c8:cd:5e:f1:e0:df:ad:
                    58:7d:63:5f:5e:f3:ae:39:1f:cf:0f:db:2d:ef:fb:
                    6b:f3:2c:13:b4:28:de:4a:6f:03:05:53:e9:5d:b5:
                    43:cd:bb:45:92:17:b6:85:36:2b:82:7e:b9:25:d2:
                    68:6b:eb:d6:58:31:2a:16:27:80:c1:45:5b:66:02:
                    61:73:8a:25:b6:ca:e6:42:d6:dd:e3:c0:47:6e:13:
                    e1:ab:04:85:a7:95:ac:58:0a:4f:55:df:b7:a3:1d:
                    6d:12:be:89:f6:bf:4d:b1:e3:c2:f1:87:04:34:36:
                    8a:6e:1e:73:0b:75:40:ba:c1:ae:88:ae:5d:c7:34:
                    a3:34:a0:ac:bc:69:61:f9:17:62:98:33:fb:2a:2d:
                    61:91:8f:b6:c2:b5:40:6c:44:0e:63:32:92:7a:3a:
                    81:aa:5e:9f:69:26:bf:34:e4:f9:fa:45:4b:57:32:
                    bd:74:28:f9:db:c0:ca:fa:5e:ec:2f:64:5a:4a:74:
                    05:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F6:E8:7F:3F:4D:39:1B:0D:64:30:A3:88:D3:1D:7E:01:ED:DB:D0
            X509v3 Authority Key Identifier:
                keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/7523EB28671811F0B26A8C1AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:33:c9:ef:95:e5:ba:1d:4d:bf:f2:54:22:c3:3a:39:02:25:
         dd:89:74:36:cc:ca:48:c6:47:63:cd:8e:5f:de:78:02:72:7c:
         4f:a6:75:06:48:33:85:21:65:b0:66:d3:9b:db:99:13:9a:46:
         b5:54:70:94:45:ee:02:38:59:b5:87:44:7d:e7:f8:d0:a6:76:
         48:0a:e8:cd:bc:01:6b:ce:45:bc:d4:59:1e:66:d9:4a:d1:b1:
         3f:49:8f:17:4f:b1:e9:bb:44:e4:7e:7f:a3:76:5c:31:e5:55:
         dd:10:2b:8b:90:a5:2f:1b:fe:43:c6:e3:8d:73:14:40:b3:b6:
         36:90:e5:29:f1:67:ba:08:5a:f9:f5:07:f0:ae:ca:8b:3b:5f:
         d6:11:c0:fa:a4:dd:ea:67:e0:ec:91:ae:6a:68:da:9e:92:ce:
         4e:70:6b:f3:45:a5:9c:ad:f1:21:31:c1:af:48:78:44:a6:4d:
         ff:92:f5:e2:82:c5:39:30:aa:ba:a9:12:21:52:d7:99:ad:e4:
         eb:8f:c0:97:d1:2b:21:ff:8f:9f:7e:f3:05:5a:58:93:07:dd:
         c3:0c:5d:ca:c2:d2:ca:bb:1e:7f:cd:ee:68:01:02:58:49:76:
         1c:29:5b:a8:0a:82:19:cc:f9:bf:3f:53:48:2c:95:81:1f:12:
         75:f1:4b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:46:28 2026 by rpki-client