Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/EBF5F8EC9A1411F1A4DC90745311F970.roa
File:                     EBF5F8EC9A1411F1A4DC90745311F970.roa (raw, json)
Hash identifier:          d4GsGfvnFtBw9POHYCcbpg5xEwjJpsB/1nvw60Ok9Nw=
Subject key identifier:   B3:0D:21:38:56:52:36:53:09:9B:D5:DE:EC:29:BB:43:49:D3:98:43
Certificate issuer:       /CN=A9193B7A/serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680
Certificate serial:       C9
Authority key identifier: 0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/EBF5F8EC9A1411F1A4DC90745311F970.roa
Signing time:             Mon 17 Aug 2026 08:23:28 +0000
ROA not before:           Mon 17 Aug 2026 08:23:27 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     19905
IP address blocks:        65.181.114.0/24 maxlen: 24
                          65.181.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl
                          rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 04:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193B7A, serialNumber=0C2F45B6C886223242EC9BF93B34697F64DDF680
        Validity
            Not Before: Aug 17 08:23:27 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6a82c4ff-0ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d2:f5:1e:60:c1:4a:01:74:18:9a:97:37:2d:
                    94:5e:f6:82:d0:4a:09:80:f2:a8:ba:ed:85:d7:aa:
                    e2:83:e5:ad:b5:d3:42:fc:83:36:96:04:dc:dd:96:
                    62:4b:05:60:b8:e9:d6:04:89:41:d1:2f:87:4f:c7:
                    a2:54:ce:4a:f2:e3:5e:c2:46:6c:24:78:98:09:35:
                    94:49:21:d6:12:da:42:e4:b9:c8:d2:31:fe:da:35:
                    e9:1c:9c:94:85:e1:82:f3:15:29:02:d3:3b:59:56:
                    b4:a6:d6:c4:4f:55:b7:39:14:b2:1d:8f:b4:f0:7c:
                    99:03:28:31:dc:bf:e8:be:b0:30:c4:24:fb:66:c1:
                    04:8b:db:c0:31:25:1c:b4:26:84:03:84:f9:0b:73:
                    1c:ca:e6:2b:74:73:1b:71:72:93:ee:f0:4a:74:b8:
                    d6:dc:59:94:88:83:1a:5e:a8:d3:e7:86:76:24:dc:
                    bb:c4:3e:69:ef:f3:4d:2d:51:2d:a9:ea:39:3e:70:
                    30:3a:fa:05:69:46:14:10:8f:33:b5:6d:b1:10:54:
                    44:5f:5e:08:f1:4f:94:be:a2:05:ea:92:ef:05:5b:
                    56:99:95:87:ec:1e:de:12:f1:5b:e8:65:2f:c7:f1:
                    9a:06:e4:94:bf:fd:6c:21:b2:ae:d9:d0:25:e5:55:
                    73:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0D:21:38:56:52:36:53:09:9B:D5:DE:EC:29:BB:43:49:D3:98:43
            X509v3 Authority Key Identifier:
                keyid:0C:2F:45:B6:C8:86:22:32:42:EC:9B:F9:3B:34:69:7F:64:DD:F6:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DC9FtsiGIjJC7Jv5OzRpf2Td9oA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C08506927DBB11F0BC4D7761C4F9AE02/EBF5F8EC9A1411F1A4DC90745311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.181.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:65:f6:93:ee:7d:da:9c:63:03:49:30:88:4f:55:43:67:b2:
         e1:ad:fb:57:eb:7b:3d:4d:bb:18:06:85:ab:93:05:57:4d:71:
         20:cd:f9:42:21:1a:14:35:f3:bc:9e:d1:53:fd:41:a0:56:51:
         4b:87:de:fa:c0:4b:fd:8f:4a:ef:91:e7:ad:46:e9:be:66:67:
         f4:1a:79:e2:31:90:9e:e6:66:b3:2c:8d:c8:6b:c3:6c:fe:dd:
         f9:56:66:ad:4b:d1:c8:3b:76:9d:42:71:65:76:4f:a1:7b:f5:
         30:20:5d:69:37:49:56:33:ac:81:8b:23:1f:ce:31:5c:7d:5d:
         1b:1d:7f:00:b1:56:ef:a9:0b:35:c2:24:98:11:63:5a:5a:c9:
         76:d2:21:68:93:18:69:2e:06:62:4f:69:13:f5:51:1f:b1:0d:
         92:d6:da:01:f8:24:09:62:d2:5b:f4:2a:b7:75:8f:14:41:f1:
         0a:e0:0e:16:aa:ec:cd:d5:3d:bc:29:2e:5b:57:f5:36:b1:07:
         35:3f:91:f4:9d:d8:e9:b9:6d:06:09:8f:bf:e8:28:2e:cc:65:
         62:74:68:15:ef:4e:3e:68:f7:aa:85:4b:14:c3:50:f1:f7:ff:
         51:58:d3:37:8d:ed:63:6e:b9:b8:22:a0:83:6d:57:40:7f:11:
         89:ac:d4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:44:43 2026 by rpki-client