Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/A73E47B6646611F092E66D56C4F9AE02.roa
File:                     A73E47B6646611F092E66D56C4F9AE02.roa (raw, json)
Hash identifier:          +5AmxF2Ot32SjYb4sD4AklzsQoQaBKOXNwxkLnzUCxw=
Subject key identifier:   62:80:EF:C3:B0:C2:0D:11:3B:1A:3A:28:BE:1C:81:7F:20:C5:12:FF
Certificate issuer:       /CN=A91585F0/serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
Certificate serial:       DF
Authority key identifier: AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/A73E47B6646611F092E66D56C4F9AE02.roa
Signing time:             Sun 23 Aug 2026 06:56:25 +0000
ROA not before:           Sun 23 Aug 2026 06:56:25 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     137531
IP address blocks:        165.101.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl
                          rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 06:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91585F0, serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
        Validity
            Not Before: Aug 23 06:56:25 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8a9999-a48e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8a:2c:c7:7d:8e:9a:88:93:2f:8b:ea:c5:5b:
                    db:ed:de:42:d0:7e:98:f2:05:39:ab:d7:c1:f8:c2:
                    5a:17:35:07:f9:89:4e:37:29:d5:4c:07:c7:34:24:
                    f7:ea:c8:85:df:de:25:db:d3:4e:08:8f:93:3e:c8:
                    c7:dd:09:a6:b3:01:44:06:cd:cb:75:b0:40:11:92:
                    da:42:67:9e:2f:14:54:86:d8:fd:a8:31:b1:f4:e5:
                    1b:a5:c6:d7:c6:59:4d:87:1a:6b:48:e6:05:03:32:
                    89:ba:c2:3b:37:1a:3e:8f:6a:f8:ad:d4:35:b5:0a:
                    33:1f:2a:1c:a3:74:5a:48:60:ed:73:62:2f:e3:ba:
                    26:fa:a9:fe:7d:81:ef:97:3d:0f:53:a6:5e:ba:39:
                    ac:06:47:48:db:c3:9e:ac:23:0e:88:7c:28:d0:ac:
                    8b:d5:32:5f:36:d3:4b:43:e5:05:fe:19:e1:f6:60:
                    ae:5a:c6:62:5d:81:dc:4c:fc:6a:24:55:db:b8:60:
                    75:94:6e:28:7a:2a:5f:7b:12:79:37:5b:9c:28:9d:
                    b8:ce:33:21:38:09:e4:80:11:d7:1a:16:f8:0e:e2:
                    08:bd:db:32:5d:89:f4:e0:4b:19:98:46:51:e6:0e:
                    1a:10:69:77:41:49:f4:91:5f:22:63:32:3e:86:b1:
                    fc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:80:EF:C3:B0:C2:0D:11:3B:1A:3A:28:BE:1C:81:7F:20:C5:12:FF
            X509v3 Authority Key Identifier:
                keyid:AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/A73E47B6646611F092E66D56C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:de:44:af:c7:1b:27:f9:4c:94:ed:61:ef:8b:bc:bf:1a:00:
         2d:e0:84:be:8c:b9:72:07:09:65:07:62:f0:c9:54:ab:90:1c:
         63:90:da:24:04:0a:c7:cc:4b:7d:33:1c:fd:d6:dd:04:bf:eb:
         85:5c:73:1b:64:a7:26:c2:ea:98:53:2d:54:02:3a:48:18:87:
         fd:c6:b2:aa:bd:df:9b:d8:c1:66:ac:cc:30:dc:2c:22:36:cb:
         35:43:3a:c5:39:e4:0f:aa:0a:ee:31:37:6e:79:7b:40:82:21:
         5e:35:80:a0:db:55:76:92:e9:c5:06:a1:76:18:2f:eb:1b:d3:
         ba:b3:63:6d:63:6f:19:1e:ee:70:11:99:7c:3a:e4:24:78:5e:
         bd:a0:ea:7d:c0:45:e3:f6:a9:a2:ad:94:58:6b:11:95:51:cf:
         d4:0d:27:05:ce:54:7b:19:93:a9:e6:ee:65:91:84:44:c2:31:
         db:fa:60:70:9b:d4:de:4f:b0:af:e1:a3:cc:96:6f:2c:6d:7b:
         13:2d:c4:8d:02:ff:7f:0b:bc:1c:fc:bc:0b:c5:3f:ed:09:d9:
         5b:39:68:7f:c2:b3:5b:02:a0:3e:72:f6:7e:7e:97:35:f6:d0:
         08:9f:ec:41:69:39:97:17:73:6d:1d:07:2d:f9:d4:21:24:a7:
         a2:d3:a2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:20:28 2026 by rpki-client