Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/D8B6AE628B7211F18C52B0985511F970.roa
File:                     D8B6AE628B7211F18C52B0985511F970.roa (raw, json)
Hash identifier:          Tyldns6YlFiHD84mlWWmrD/ipBQh/3NigUuHVUTz170=
Subject key identifier:   B0:BD:02:F2:59:AB:12:E2:59:EB:F0:1D:55:AE:DA:45:2F:8B:4B:C5
Certificate issuer:       /CN=A91585F0/serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
Certificate serial:       E0
Authority key identifier: AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/D8B6AE628B7211F18C52B0985511F970.roa
Signing time:             Sun 23 Aug 2026 06:56:27 +0000
ROA not before:           Sun 23 Aug 2026 06:56:27 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     140229
IP address blocks:        165.101.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl
                          rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 06:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91585F0, serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42
        Validity
            Not Before: Aug 23 06:56:27 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8a999b-7e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:70:86:ca:af:55:50:52:47:29:2b:04:eb:71:
                    2b:2b:b0:48:8d:94:25:dc:7b:50:1f:02:67:63:52:
                    2b:c9:a5:65:22:eb:04:7c:e9:17:a5:66:9a:98:54:
                    31:62:9d:80:7e:62:24:4b:62:81:73:34:ea:5e:6b:
                    db:df:fa:9a:04:82:03:45:a3:73:18:35:8b:c1:c4:
                    36:7d:1f:42:54:54:b3:e6:8e:69:91:c2:45:28:1b:
                    86:3c:41:95:dc:99:95:a0:28:43:4b:aa:ae:f8:43:
                    bd:37:0c:fa:1b:40:b2:57:a1:5a:b2:65:f5:19:2f:
                    b2:74:23:73:d3:f9:75:ee:a0:f6:f3:a8:ba:d2:d9:
                    b3:70:83:07:ba:41:90:23:19:46:7d:39:a1:c0:fb:
                    9c:16:67:da:53:ae:00:1d:44:bc:32:2b:d8:91:b9:
                    01:e4:79:29:6b:2f:b8:d9:1f:77:0a:40:44:12:12:
                    65:e8:a9:b5:07:88:49:7f:64:00:b2:8f:87:bc:86:
                    b8:ee:62:5d:95:32:08:05:7c:60:06:1c:42:6b:c3:
                    54:85:8f:e2:22:f2:de:1d:3c:9c:20:c8:12:87:4e:
                    f6:39:17:1b:20:94:47:8a:01:17:8a:1e:93:8f:9b:
                    a5:9f:ad:22:ca:5b:72:9a:68:13:a4:12:6b:ff:1a:
                    e3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BD:02:F2:59:AB:12:E2:59:EB:F0:1D:55:AE:DA:45:2F:8B:4B:C5
            X509v3 Authority Key Identifier:
                keyid:AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/D8B6AE628B7211F18C52B0985511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:90:0b:12:d4:41:99:3b:d8:d1:7b:21:cf:94:62:3c:c1:64:
         dd:85:ce:c8:ff:1d:37:d6:fb:f7:b6:c1:62:12:54:c2:fe:52:
         55:3b:39:d3:34:55:9a:c5:e4:49:a0:9f:46:61:a1:e9:51:22:
         67:49:d3:94:03:1c:95:16:13:68:9a:12:86:7e:53:3b:ac:29:
         7a:1e:7d:96:9c:fe:aa:7c:2f:d4:cd:20:57:b0:2d:e7:5b:78:
         b1:8b:0a:29:9f:4a:23:ec:de:c2:eb:7c:7b:a8:3e:9c:3a:3f:
         1d:f2:fe:2d:58:ee:b3:a9:af:74:f9:17:94:7d:be:fd:8a:70:
         59:e1:48:92:e6:e1:72:49:9f:24:11:42:9a:a2:56:1f:f7:98:
         d1:da:fb:45:d2:21:89:ac:04:72:91:c2:19:fe:5b:3c:7f:92:
         4f:9b:81:c1:63:88:18:fc:c6:94:1e:4d:c4:0a:42:1e:6d:b1:
         f5:d8:85:4d:18:ef:03:36:6c:75:be:ab:a4:0a:af:f9:65:43:
         d2:7a:5b:0f:ca:d2:a0:8f:c8:7f:0c:e2:2d:55:2b:6d:86:ee:
         11:53:35:48:70:8b:14:06:0b:c3:0e:a1:9b:c5:79:8f:c4:9c:
         b0:bd:d0:85:ef:ab:a4:5d:5e:82:d6:e3:fb:3e:9e:40:62:81:
         01:58:d7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:40:33 2026 by rpki-client