Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/6654FB224CDE11F092AD8884C4F9AE02.roa
File:                     6654FB224CDE11F092AD8884C4F9AE02.roa (raw, json)
Hash identifier:          8BTScBLmRcmiLP+c8VSmYac3/ueC1pMLRRUbWosuhDU=
Subject key identifier:   D9:D3:E6:B4:63:C4:DE:14:9E:2F:48:E9:0C:DE:32:70:48:32:FD:37
Certificate issuer:       /CN=A916523A/serialNumber=501255E9017A6378926D36AEB5EFF19C45D6574E
Certificate serial:       92
Authority key identifier: 50:12:55:E9:01:7A:63:78:92:6D:36:AE:B5:EF:F1:9C:45:D6:57:4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/6654FB224CDE11F092AD8884C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 04:48:20 +0000
ROA not before:           Thu 19 Jun 2025 07:26:43 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     153980
IP address blocks:        165.101.32.0/23 maxlen: 23
                          165.101.32.0/24 maxlen: 24
                          165.101.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.crl
                          rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916523A, serialNumber=501255E9017A6378926D36AEB5EFF19C45D6574E
        Validity
            Not Before: Jun 19 07:26:43 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a51694-4a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:00:2a:a4:6e:ca:c8:4d:a7:0f:a8:cb:4e:
                    e8:d1:88:01:9c:f6:fb:b4:36:46:83:6c:7f:a8:8c:
                    8a:b3:1c:00:a1:e2:8c:f2:4e:1a:dd:09:93:df:02:
                    72:48:ac:e5:0f:51:08:90:1a:17:c1:d5:fd:cb:40:
                    fc:31:ce:85:c0:38:55:af:d8:ea:6d:55:27:03:2a:
                    07:3f:72:f4:f7:18:3e:ca:ff:7c:1d:c6:07:3b:8c:
                    df:8a:ca:c1:65:d5:fe:9f:8a:15:68:54:0c:13:fc:
                    ae:98:3a:fa:1e:e0:21:9a:43:ff:a4:85:52:e1:bf:
                    49:fc:3e:69:5d:6e:10:56:c8:34:7a:3f:4b:3f:d5:
                    66:d8:ba:13:e7:c7:1c:11:8c:cb:65:77:8d:c8:8f:
                    8d:c0:ee:5d:25:78:35:56:4e:7e:89:95:33:25:71:
                    92:ec:35:86:d7:ea:98:2d:7d:fb:35:2d:e3:12:a2:
                    06:61:39:a9:07:77:37:a0:0b:24:b7:bd:95:4a:bb:
                    ff:76:ca:53:e4:8e:e8:4f:fc:4e:cf:3e:75:db:38:
                    2b:0c:35:fe:9f:a0:e2:a1:6d:79:9c:69:e0:d9:c0:
                    ed:76:4c:a0:0f:ac:f6:94:4c:7c:92:ed:5b:15:63:
                    9e:f3:eb:a3:ac:b1:bb:69:50:41:eb:71:40:fc:61:
                    b5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D3:E6:B4:63:C4:DE:14:9E:2F:48:E9:0C:DE:32:70:48:32:FD:37
            X509v3 Authority Key Identifier:
                keyid:50:12:55:E9:01:7A:63:78:92:6D:36:AE:B5:EF:F1:9C:45:D6:57:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/6654FB224CDE11F092AD8884C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:ac:f6:09:e1:b8:a2:e9:6d:4a:64:a8:af:f4:6a:9f:24:83:
         67:b8:69:a8:10:67:1d:dc:01:b9:4f:bf:33:34:65:34:99:10:
         38:73:5b:72:4c:c5:34:5f:51:cc:2d:1c:28:86:77:c0:65:5c:
         b1:e9:1e:cc:74:a2:90:b0:6a:16:3f:26:ae:56:b7:cf:3f:55:
         33:ad:20:fb:5c:f6:fd:40:f4:51:89:93:fe:1c:44:c8:79:d1:
         3b:dc:0f:ee:0d:4c:c0:96:87:2e:41:7d:50:be:60:6f:f3:aa:
         2e:ad:98:70:e0:db:f6:0f:dd:3e:69:2c:c9:bf:3f:f8:be:a6:
         3a:50:64:d4:91:5e:92:bb:06:cc:62:c3:2b:32:04:d3:3b:d0:
         b6:fe:9a:06:70:fa:5e:cc:ed:1a:07:90:98:f1:b8:fc:e8:55:
         17:c8:fb:db:67:cd:d8:c6:18:88:5b:65:66:fb:92:c0:4c:fa:
         eb:d5:d8:47:63:a5:70:11:ec:38:a2:fb:d6:40:71:83:d0:1b:
         61:fd:c1:88:55:48:db:d4:61:43:5e:a2:93:97:dd:f2:f2:ce:
         9a:06:4f:82:8a:6d:1c:aa:c5:a1:73:7a:30:39:48:00:c4:f7:
         ae:84:36:5a:46:30:e8:65:40:f3:7d:88:6c:9f:95:63:5e:04:
         fb:d0:6e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:00 2026 by rpki-client