Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/095798588ABA11EAB5EDDE54C4F9AE02.roa
File:                     095798588ABA11EAB5EDDE54C4F9AE02.roa (raw, json)
Hash identifier:          cY6byPuSXq5kT4I6QxVsWBStNUk3asYxZRGjdG59u38=
Subject key identifier:   A6:90:D1:E6:E4:B6:C1:C4:A7:86:05:7F:03:72:BE:5C:85:FE:50:29
Certificate issuer:       /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial:       1E2A
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/095798588ABA11EAB5EDDE54C4F9AE02.roa
Signing time:             Tue 20 Oct 2026 15:14:24 +0000
ROA not before:           Tue 20 Oct 2026 15:14:24 +0000
ROA not after:            Mon 31 Jan 2028 00:00:00 +0000
asID:                     18212
IP address blocks:        210.2.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
                          rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7722 (0x1e2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
        Validity
            Not Before: Oct 20 15:14:24 2026 GMT
            Not After : Jan 31 00:00:00 2028 GMT
        Subject: CN=6ad78550-a222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:49:a1:5c:1f:93:bc:65:8e:05:59:d9:67:f1:
                    59:3d:fb:23:c2:0b:09:b3:57:af:93:76:1a:48:06:
                    6a:c3:c3:ce:42:81:61:8e:f0:ef:64:b2:57:89:d6:
                    64:02:05:6d:1d:db:1c:15:bd:e4:91:e0:f9:01:12:
                    c2:0e:23:a9:af:5e:d4:82:77:bf:b4:26:cb:fd:ca:
                    f9:cc:e7:3d:a4:5c:c2:e3:d1:1b:61:5b:57:20:be:
                    56:2b:1d:9d:19:d5:27:43:56:a7:3a:75:ae:13:6c:
                    e6:2f:15:89:29:99:3f:d4:e7:b5:a7:4c:6d:c1:05:
                    2d:b0:d8:d2:77:71:60:8f:b3:11:43:a1:7c:6b:ec:
                    a8:7e:0a:28:ba:d9:cb:7d:46:68:67:9f:28:8a:ca:
                    a4:26:48:74:a7:79:7a:ae:32:7d:af:df:8e:69:26:
                    70:37:f6:3b:0c:5e:1e:e3:05:fa:c7:d5:0e:f9:af:
                    81:dc:a5:ff:11:23:2a:03:10:f8:38:29:e9:ed:13:
                    a5:90:85:c0:ef:d8:ee:50:a6:de:1a:b4:12:9e:34:
                    fe:24:1d:4a:6f:cc:04:99:21:9d:18:e5:6e:b6:e6:
                    a8:e1:d3:71:64:fc:81:99:63:af:11:90:cd:01:ae:
                    9b:0f:78:cc:ec:00:b9:42:62:23:0a:1a:3a:22:d0:
                    c8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:90:D1:E6:E4:B6:C1:C4:A7:86:05:7F:03:72:BE:5C:85:FE:50:29
            X509v3 Authority Key Identifier:
                keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/095798588ABA11EAB5EDDE54C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.2.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:8c:36:7e:2b:2e:75:57:b0:21:e8:93:98:ab:32:19:8c:f3:
         e1:3a:3b:a2:67:e6:7e:07:f3:da:a0:49:e6:69:9f:28:0c:51:
         24:36:40:71:17:bb:7e:7b:42:d9:87:cc:a4:1c:37:5a:42:20:
         5a:a0:ad:43:f6:b2:5d:83:e0:63:3d:0f:76:ca:22:b3:b4:6f:
         8f:0a:bf:3e:e3:03:b9:a8:53:8b:c0:84:be:dd:f3:e2:01:12:
         15:a1:46:a0:c6:89:cb:1b:e2:06:df:1c:30:8a:d2:f4:a3:09:
         0b:cc:78:5d:24:0d:fd:8d:81:08:01:70:20:5d:b1:17:e2:0b:
         d0:7f:da:ff:54:b3:9a:da:73:73:7a:69:6e:c2:b7:db:d1:27:
         22:99:85:96:30:8c:a4:7d:79:fe:46:17:f9:d7:d1:97:12:38:
         6f:b9:cc:e6:2e:08:62:be:3b:5d:88:a1:b1:09:cf:e3:d1:76:
         f5:c9:64:1a:8d:34:c3:c5:f8:35:ae:83:15:46:52:29:8c:8c:
         37:9e:c5:05:d1:dc:b7:6b:dd:ed:6d:2a:e6:2b:95:a0:a4:7e:
         4e:c6:1f:29:c5:a0:83:ff:15:28:45:7c:30:58:e0:c1:ef:6c:
         28:24:01:17:b5:66:59:af:00:de:6b:29:80:f1:f2:ef:be:96:
         b3:2a:89:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:37:45 2026 by rpki-client