Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/C92D041297BE11F08D37F648C4F9AE02.roa
File:                     C92D041297BE11F08D37F648C4F9AE02.roa (raw, json)
Hash identifier:          oVeKVyT5OCnM5gRKZlGkoO15Oc39jSDF0Yi0BeBzkBc=
Subject key identifier:   D5:39:90:E1:91:E4:1C:7A:61:30:2F:10:6D:9E:C6:55:B4:17:13:29
Certificate issuer:       /CN=A9166279/serialNumber=474BF735ED28F3518BCE0AC462958BEC582CD765
Certificate serial:       F6
Authority key identifier: 47:4B:F7:35:ED:28:F3:51:8B:CE:0A:C4:62:95:8B:EC:58:2C:D7:65
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/C92D041297BE11F08D37F648C4F9AE02.roa
Signing time:             Thu 01 Oct 2026 07:54:33 +0000
ROA not before:           Thu 01 Oct 2026 07:54:33 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     142647
IP address blocks:        165.101.118.0/24 maxlen: 24
                          165.101.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl
                          rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 06:41:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166279, serialNumber=474BF735ED28F3518BCE0AC462958BEC582CD765
        Validity
            Not Before: Oct  1 07:54:33 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6abe11b9-0d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e2:be:ec:58:0d:50:70:a8:bb:67:2e:8e:af:
                    a8:3f:e0:58:4e:4c:f2:34:85:68:2a:6c:90:97:28:
                    e0:34:a1:9c:68:f5:d2:39:81:08:9b:cf:ef:fd:8b:
                    ea:4a:89:65:43:90:61:f7:f5:22:f1:e8:28:e9:dd:
                    b9:67:ba:c4:3e:e0:60:0b:40:8a:6b:90:52:73:3f:
                    1f:61:0a:e1:7c:9b:99:7c:a9:71:b2:78:e5:24:3c:
                    ff:f5:f8:bb:00:7e:be:19:40:88:2b:e5:04:f7:39:
                    15:84:43:8e:5e:14:07:2f:eb:76:37:54:a4:9a:b1:
                    13:9a:37:77:d2:58:c8:c7:19:fc:e6:ab:bf:6f:5b:
                    b6:cf:6e:af:16:ff:af:8d:e2:d8:67:1f:c7:df:d7:
                    8c:12:90:af:0c:06:3d:0c:e7:30:9d:4b:b8:e8:75:
                    aa:74:fd:a7:32:69:f8:36:ca:60:06:7e:0c:46:0f:
                    c8:52:f8:d5:5b:8d:8e:45:62:54:3d:aa:05:f5:61:
                    77:93:82:3c:f4:42:aa:82:a6:7c:89:e8:6c:4e:39:
                    30:ef:1f:f8:7b:78:41:df:ae:e5:3e:95:ee:73:19:
                    96:e8:18:82:b0:64:11:c8:37:31:54:85:e1:3f:19:
                    54:57:80:3e:52:44:07:74:65:49:eb:21:7a:f0:79:
                    3a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:39:90:E1:91:E4:1C:7A:61:30:2F:10:6D:9E:C6:55:B4:17:13:29
            X509v3 Authority Key Identifier:
                keyid:47:4B:F7:35:ED:28:F3:51:8B:CE:0A:C4:62:95:8B:EC:58:2C:D7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/C92D041297BE11F08D37F648C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:c3:e9:b0:1c:fc:c6:75:c5:25:9d:4a:17:99:c9:0a:eb:bc:
         73:7d:32:e0:25:a0:d0:7a:17:18:f6:33:03:6f:fc:d3:8a:84:
         ad:03:fe:27:c2:96:09:ce:de:24:76:a7:4e:c3:c1:41:85:2f:
         94:dd:09:a3:25:ab:b6:1f:14:f6:5a:d6:c3:f1:f7:0b:22:2b:
         e2:5a:79:44:ac:81:62:5d:be:63:63:81:ac:ff:3a:cc:f5:22:
         1d:b4:5e:b8:99:97:af:29:c2:7d:59:45:ea:ca:2b:62:a1:26:
         2c:48:95:a7:55:03:e0:6c:4f:9b:b9:99:11:60:22:61:8b:2d:
         5b:d8:51:c9:86:8c:11:70:c1:da:ee:b1:dc:c5:21:e2:82:64:
         c4:76:3d:3c:67:65:6b:6d:a0:a2:25:3e:62:89:df:dd:1d:0c:
         99:0d:e7:09:00:9e:6f:bd:67:7d:09:3a:90:81:62:1d:4a:64:
         09:67:77:46:34:de:2f:a4:be:a5:3b:a9:84:2e:25:54:31:4f:
         0d:64:75:76:3e:c8:ea:7c:5b:c9:c1:02:99:e2:bc:b3:61:58:
         49:05:bf:fc:77:c1:4b:97:83:0a:bd:5f:4b:3b:a6:15:5c:72:
         1e:6f:6b:af:02:8b:9f:a0:49:b4:e2:3b:b6:6b:a2:c8:62:e7:
         a7:0c:94:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:04:10 2026 by rpki-client