Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/8D052914404911F0A4BD357BC4F9AE02.roa
File:                     8D052914404911F0A4BD357BC4F9AE02.roa (raw, json)
Hash identifier:          MvcG4U91ksg21bFQHUycofyC3j8v7/vCU+cxxJzP/x8=
Subject key identifier:   48:05:D9:ED:EB:EC:23:C0:D2:E1:40:D4:50:18:C5:87:E4:29:BA:0C
Certificate issuer:       /CN=A9174C7A/serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Certificate serial:       E1
Authority key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/8D052914404911F0A4BD357BC4F9AE02.roa
Signing time:             Sat 01 Aug 2026 08:57:28 +0000
ROA not before:           Sat 01 Aug 2026 08:57:28 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     151062
IP address blocks:        165.99.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
                          rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 06:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
        Validity
            Not Before: Aug  1 08:57:28 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a6db4f8-b70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2c:6c:41:d8:b0:de:26:0b:8f:a7:40:98:c1:
                    66:18:fc:00:70:f3:cb:0d:d8:c8:32:54:f1:21:2c:
                    c4:c1:8b:79:4c:b8:32:71:68:49:e3:9e:fa:f2:94:
                    c5:7d:b3:f1:a3:ce:eb:9f:91:00:f3:ea:20:4b:b9:
                    1a:59:a9:e8:e3:42:80:82:5f:ec:15:e9:41:24:f4:
                    25:6d:ce:7f:33:bf:09:8d:68:99:81:e9:66:e8:13:
                    aa:53:8a:30:c1:be:35:84:bb:da:a2:3e:28:49:62:
                    59:5c:76:e6:ad:b6:2e:0e:ef:5f:43:9d:0c:0d:53:
                    16:02:ce:d0:4c:6d:d9:00:3c:70:92:e7:33:4b:ce:
                    b7:bb:12:c1:97:7e:5d:3e:e2:aa:e8:12:92:40:d3:
                    f0:64:3c:32:db:06:92:d7:f2:1e:88:c7:a1:13:fe:
                    ed:a0:88:6f:cb:4b:16:5a:8d:35:35:f3:dd:e8:00:
                    c5:85:76:88:9d:c6:ac:d8:8d:85:12:56:23:bd:e4:
                    a9:92:5a:05:57:10:b9:5a:41:b0:b9:14:53:ec:14:
                    75:d6:5a:1c:88:dc:37:9a:52:90:5c:35:a3:10:e2:
                    dd:ee:13:9d:91:5f:b0:e3:4a:fc:d4:15:50:7a:cd:
                    c8:22:9b:ed:1f:68:6e:4f:99:f3:93:b4:4b:d1:cf:
                    dc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:05:D9:ED:EB:EC:23:C0:D2:E1:40:D4:50:18:C5:87:E4:29:BA:0C
            X509v3 Authority Key Identifier:
                keyid:A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/8D052914404911F0A4BD357BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:ab:55:4f:0e:a5:e2:0b:6d:5b:64:24:e7:ae:9b:85:73:e1:
         d8:9b:69:99:4f:19:b5:be:a1:22:53:df:3a:e4:49:ae:87:09:
         3e:8f:9c:64:4f:d2:7e:21:ee:26:65:bf:0e:25:81:b4:96:6d:
         99:fa:69:aa:40:19:1f:07:90:3c:45:43:6e:ff:29:da:8b:36:
         cc:48:ac:49:86:63:ab:f9:c0:3a:93:13:e7:7d:5d:ff:13:f2:
         50:6f:37:b9:78:4d:a0:6e:89:bf:9a:f4:0a:c5:79:69:9e:49:
         1c:36:d9:97:7f:44:59:4d:66:20:f0:a7:55:5b:3d:7c:f2:b5:
         61:d4:23:37:bf:ec:a3:95:c9:e4:db:03:3a:ba:bc:a8:06:1b:
         bc:d7:af:30:ce:43:f0:3a:dd:fa:10:ef:ad:5a:30:89:3b:f4:
         18:0b:3c:74:0c:45:05:5d:a3:69:52:ae:2c:2b:af:09:fe:ae:
         1e:24:71:e5:40:78:17:0c:cd:62:d1:8e:63:59:3d:c3:df:20:
         b4:c1:0e:ca:01:15:c8:31:09:fa:c2:1b:f8:c3:bd:d3:e8:60:
         01:e2:6a:fa:1b:35:be:bf:e9:0f:e3:56:f3:96:b3:0e:4e:6c:
         19:74:f6:a7:0b:0d:d1:a8:71:93:78:fc:d2:e9:90:f2:57:69:
         e6:28:46:2f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzRDN0ExMTAvBgNVBAUTKEE1OEFEQUNFRjlEMjQ1NTNBNTU2NDZCNUE2RUJDQ0VB
QjE5RjJGQkMwHhcNMjYwODAxMDg1NzI4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZkYjRmOC1iNzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvSxsQdiw3iYLj6dAmMFmGPwAcPPLDdjIMlTxISzEwYt5TLgycWhJ45768pTF
fbPxo87rn5EA8+ogS7kaWano40KAgl/sFelBJPQlbc5/M78JjWiZgelm6BOqU4ow
wb41hLvaoj4oSWJZXHbmrbYuDu9fQ50MDVMWAs7QTG3ZADxwkuczS863uxLBl35d
PuKq6BKSQNPwZDwy2waS1/IeiMehE/7toIhvy0sWWo01NfPd6ADFhXaIncas2I2F
ElYjveSpkloFVxC5WkGwuRRT7BR11lociNw3mlKQXDWjEOLd7hOdkV+w40r81BVQ
es3IIpvtH2huT5nzk7RL0c/cxwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEgF2e3r
7CPA0uFA1FAYxYfkKboMMB8GA1UdIwQYMBaAFKWK2s750kVTpVZGtabrzOqxny+8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEM3QS80NEYxNEFGQzQw
NDYxMUYwOUJGMEQ4NEZDNEY5QUUwMi9wWXJhenZuU1JWT2xWa2ExcHV2TTZyR2ZM
N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3BZcmF6dm5TUlZPbFZrYTFwdXZNNnJHZkw3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzRDN0EvNDRGMTRBRkM0MDQ2MTFGMDlCRjBEODRGQzRGOUFFMDIvOEQwNTI5MTQ0
MDQ5MTFGMEE0QkQzNTdCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQApWO8MA0GCSqGSIb3DQEBCwUAA4IBAQC9q1VPDqXiC21bZCTnrpuF
c+HYm2mZTxm1vqEiU9865Emuhwk+j5xkT9J+Ie4mZb8OJYG0lm2Z+mmqQBkfB5A8
RUNu/ynaizbMSKxJhmOr+cA6kxPnfV3/E/JQbze5eE2gbom/mvQKxXlpnkkcNtmX
f0RZTWYg8KdVWz188rVh1CM3v+yjlcnk2wM6uryoBhu8168wzkPwOt36EO+tWjCJ
O/QYCzx0DEUFXaNpUq4sK68J/q4eJHHlQHgXDM1i0Y5jWT3D3yC0wQ7KARXIMQn6
whv4w73T6GAB4mr6GzW+v+kP41bzlrMOTmwZdPanCw3RqHGTePzS6ZDyV2nmKEYv
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:53:15 2026 by rpki-client