Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/4DC60A785C7F11F089D20138C4F9AE02.roa
File:                     4DC60A785C7F11F089D20138C4F9AE02.roa (raw, json)
Hash identifier:          fH+Os/s7SYYFE9B1LFr1LyTEBlLJ9szkGGwcIpwvf+8=
Subject key identifier:   51:97:1C:6D:42:3C:FC:BC:C7:81:C7:03:19:55:AB:C0:05:0B:1C:CD
Certificate issuer:       /CN=A91877A6/serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
Certificate serial:       C3
Authority key identifier: A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/4DC60A785C7F11F089D20138C4F9AE02.roa
Signing time:             Thu 09 Jul 2026 09:35:18 +0000
ROA not before:           Thu 09 Jul 2026 09:35:18 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     153995
IP address blocks:        165.101.74.0/23 maxlen: 23
                          165.101.74.0/24 maxlen: 24
                          165.101.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl
                          rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91877A6, serialNumber=A3F10049A393AF9DCA44596664166B87402F822A
        Validity
            Not Before: Jul  9 09:35:18 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4f6b56-b993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:60:b0:f4:a4:64:47:1f:cf:96:f4:61:35:59:
                    7a:7f:9f:5b:7d:45:d7:b0:f7:e8:59:42:ac:f3:8a:
                    dc:af:92:d0:30:4a:90:0a:20:8e:43:8c:1c:26:dc:
                    b1:bd:ac:c6:6c:50:9f:e4:0e:a9:fa:23:bf:7b:7d:
                    9c:c8:ab:c8:cc:71:a1:5d:e2:1f:29:52:79:87:9d:
                    ca:40:cc:f5:c2:c2:44:dc:c7:a3:c7:70:75:79:47:
                    eb:d6:d4:1c:18:a2:a4:05:ec:69:c8:d5:eb:0d:3a:
                    39:fc:89:fb:56:ae:ff:bc:d5:f5:91:06:9c:ed:b2:
                    f0:9a:5a:f1:5c:6c:33:04:59:16:9b:9b:39:17:2f:
                    61:5d:db:f8:66:08:fc:f8:be:71:5a:26:78:e6:4d:
                    ee:4c:8c:dd:f8:c5:1d:04:58:1c:87:e0:dc:b0:49:
                    63:a5:18:0d:d6:91:51:f4:bf:d3:b8:af:0d:59:a0:
                    18:d7:d3:ad:e6:5d:0e:1b:a2:cd:bf:b9:c9:d8:b9:
                    f8:2a:b4:27:ef:dc:96:3e:f5:e4:aa:fd:9e:89:8d:
                    9e:7f:27:3f:dd:f9:e9:20:5e:66:3d:10:4e:65:42:
                    c4:ea:16:47:78:cf:9f:01:f4:68:7b:34:b9:11:9e:
                    ed:05:ba:96:32:0b:71:23:30:31:00:68:eb:a7:e1:
                    2a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:97:1C:6D:42:3C:FC:BC:C7:81:C7:03:19:55:AB:C0:05:0B:1C:CD
            X509v3 Authority Key Identifier:
                keyid:A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/4DC60A785C7F11F089D20138C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:f4:44:a0:49:ac:88:7c:66:a2:2f:7c:c3:91:ef:6a:13:63:
         82:c1:75:26:d4:85:a9:37:7a:f3:05:fd:cc:1a:6d:c1:45:2f:
         32:13:0c:fe:80:78:88:b6:39:7f:5e:e5:0e:2c:c5:25:1c:5e:
         5c:6a:29:e2:20:43:be:2a:3d:c4:84:29:a7:14:02:f8:9a:cb:
         ce:08:de:fb:85:5c:6b:9b:92:cf:07:be:78:ec:73:dd:56:a2:
         f1:c3:34:5e:53:e7:42:d0:2a:de:89:68:78:a7:d1:31:fb:87:
         9b:5d:eb:fc:18:77:e4:36:ac:7a:1d:3b:29:6a:a4:9c:f4:5f:
         82:0b:4b:a3:66:f1:3c:d7:f6:f8:2a:a6:c3:e6:c1:5b:04:29:
         48:ae:95:4a:90:39:5a:95:ce:98:d6:63:9f:31:ae:bb:f8:16:
         1a:04:a4:b1:85:1e:16:a8:d4:02:f8:f0:21:b8:69:06:40:5f:
         31:d3:36:45:7a:a4:55:fb:28:9d:e3:6b:2e:40:87:f4:54:1a:
         e6:95:bb:29:23:2d:b0:76:a6:37:69:36:1c:e7:d1:e3:bd:54:
         44:f6:42:d5:a9:a5:8c:b6:6b:c7:6d:a6:27:51:39:4c:b8:85:
         1e:51:6e:e3:4e:02:60:90:8f:ca:8f:2a:cb:d8:d1:c8:90:67:
         ec:2c:09:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:22:10 2026 by rpki-client