Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0F351304620A11F0A687343BC4F9AE02.roa
File:                     0F351304620A11F0A687343BC4F9AE02.roa (raw, json)
Hash identifier:          VAZTyVNBJeg0jPh/eP+fFo69ENIK3lt7PkH/0G1IGkM=
Subject key identifier:   A9:90:CE:B2:13:A0:DE:37:0F:78:0B:97:73:CD:80:81:25:B7:10:0C
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       313E
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0F351304620A11F0A687343BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:20:52 +0000
ROA not before:           Mon 06 Jul 2026 16:20:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151122
IP address blocks:        165.101.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12606 (0x313e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:20:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd5e4-44e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:83:cc:5f:89:0f:de:e3:e2:12:b2:97:03:99:
                    e5:58:61:60:21:d9:74:f9:56:f8:01:2d:86:01:da:
                    de:a6:7a:c3:0c:54:7b:a6:95:24:d9:7a:ba:2a:a3:
                    ec:8b:14:81:79:77:99:ce:e0:c2:f8:1f:2f:45:0a:
                    e1:78:26:d9:ee:13:05:ca:04:4e:6d:05:8b:3f:bd:
                    9f:e1:0d:a1:34:59:1d:2b:a9:a2:d2:e2:0a:03:ce:
                    ca:81:f7:c7:49:e3:1c:46:81:12:34:41:5f:36:21:
                    89:1d:ea:b8:84:41:c7:59:ff:dd:1f:43:c3:a3:bd:
                    c3:c0:36:56:06:c4:24:ce:b0:a8:ad:1e:66:5b:b8:
                    8e:0d:7c:a6:53:de:bd:6f:de:d5:2f:72:05:f1:bf:
                    ce:8d:67:19:74:30:ca:e9:da:a8:54:7e:4a:21:84:
                    b5:47:6c:a4:40:dc:46:45:98:82:48:a3:b7:f8:2f:
                    7a:5f:e8:a4:07:c7:71:ab:df:53:a3:09:06:d2:37:
                    c5:65:21:8c:60:ef:db:b7:89:aa:7b:0e:ea:53:96:
                    cd:75:a1:41:83:d7:17:49:36:02:2f:84:67:a4:61:
                    50:cd:b5:f9:79:16:a9:d9:97:0e:6a:5b:fe:89:8d:
                    21:05:8f:32:67:73:89:c1:90:c1:87:7e:a5:75:73:
                    b6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:90:CE:B2:13:A0:DE:37:0F:78:0B:97:73:CD:80:81:25:B7:10:0C
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0F351304620A11F0A687343BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:a8:37:33:a1:7e:a2:f7:f2:d6:63:4b:67:c3:61:91:a7:f5:
         ff:b0:08:b5:29:e6:85:05:84:53:f0:f1:b1:d3:c9:0f:bf:62:
         50:0b:0c:fd:63:55:1a:46:ca:52:79:0a:7b:fc:4a:2c:68:5d:
         c3:7c:19:f6:b1:69:5c:bd:28:da:b7:4f:fe:8c:99:10:d8:23:
         10:d8:bb:2f:66:d8:3f:a6:3e:e5:c8:ea:d9:89:53:26:f6:e9:
         d3:92:fb:3d:cb:4f:1d:61:63:fb:3a:cd:1b:53:db:f8:2f:f8:
         45:4a:67:e2:3e:27:31:55:62:0d:c5:c6:fb:2d:f4:a6:bd:f9:
         dd:b5:a1:e4:08:d0:bb:fc:bf:b0:15:63:bc:b9:d9:2e:45:c9:
         a5:e7:8f:bc:93:9a:90:24:46:40:e9:f5:ec:04:4f:89:34:7c:
         13:2c:ab:94:6e:84:fb:5a:84:66:f5:15:73:94:40:0c:1d:a1:
         5f:59:cb:c1:bf:e9:e8:65:6e:50:82:40:f2:97:c8:dc:46:30:
         8b:73:50:a7:15:3d:39:6c:bd:34:7e:6f:43:5b:fa:9f:60:76:
         63:a1:d3:7c:0e:db:21:53:1e:0e:c5:4a:07:9c:de:41:33:29:
         e9:ff:7e:06:74:92:ea:3c:ef:f9:d1:d5:f7:86:01:2f:83:52:
         8c:86:76:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:09 2026 by rpki-client