Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7CCE303051B111F0B0014973C4F9AE02.roa
File:                     7CCE303051B111F0B0014973C4F9AE02.roa (raw, json)
Hash identifier:          +f7Ag6lHu+CG5cHb9IPRUk2nCLE5NT4eyPM/eYVTy1w=
Subject key identifier:   6E:29:C2:B2:A4:6B:ED:71:07:29:A4:74:B9:DE:18:7F:8A:FE:C6:35
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2EC8
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7CCE303051B111F0B0014973C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:20:43 +0000
ROA not before:           Sun 31 May 2026 16:20:43 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     139514
IP address blocks:        165.101.50.0/24 maxlen: 24
                          165.101.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11976 (0x2ec8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:20:43 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c5fdb-e945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:40:62:6f:15:84:46:76:c2:46:6e:11:e0:f2:
                    95:43:30:fc:fc:64:62:df:15:f2:c9:08:31:bf:35:
                    8e:36:11:f9:d6:8d:b5:eb:36:8f:dc:38:1e:42:26:
                    80:77:e2:b6:9c:cd:ea:87:96:a7:88:94:91:d3:84:
                    30:ee:c4:38:db:d6:b2:09:a9:f7:da:d0:59:ec:0e:
                    2c:b6:eb:93:5e:2e:5d:2b:96:92:98:1a:4a:b5:c3:
                    f4:be:63:6d:2a:98:43:42:d3:08:93:18:8a:01:4f:
                    e8:fa:cf:c5:c4:1d:61:81:49:72:1d:8b:af:6b:f9:
                    77:d9:cf:7d:e8:b4:ce:34:1f:5d:d6:0b:f0:35:3e:
                    65:ed:5c:15:5a:ae:90:a3:98:aa:40:2b:9e:10:24:
                    33:68:05:08:ba:89:63:f4:ca:c8:65:82:90:a7:4f:
                    f7:da:2a:7d:a1:3a:8a:e5:16:a0:fd:3b:97:5b:eb:
                    35:b0:f7:0e:c4:b3:a8:77:f9:1b:ee:15:b4:00:15:
                    f2:41:53:e2:ec:66:79:d3:4c:09:99:08:dd:07:4c:
                    8b:2c:da:d9:e7:91:0a:84:b0:e9:2c:db:20:0f:c6:
                    a8:6a:35:99:b9:4e:5e:df:66:ba:96:91:0d:35:65:
                    63:ca:fc:e3:d0:e7:95:2f:6d:a4:bd:7b:dd:46:2a:
                    b0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:29:C2:B2:A4:6B:ED:71:07:29:A4:74:B9:DE:18:7F:8A:FE:C6:35
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7CCE303051B111F0B0014973C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:be:50:63:41:d5:4d:7a:f9:65:15:a5:8f:0b:34:ed:ad:19:
         ee:b8:45:50:db:38:02:a8:76:2b:31:5b:4b:18:44:29:01:dd:
         af:ee:bd:91:7e:93:76:06:0f:3e:fd:eb:62:48:35:48:07:2a:
         81:fa:4e:0e:67:ac:27:6d:07:33:6d:e6:ee:bf:fe:84:b4:f5:
         10:9f:2f:68:a4:b9:d5:86:89:07:13:00:5e:51:fa:d9:57:d3:
         6e:89:72:91:4e:54:94:f2:2c:00:96:8e:14:07:aa:91:05:b6:
         13:45:2a:c0:e9:6b:77:7f:01:50:bb:a0:8c:72:0b:46:2c:ca:
         08:6a:03:28:da:4d:f8:b3:84:52:ca:c9:62:3f:c9:be:8b:9b:
         ba:e1:20:26:30:8c:22:45:cf:f0:05:ba:45:a7:65:66:4e:0f:
         dd:f7:c9:17:87:7a:19:24:83:45:43:3d:c6:c0:47:d6:77:bb:
         b7:8b:e9:ad:42:8b:74:2d:19:9c:da:17:69:82:09:07:ca:05:
         ce:9a:b1:cc:e5:2d:c5:e5:61:74:15:a8:b9:01:cd:83:fc:23:
         d3:de:ac:1e:72:dd:8e:6c:3a:71:40:5a:1e:c6:08:d2:58:2d:
         76:c8:09:e2:ac:9c:ca:bd:7b:ea:b2:f9:94:78:48:5d:b2:0b:
         10:0f:ae:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:54 2026 by rpki-client