Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/0DA28718CE5E11F084703925C4F9AE02.roa
File:                     0DA28718CE5E11F084703925C4F9AE02.roa (raw, json)
Hash identifier:          AdDZHFfcc7Zdrn4Ql7CRvOmqa0OKrZIa586pDCodAEE=
Subject key identifier:   10:52:47:29:33:AF:20:51:43:63:6A:CB:EB:8D:7B:A0:A0:75:CB:18
Certificate issuer:       /CN=A9190059/serialNumber=E02435D513493C3D413D31ED1F8E0DCA30AE0C9E
Certificate serial:       85
Authority key identifier: E0:24:35:D5:13:49:3C:3D:41:3D:31:ED:1F:8E:0D:CA:30:AE:0C:9E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/0DA28718CE5E11F084703925C4F9AE02.roa
Signing time:             Sat 01 Aug 2026 09:58:06 +0000
ROA not before:           Sat 01 Aug 2026 09:58:06 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     131274
IP address blocks:        165.101.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl
                          rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 08:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190059, serialNumber=E02435D513493C3D413D31ED1F8E0DCA30AE0C9E
        Validity
            Not Before: Aug  1 09:58:06 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6dc32e-adee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:28:a3:33:4c:38:c0:fd:17:0c:ed:8e:f7:38:
                    60:a6:fe:36:5e:cb:63:5b:36:16:65:d3:e3:38:d3:
                    fa:c2:1b:f6:ce:e8:f5:fa:b8:60:d1:95:c1:86:cc:
                    98:a6:06:a1:72:f1:c2:81:9b:a1:7d:ee:75:15:97:
                    4b:09:3a:85:25:ab:f5:83:72:03:76:fb:b3:03:fc:
                    7b:49:d5:f3:14:0b:b5:6a:5d:87:0e:b8:a5:7a:11:
                    7e:bc:49:93:d6:82:fc:1c:b7:f1:b4:ae:78:07:6d:
                    a8:b4:fd:ec:ba:f1:ef:77:12:0f:ec:c1:6f:cd:42:
                    48:56:fc:9f:73:75:96:ab:67:30:9e:25:9b:5f:75:
                    ff:dd:89:72:78:3b:84:84:2b:dd:1a:f9:33:35:54:
                    e3:34:21:c3:bf:54:ff:3b:eb:a2:9d:3f:ea:1b:da:
                    c6:c0:dc:24:cc:7f:af:ed:1f:3c:a7:a3:f3:82:5d:
                    27:cc:cd:b6:56:fc:39:3f:d7:15:6b:75:f3:d4:15:
                    0c:ac:95:bd:c3:7b:e2:8f:8a:26:d1:76:66:76:89:
                    b7:4b:1a:62:f0:4a:a0:2a:86:2e:5c:3d:3c:c7:2d:
                    29:9a:28:65:bc:6f:26:04:a5:bc:32:a7:ef:95:0f:
                    c3:c7:f8:c0:50:f8:d4:b8:0b:6d:d3:8f:60:79:85:
                    a6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:52:47:29:33:AF:20:51:43:63:6A:CB:EB:8D:7B:A0:A0:75:CB:18
            X509v3 Authority Key Identifier:
                keyid:E0:24:35:D5:13:49:3C:3D:41:3D:31:ED:1F:8E:0D:CA:30:AE:0C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/4CQ11RNJPD1BPTHtH44NyjCuDJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4CQ11RNJPD1BPTHtH44NyjCuDJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190059/4799949ECE5D11F0A334CE74C4F9AE02/0DA28718CE5E11F084703925C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:89:99:74:65:83:cb:42:8c:f1:32:86:74:fb:0a:4e:1c:4d:
         99:41:44:75:69:ba:2b:53:a7:f7:cb:85:00:2a:54:89:64:02:
         bf:26:78:fa:da:6e:cb:24:c6:e5:7b:34:6e:bd:21:a4:a3:6a:
         4c:1d:49:da:cb:b3:42:a6:81:7a:a1:e2:ce:5b:32:4c:41:70:
         52:ad:2a:69:61:6c:fe:84:1b:1c:52:38:c1:9f:44:a2:95:f2:
         8a:5c:3f:0d:db:2a:fe:b1:5c:83:87:05:3f:f2:49:b2:68:a7:
         cd:de:48:42:c9:c7:04:98:58:4d:61:64:96:25:85:ea:41:18:
         a8:41:02:f7:1b:e1:89:b0:d4:18:92:69:0a:63:f8:47:25:b9:
         4c:78:f3:a4:1e:c5:ed:10:90:73:c0:1b:6b:70:29:7c:8c:99:
         98:5a:83:df:3e:19:c3:7a:a3:6e:46:5d:bd:b6:ae:ad:17:cf:
         54:49:56:e8:c5:44:3c:bc:a1:18:ff:5d:a8:90:d3:b2:fa:a5:
         c3:09:c3:ab:35:86:92:3f:a8:cf:56:13:b0:dc:89:9f:c1:bc:
         dd:e4:08:ae:2d:31:35:73:3f:a3:5f:40:9b:a2:58:ef:1b:a8:
         ce:8e:d9:04:6e:a8:f3:13:db:8c:8f:b1:bd:64:a8:e1:26:bb:
         58:33:cf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:13:23 2026 by rpki-client