Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/E0FC9A944D3111F08F258733C4F9AE02.roa
File:                     E0FC9A944D3111F08F258733C4F9AE02.roa (raw, json)
Hash identifier:          2L9u9YUqO00U34mq8XNoVmN+3ZHp6ekSDH71ZMwwS68=
Subject key identifier:   7B:0A:28:39:B7:BE:79:50:4A:9E:62:78:38:8A:3F:5F:E6:C1:70:AF
Certificate issuer:       /CN=A91C7175/serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F
Certificate serial:       C5
Authority key identifier: 72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/E0FC9A944D3111F08F258733C4F9AE02.roa
Signing time:             Sat 23 Aug 2025 06:12:10 +0000
ROA not before:           Sat 23 Aug 2025 06:12:10 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     151081
IP address blocks:        165.101.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl
                          rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 06:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7175, serialNumber=7257923D6770C5678919B07CBCFA8AF8B9C5053F
        Validity
            Not Before: Aug 23 06:12:10 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68a95bba-cb79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:ec:f1:0b:ea:2b:79:7e:c9:4d:3d:f4:4b:
                    58:2b:d7:de:2a:03:b7:d4:6c:a3:3f:53:f2:8f:17:
                    ef:8b:27:2e:db:99:17:53:0c:a5:38:2c:22:44:19:
                    6b:1e:ff:2f:85:07:ba:5d:a7:9a:c8:29:bb:b1:5a:
                    8d:31:81:87:b0:7d:2b:e5:60:0d:b0:11:06:dd:e9:
                    2e:2b:a9:e0:30:10:33:09:19:e5:11:95:d6:1f:72:
                    2c:0c:37:5e:cd:31:1e:c7:c1:8e:dc:86:ae:1a:3e:
                    11:ba:c5:a3:81:47:6d:10:e4:15:5d:56:22:f2:1b:
                    93:8c:3d:b3:34:4c:00:51:06:cb:f8:f7:25:73:38:
                    b1:2c:74:ab:93:48:c8:f4:b5:46:1c:47:9b:4b:4a:
                    0f:dc:0e:05:95:d4:fa:8f:16:b2:85:af:65:df:b1:
                    1d:40:f9:c4:a6:26:d9:a1:42:b3:0b:04:4e:a4:b6:
                    d3:7d:46:f8:44:00:76:de:fa:9b:30:3d:03:00:a8:
                    70:1b:84:c4:73:74:95:aa:2a:db:89:16:e0:a6:a7:
                    63:c9:0d:8e:d9:f6:fd:a1:26:b3:4f:7b:cf:cb:49:
                    51:4a:c6:d8:7d:76:6b:27:b2:a8:78:9f:92:07:93:
                    e1:9e:26:2a:56:65:bf:cd:38:50:3c:21:23:eb:7b:
                    4a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0A:28:39:B7:BE:79:50:4A:9E:62:78:38:8A:3F:5F:E6:C1:70:AF
            X509v3 Authority Key Identifier:
                keyid:72:57:92:3D:67:70:C5:67:89:19:B0:7C:BC:FA:8A:F8:B9:C5:05:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/cleSPWdwxWeJGbB8vPqK-LnFBT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cleSPWdwxWeJGbB8vPqK-LnFBT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/E9A092B868FD11EFA9500187C4F9AE02/E0FC9A944D3111F08F258733C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:35:aa:ee:d9:0e:f8:69:fb:bf:f5:c3:27:89:03:c7:a3:29:
         a8:2d:a5:ca:87:4a:d9:76:f9:72:8e:86:02:8e:e2:8c:01:43:
         7a:14:62:b3:f6:a9:82:dc:c0:4c:bf:64:78:a1:b2:24:ab:a5:
         2d:14:ae:b1:95:f7:f2:22:10:4f:1c:70:f1:1a:c6:c8:17:4b:
         37:6a:87:ae:11:d1:5e:73:ad:9d:06:57:54:13:d0:9e:49:35:
         fb:5e:1f:d0:af:27:ec:15:b6:76:d7:92:dc:49:9b:92:5f:6f:
         bb:94:ff:62:be:6d:b8:75:d4:d8:af:18:36:e5:8c:fc:4b:11:
         56:23:44:56:5d:a8:68:2b:7a:75:ab:ab:e0:76:17:f3:f8:05:
         da:83:43:8f:ab:bd:ec:09:6c:0f:83:b9:48:1b:53:6a:7a:8c:
         9f:1c:0c:c5:be:18:cb:23:a7:46:9b:11:d8:b6:67:05:80:03:
         bb:52:48:1c:43:94:20:d2:85:32:f7:02:70:cb:9a:d9:0d:84:
         9e:07:a3:13:42:d2:1b:53:e1:13:e8:3f:73:55:c2:b6:7c:4f:
         9c:b5:9c:4e:d3:51:9a:eb:18:c7:37:40:cc:3c:01:07:56:14:
         a0:6a:ca:02:9d:f8:d8:64:e5:e6:45:7a:5e:ad:54:35:df:0c:
         4e:3f:4a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 19:06:27 2025 by rpki-client