Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/7CC500A86DEC11F0BD1BF429C4F9AE02.roa
File:                     7CC500A86DEC11F0BD1BF429C4F9AE02.roa (raw, json)
Hash identifier:          MB9pFrykI6Fux6nBhHFufGgLv9T4ZiD30Focg7NaPZQ=
Subject key identifier:   EB:77:CF:8B:6E:E8:D6:9D:57:21:DF:9E:84:61:92:06:4E:6D:65:B4
Certificate issuer:       /CN=A91D61DF/serialNumber=BAF355F03A2ED884A617A47427C25CFCCCE31276
Certificate serial:       FE
Authority key identifier: BA:F3:55:F0:3A:2E:D8:84:A6:17:A4:74:27:C2:5C:FC:CC:E3:12:76
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/7CC500A86DEC11F0BD1BF429C4F9AE02.roa
Signing time:             Sat 03 Oct 2026 02:51:26 +0000
ROA not before:           Sat 03 Oct 2026 02:51:26 +0000
ROA not after:            Mon 01 Feb 2027 00:00:00 +0000
asID:                     141199
IP address blocks:        165.101.48.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.crl
                          rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 02:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D61DF, serialNumber=BAF355F03A2ED884A617A47427C25CFCCCE31276
        Validity
            Not Before: Oct  3 02:51:26 2026 GMT
            Not After : Feb  1 00:00:00 2027 GMT
        Subject: CN=6ac06dae-97d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2a:2a:19:a0:53:2d:57:a9:bd:72:91:54:5a:
                    38:fe:1d:1c:02:cc:16:4e:84:eb:5c:2c:7d:9a:f1:
                    bb:70:5f:e6:fd:3e:95:f8:d9:6f:c8:5c:21:66:da:
                    55:12:e3:45:bf:80:ad:af:15:2f:3a:66:6f:18:f7:
                    8a:8b:df:e1:c6:17:d5:0b:be:34:e4:b3:14:ad:8f:
                    b1:04:ac:35:c5:3f:42:a0:05:34:a2:a9:d1:07:7d:
                    b7:37:55:67:54:86:41:18:e1:80:39:0a:8c:db:d1:
                    62:9d:32:1e:29:e2:1b:26:c1:44:f2:02:3a:42:aa:
                    a5:e4:4e:a2:5c:9a:bb:b7:6d:f3:c7:5a:75:cc:32:
                    76:e3:32:ff:5b:2f:c2:79:87:6f:e1:cb:4f:e1:a6:
                    95:b0:65:c4:a3:df:9b:ad:cb:1b:23:24:47:e9:2b:
                    03:2a:d6:c7:21:51:55:7a:a7:29:b9:71:4a:b4:3f:
                    8c:a2:b9:44:c0:cc:e9:58:24:77:76:23:eb:d0:50:
                    5b:2f:51:4b:9e:e0:fa:2f:cc:6e:bd:92:21:a5:ff:
                    a7:03:12:3f:26:70:90:32:8d:8f:b8:f6:ca:6c:57:
                    fa:6a:5e:75:25:40:01:fb:3c:d0:7b:e0:9f:dd:8a:
                    25:21:c7:f4:e9:cb:fb:f5:8d:55:19:e7:51:35:cf:
                    37:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:77:CF:8B:6E:E8:D6:9D:57:21:DF:9E:84:61:92:06:4E:6D:65:B4
            X509v3 Authority Key Identifier:
                keyid:BA:F3:55:F0:3A:2E:D8:84:A6:17:A4:74:27:C2:5C:FC:CC:E3:12:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uvNV8Dou2ISmF6R0J8Jc_MzjEnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/B49151CA4D9A11F0BC7B5E6BC4F9AE02/7CC500A86DEC11F0BD1BF429C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:f7:91:c4:23:93:b0:c8:68:8e:de:c8:66:ec:f5:9d:a7:e4:
         7a:05:97:e6:f0:26:72:19:fa:b7:b8:3a:92:37:61:dd:b4:1e:
         62:35:07:80:cb:c2:47:a8:1c:84:09:f5:33:87:71:bd:b7:c6:
         c9:ae:aa:6f:8f:44:98:b9:02:97:4c:98:9e:bd:44:48:47:86:
         8b:55:2b:1e:4d:24:b1:a9:8c:fe:50:b9:61:9a:cf:22:64:09:
         49:9a:a1:1d:28:b1:cf:7b:2d:23:ec:53:9b:e8:9b:51:20:59:
         ca:fa:53:d7:1c:45:33:4c:a5:c8:8b:d6:30:ca:52:b3:16:45:
         0d:8b:aa:07:82:84:0b:b0:ef:51:a5:db:57:da:c2:d5:c7:71:
         62:20:df:70:99:d0:a8:92:a5:ac:8a:af:e4:e3:85:6c:8b:9a:
         e5:f2:99:45:c1:65:eb:1e:81:64:41:f9:fa:a4:43:71:f1:9d:
         01:1b:dc:33:4e:c1:1e:55:9e:e8:75:0b:cb:6d:62:7a:47:c1:
         cd:77:ed:fe:f8:07:7a:f5:5a:fc:41:32:c0:07:bb:38:94:0c:
         ee:3f:bf:40:a5:45:4f:6d:a1:83:7c:30:f8:0a:9e:8d:3e:1e:
         92:cc:7b:7d:11:04:bc:02:44:a4:05:75:ca:9c:56:3b:8b:e7:
         d3:4f:a5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:47:43 2026 by rpki-client