Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/E73A5E40A28C11F0A6491A72C4F9AE02.roa
File:                     E73A5E40A28C11F0A6491A72C4F9AE02.roa (raw, json)
Hash identifier:          is4OaleIvjgTfkRN81esClK4/HDDPHdtSZTyTH+9VPs=
Subject key identifier:   93:8E:46:72:5D:22:8F:43:EF:22:C6:A0:E9:1D:40:1E:82:27:2C:5D
Certificate issuer:       /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409
Certificate serial:       F2
Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/E73A5E40A28C11F0A6491A72C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 07:39:26 +0000
ROA not before:           Fri 05 Jun 2026 07:39:26 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     401701
IP address blocks:        165.99.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl
                          rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409
        Validity
            Not Before: Jun  5 07:39:26 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a227d2e-33b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:65:c5:bd:d4:83:39:d9:87:00:01:b7:fc:aa:
                    2a:5b:00:30:86:41:23:d7:47:8b:ee:49:e8:40:1e:
                    17:2e:b7:21:75:61:71:7e:3d:46:fc:be:f5:df:32:
                    6a:5c:34:cf:26:b4:76:e1:aa:e6:03:a2:22:02:86:
                    16:83:7c:d8:d6:87:cc:94:c5:6c:d9:79:9d:44:eb:
                    01:8a:c0:df:0f:7c:4c:1a:ca:7b:4f:67:7d:2e:59:
                    d3:22:26:a8:58:18:68:ca:9a:10:ec:83:b1:be:b3:
                    8a:1c:03:3f:43:f5:3c:08:48:5f:b7:6f:73:e5:23:
                    d0:e8:b0:a9:5c:51:f8:eb:cb:af:1b:14:e8:e9:f6:
                    56:a0:95:5a:f1:f1:de:f5:29:9d:f6:fe:cf:0a:86:
                    40:30:20:75:a3:bf:9d:1f:ee:ea:f3:ce:ca:29:a1:
                    6c:0e:95:11:4f:b9:84:10:26:dd:f0:0b:1a:ed:d2:
                    8b:b0:7d:8f:97:5b:b5:2d:5a:ac:68:e8:5c:e6:9e:
                    88:9f:fd:24:14:1e:d5:07:f9:fe:4e:ba:f1:54:c6:
                    80:bf:7c:99:ad:6e:32:3a:69:90:e5:1a:6f:52:cb:
                    03:51:4f:26:b8:51:c4:ac:ec:2c:d1:0c:6a:9c:b7:
                    7f:14:d8:88:84:ed:2c:b4:d6:97:bf:a4:65:68:e1:
                    4c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8E:46:72:5D:22:8F:43:EF:22:C6:A0:E9:1D:40:1E:82:27:2C:5D
            X509v3 Authority Key Identifier:
                keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/E73A5E40A28C11F0A6491A72C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:a3:51:24:41:d4:53:c2:f5:64:ec:48:01:f2:1b:c4:65:6c:
         98:3f:1c:4b:fe:b6:be:82:d7:0d:52:8d:5f:fa:3c:de:51:f3:
         3d:d6:58:b6:e9:f5:49:34:6b:5e:84:a4:5e:e0:3f:1c:61:21:
         09:fe:eb:70:d1:5f:c7:33:73:cf:89:c2:fd:37:dd:8c:46:80:
         3d:0d:35:de:c4:cb:f3:0d:94:8b:a9:08:96:8d:5b:fc:44:2b:
         3b:39:bc:69:88:5f:a7:7d:ac:c8:d9:5d:2f:fd:1d:83:5a:98:
         82:48:3f:8b:2d:2b:50:96:28:04:16:9e:62:49:e9:97:65:77:
         e4:24:6b:13:3b:45:9f:c6:20:c2:c9:cb:21:28:59:f5:46:31:
         ac:52:20:65:32:f5:5b:de:1b:67:41:51:ae:49:64:1b:b4:90:
         63:82:77:8d:94:86:8d:b0:86:a9:b9:b4:29:bc:96:e9:da:ef:
         b1:f8:44:1d:ce:9d:45:bf:8a:08:91:76:ea:ca:ad:87:3c:ce:
         50:44:56:cf:10:ab:09:49:b0:37:5c:5b:09:4d:e0:b6:05:bc:
         e1:1f:18:f8:6a:14:2a:88:1e:1a:35:92:c9:7f:91:d4:18:74:
         ca:5b:9a:c4:80:4b:d3:6c:c1:3b:38:d4:99:ef:6e:75:f1:12:
         ba:87:a1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:08:34 2026 by rpki-client