Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/0322BF5A6D3411F0A208C05DC4F9AE02.roa
File:                     0322BF5A6D3411F0A208C05DC4F9AE02.roa (raw, json)
Hash identifier:          ZcOaPyDXThtmtr1T0P1i7tbr9OkUJlJQMZQPJKMXF0Y=
Subject key identifier:   ED:D7:B7:68:FC:F7:54:E6:79:F8:B6:10:F9:E1:C0:23:FF:C8:F2:7B
Certificate issuer:       /CN=A9134309/serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
Certificate serial:       C7
Authority key identifier: 07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/0322BF5A6D3411F0A208C05DC4F9AE02.roa
Signing time:             Fri 05 Jun 2026 07:39:42 +0000
ROA not before:           Fri 05 Jun 2026 07:39:42 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     135341
IP address blocks:        165.99.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl
                          rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134309, serialNumber=077BCD663B0E63BDF5E9B809AF71AEF1E5ADF63B
        Validity
            Not Before: Jun  5 07:39:42 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a227d3e-4a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:72:4b:59:d4:04:a4:e5:6d:db:be:44:b1:4f:
                    90:6f:55:05:16:64:d1:ce:3b:7c:f3:66:b8:8e:e5:
                    63:ac:35:31:da:fd:9e:d2:c1:fa:0c:27:02:d2:9f:
                    84:c5:11:6c:c0:f5:fb:d2:8c:e2:a4:8e:24:76:0f:
                    ac:ab:81:e6:5b:22:85:87:1f:b3:23:65:7b:6c:69:
                    87:eb:71:e9:97:08:64:8d:e7:5a:a6:ae:c6:37:e4:
                    4e:bc:9d:d3:4c:07:00:48:83:fa:ee:4d:b0:c5:80:
                    33:51:8d:09:60:1d:38:5d:9a:6a:f9:6d:ad:eb:bb:
                    60:c1:16:b7:a7:d7:c7:9c:ab:f7:ca:59:c6:a9:43:
                    25:12:d5:a9:01:ef:f2:07:ab:c7:3c:d1:46:9a:da:
                    63:de:df:43:b7:df:4c:fd:2d:21:0b:42:eb:63:b8:
                    5d:45:8d:30:18:9e:23:c5:1d:ab:ac:ba:eb:f9:f8:
                    c6:b3:93:5c:a9:e9:fc:1a:61:64:e9:f3:fb:d4:57:
                    3e:6a:49:7a:39:b7:a7:88:ab:f3:fd:2a:b9:af:85:
                    2c:05:0d:87:86:ae:b9:50:9d:5f:41:7e:8a:5c:a4:
                    39:46:8e:4e:c2:6b:00:8f:82:6d:95:d8:bc:6a:10:
                    c8:87:de:9f:a8:10:7f:33:d0:36:ca:85:08:91:7f:
                    f2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D7:B7:68:FC:F7:54:E6:79:F8:B6:10:F9:E1:C0:23:FF:C8:F2:7B
            X509v3 Authority Key Identifier:
                keyid:07:7B:CD:66:3B:0E:63:BD:F5:E9:B8:09:AF:71:AE:F1:E5:AD:F6:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/B3vNZjsOY7316bgJr3Gu8eWt9js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B3vNZjsOY7316bgJr3Gu8eWt9js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134309/D41FA32C3EE311F0B9398442C4F9AE02/0322BF5A6D3411F0A208C05DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:ce:9b:4f:2f:fe:cc:90:1f:5a:f7:56:0b:d9:b2:04:5b:c3:
         b6:3e:72:2e:4c:4d:77:f9:30:de:95:92:fc:6b:5c:c7:48:21:
         e0:e7:6c:59:0c:c4:05:ae:5b:fc:09:8d:70:a2:9c:69:0d:79:
         4c:76:a8:74:ac:ea:a3:4b:9b:89:b2:43:72:b9:47:58:9b:7a:
         a6:42:89:8d:d0:37:34:89:8f:1b:d2:fa:6c:5d:35:c2:ec:24:
         cb:a4:09:95:cc:06:dc:2f:14:c2:f6:b9:d1:a9:83:28:3f:ca:
         4d:c1:ba:8c:35:7b:8f:bd:f7:23:13:61:6d:c4:01:9a:b9:d1:
         ea:ad:6f:a5:54:b6:ab:14:77:7d:67:31:1a:a9:bf:89:b3:0c:
         44:ab:c4:58:d2:c6:96:c0:a4:dc:9b:78:fc:46:65:20:90:a3:
         e0:7f:26:c5:50:82:66:45:a7:51:8c:51:04:75:22:75:03:12:
         f1:79:0e:cd:c8:b0:68:9a:3a:7a:27:0d:fb:de:bb:9a:58:67:
         ec:73:1f:9b:f1:eb:50:c8:72:85:da:0f:00:c6:ce:64:f4:4f:
         9a:0f:f8:a3:96:9a:2b:52:6d:f9:0b:43:61:75:f4:3a:e8:be:
         c9:03:20:1f:c1:d5:c5:51:0c:f2:ba:54:67:94:b1:68:bf:7a:
         03:eb:30:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:06:07 2026 by rpki-client