Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa
File:                     0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa (raw, json)
Hash identifier:          eGLRs5+xRo2yh8UxiEyYoaUHZFSoi/sB9xgpO/Oq4V8=
Subject key identifier:   06:D7:3E:39:2C:81:60:6B:C6:D2:04:E9:5D:54:80:54:04:F9:4E:57
Certificate issuer:       /CN=A91362EB/serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F
Certificate serial:       7B
Authority key identifier: 54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:10:02 +0000
ROA not before:           Wed 09 Jul 2025 08:09:37 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     393677
IP address blocks:        165.99.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl
                          rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91362EB, serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F
        Validity
            Not Before: Jul  9 08:09:37 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a59a3a-b152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2c:0b:d1:4f:49:5f:ce:21:36:cf:01:ae:2c:
                    5e:e0:d5:c3:01:33:9c:a4:4b:8d:be:3e:c6:0d:4d:
                    07:51:49:61:37:a4:7b:28:a8:52:95:20:04:5e:68:
                    12:ae:e0:ca:e7:39:7d:6c:1b:e3:aa:4f:f5:ce:da:
                    0c:85:e4:89:17:ad:c1:08:64:c3:ff:dd:e1:a3:29:
                    23:5d:e0:4b:ac:d3:2f:f5:10:b7:90:21:43:69:94:
                    aa:18:56:b1:c0:b8:9b:a3:c6:9b:df:56:54:66:94:
                    da:8f:71:4a:ac:c2:b3:12:c2:18:8b:04:02:ef:35:
                    61:bc:91:26:53:14:6a:86:86:db:93:3b:a2:ea:92:
                    6d:6b:1c:61:6e:fe:9d:5b:ce:1b:54:a5:50:1b:1e:
                    a0:8d:71:e6:3a:6c:09:7d:09:ff:2b:51:2f:3a:45:
                    bc:fb:00:71:62:52:90:ba:12:64:1c:e4:8f:72:4d:
                    1d:a8:7a:3f:e2:7f:bd:b3:45:fb:3f:28:09:c7:21:
                    6e:80:03:af:91:91:7d:3b:12:ea:40:ea:aa:71:30:
                    89:7b:e8:1e:30:a2:c6:df:be:b1:7f:a7:65:66:14:
                    52:39:0b:c8:4c:47:1d:28:d0:85:62:99:1a:b2:23:
                    89:e4:5d:ab:1c:06:94:fc:02:60:99:df:75:78:98:
                    10:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D7:3E:39:2C:81:60:6B:C6:D2:04:E9:5D:54:80:54:04:F9:4E:57
            X509v3 Authority Key Identifier:
                keyid:54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:d1:e5:40:77:06:50:84:0f:2d:e1:af:b3:56:11:de:6c:e5:
         25:3b:57:4c:2a:f3:7c:50:30:9d:a5:8f:6a:71:b9:5e:e4:27:
         3d:8f:46:2b:26:e7:f2:a3:95:b0:41:11:8d:a0:40:6a:92:26:
         07:fd:d2:7b:c3:a4:82:83:6d:a6:d4:67:cf:28:53:3f:e5:0d:
         95:b4:70:18:e7:eb:2a:bc:14:7e:ae:82:92:ab:27:14:5d:ae:
         ee:88:a8:47:3d:3b:41:aa:ee:f4:87:24:e5:0f:69:1a:3b:55:
         06:1d:ee:99:f6:4c:3c:0d:49:bc:de:69:41:c2:8e:82:88:1b:
         c3:e2:b6:2c:ae:c0:a2:6e:16:f8:5f:04:3b:8c:1e:21:c0:8b:
         31:a6:45:68:3f:d5:56:92:1c:3e:56:d9:06:ef:c3:45:c4:27:
         7d:d4:07:b3:a0:ee:52:81:f1:e4:31:23:25:e1:d9:f0:94:25:
         91:8e:f7:d9:9a:e5:cd:e7:a0:11:d6:6a:a1:0b:66:82:62:57:
         9c:33:36:10:5f:f5:41:93:ed:38:d4:27:73:f5:04:ba:9e:7d:
         67:7c:74:eb:c4:2e:ad:86:09:72:50:93:e8:d9:36:72:50:1e:
         29:c4:54:bc:3b:82:36:cc:1a:f7:ab:e3:04:1a:fa:6d:6d:5f:
         18:ea:04:46
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NjJFQjExMC8GA1UEBRMoNTRBMjREQzY4REYyNjQwRTdCQjNGRjBGMzZCNzhFRjg4
NDAwQzMwRjAeFw0yNTA3MDkwODA5MzdaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTU5YTNhLWIxNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOLAvRT0lfziE2zwGuLF7g1cMBM5ykS42+PsYNTQdRSWE3pHsoqFKVIAReaBKu
4MrnOX1sG+OqT/XO2gyF5IkXrcEIZMP/3eGjKSNd4Eus0y/1ELeQIUNplKoYVrHA
uJujxpvfVlRmlNqPcUqswrMSwhiLBALvNWG8kSZTFGqGhtuTO6Lqkm1rHGFu/p1b
zhtUpVAbHqCNceY6bAl9Cf8rUS86Rbz7AHFiUpC6EmQc5I9yTR2oej/if72zRfs/
KAnHIW6AA6+RkX07EupA6qpxMIl76B4wosbfvrF/p2VmFFI5C8hMRx0o0IVimRqy
I4nkXascBpT8AmCZ33V4mBCFAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUBtc+OSyB
YGvG0gTpXVSAVAT5TlcwHwYDVR0jBBgwFoAUVKJNxo3yZA57s/8PNreO+IQAww8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MkVCL0RGNTQ1Q0M4NUM5
OTExRjBCNEJFMUUyMUM0RjlBRTAyL1ZLSk54bzN5WkE1N3NfOFBOcmVPLUlRQXd3
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvVktKTnhvM3laQTU3c184UE5yZU8tSVFBd3c4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjJFQi9ERjU0NUNDODVDOTkxMUYwQjRCRTFFMjFDNEY5QUUwMi8wRTBBMkI5QTVD
OUMxMUYwOENCN0UxNDhDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAClY3QwDQYJKoZIhvcNAQELBQADggEBAJ/R5UB3BlCEDy3hr7NWEd5s
5SU7V0wq83xQMJ2lj2pxuV7kJz2PRism5/KjlbBBEY2gQGqSJgf90nvDpIKDbabU
Z88oUz/lDZW0cBjn6yq8FH6ugpKrJxRdru6IqEc9O0Gq7vSHJOUPaRo7VQYd7pn2
TDwNSbzeaUHCjoKIG8PitiyuwKJuFvhfBDuMHiHAizGmRWg/1VaSHD5W2Qbvw0XE
J33UB7Og7lKB8eQxIyXh2fCUJZGO99ma5c3noBHWaqELZoJiV5wzNhBf9UGT7TjU
J3P1BLqefWd8dOvELq2GCXJQk+jZNnJQHinEVLw7gjbMGver4wQa+m1tXxjqBEY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:56 2026 by rpki-client