Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/7D7ECB70480611F08B614210C4F9AE02.roa
File:                     7D7ECB70480611F08B614210C4F9AE02.roa (raw, json)
Hash identifier:          TDS7qbzkjns0lb3qBIPlOIfh7gAVrC0ccm+ewwA1wN8=
Subject key identifier:   BC:91:2B:E5:8F:45:C3:B9:6C:86:D3:F4:41:33:99:25:3D:48:CB:89
Certificate issuer:       /CN=A913FE55/serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3
Certificate serial:       8B
Authority key identifier: BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/7D7ECB70480611F08B614210C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:08:07 +0000
ROA not before:           Fri 13 Jun 2025 03:28:36 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     153966
IP address blocks:        165.99.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl
                          rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FE55, serialNumber=BAC1FA1B1E4EE430023B275D227A5D043C7F96A3
        Validity
            Not Before: Jun 13 03:28:36 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a3e5d6-3419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c5:04:02:59:44:0f:f6:2e:9a:08:58:fe:6f:
                    25:0e:a1:99:77:71:00:2e:75:8f:6f:ed:ff:cf:36:
                    15:c1:fa:63:19:71:51:99:37:8c:c4:c8:ad:72:a7:
                    f5:cf:ed:c9:b7:9b:5b:4e:3d:30:2a:fe:60:43:f6:
                    85:41:b3:09:6b:28:37:cd:4b:de:f0:a6:0c:28:be:
                    d6:79:3b:c8:30:9e:fa:9f:48:ee:3c:51:a2:0e:d3:
                    10:48:d6:dd:da:7a:82:16:b9:ff:b7:9b:71:06:1d:
                    d9:7f:3d:50:51:4f:2e:cd:06:fb:c6:8c:5d:9b:ac:
                    0b:c9:76:1e:04:1b:13:ac:a4:11:13:e7:1c:58:c6:
                    80:7c:bb:5b:2a:05:3c:63:3a:c8:7e:fa:f5:77:22:
                    94:60:79:2c:c7:f4:40:a1:a6:a6:c3:d5:47:b6:f6:
                    df:61:99:c3:25:09:58:66:05:3a:bf:88:ff:12:1e:
                    4c:99:25:70:79:ac:99:ea:89:c9:e0:38:c7:69:23:
                    7d:02:4d:e7:1c:a6:59:6a:ad:11:03:71:4b:a2:46:
                    5c:fa:ec:e8:27:28:2c:a8:72:bd:de:26:4e:02:95:
                    70:ba:4f:f6:60:c5:a0:0e:d8:58:9e:c5:28:32:4e:
                    8c:81:76:fb:ad:b3:d1:9d:42:be:48:d8:fc:a1:4c:
                    94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:91:2B:E5:8F:45:C3:B9:6C:86:D3:F4:41:33:99:25:3D:48:CB:89
            X509v3 Authority Key Identifier:
                keyid:BA:C1:FA:1B:1E:4E:E4:30:02:3B:27:5D:22:7A:5D:04:3C:7F:96:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/usH6Gx5O5DACOyddInpdBDx_lqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/usH6Gx5O5DACOyddInpdBDx_lqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FE55/24CAE4A8473B11F08336F75CC4F9AE02/7D7ECB70480611F08B614210C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:8a:6f:4c:e4:33:2b:e7:22:89:b6:bd:21:45:37:72:1c:ff:
         2c:db:29:1f:09:d9:64:22:75:a8:4d:05:47:09:4c:f5:4d:96:
         83:20:0b:93:a8:b5:91:57:7e:bd:25:55:9b:be:2a:e6:47:ed:
         a1:e5:50:de:18:40:51:cd:2e:73:69:20:8f:67:75:c9:cc:49:
         4d:14:7d:2a:3d:ff:e3:57:40:ef:9c:d2:31:2a:9e:6f:19:18:
         ee:97:22:e8:c9:cf:2a:51:f0:9b:23:94:51:f1:ad:63:ff:c9:
         e3:a9:84:52:a4:2c:f2:d1:f8:5b:9e:3d:33:d4:91:a0:b8:dd:
         25:83:26:13:9c:6e:c9:c4:97:96:4f:ca:fa:f2:d5:c6:c7:28:
         64:83:64:c1:02:b9:3d:2c:f9:3c:54:98:bc:fa:54:72:d6:8b:
         91:42:1d:88:98:d9:95:d2:0e:a8:4d:f8:4d:39:d2:4c:35:6b:
         77:96:d2:47:0d:f7:e7:9b:44:77:d3:52:62:99:70:c8:b0:11:
         c3:7f:aa:a7:ad:28:07:20:c5:76:5a:1a:8e:9a:49:98:72:c2:
         28:ee:0a:a2:86:06:d7:30:26:6c:18:b6:8c:5a:e2:51:63:2d:
         6a:47:0f:68:41:bd:93:f1:3d:09:3e:16:8f:14:69:b9:d1:7b:
         0c:6b:8a:dc
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0ZFNTUxMTAvBgNVBAUTKEJBQzFGQTFCMUU0RUU0MzAwMjNCMjc1RDIyN0E1RDA0
M0M3Rjk2QTMwHhcNMjUwNjEzMDMyODM2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZTVkNi0zNDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnsUEAllED/YumghY/m8lDqGZd3EALnWPb+3/zzYVwfpjGXFRmTeMxMitcqf1
z+3Jt5tbTj0wKv5gQ/aFQbMJayg3zUve8KYMKL7WeTvIMJ76n0juPFGiDtMQSNbd
2nqCFrn/t5txBh3Zfz1QUU8uzQb7xoxdm6wLyXYeBBsTrKQRE+ccWMaAfLtbKgU8
YzrIfvr1dyKUYHksx/RAoaamw9VHtvbfYZnDJQlYZgU6v4j/Eh5MmSVweayZ6onJ
4DjHaSN9Ak3nHKZZaq0RA3FLokZc+uzoJygsqHK93iZOApVwuk/2YMWgDthYnsUo
Mk6MgXb7rbPRnUK+SNj8oUyUWQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLyRK+WP
RcO5bIbT9EEzmSU9SMuJMB8GA1UdIwQYMBaAFLrB+hseTuQwAjsnXSJ6XQQ8f5aj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkU1NS8yNENBRTRBODQ3
M0IxMUYwODMzNkY3NUNDNEY5QUUwMi91c0g2R3g1TzVEQUNPeWRkSW5wZEJEeF9s
cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3VzSDZHeDVPNURBQ095ZGRJbnBkQkR4X2xxTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0ZFNTUvMjRDQUU0QTg0NzNCMTFGMDgzMzZGNzVDQzRGOUFFMDIvN0Q3RUNCNzA0
ODA2MTFGMDhCNjE0MjEwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQApWP4MA0GCSqGSIb3DQEBCwUAA4IBAQBaim9M5DMr5yKJtr0hRTdy
HP8s2ykfCdlkInWoTQVHCUz1TZaDIAuTqLWRV369JVWbvirmR+2h5VDeGEBRzS5z
aSCPZ3XJzElNFH0qPf/jV0DvnNIxKp5vGRjulyLoyc8qUfCbI5RR8a1j/8njqYRS
pCzy0fhbnj0z1JGguN0lgyYTnG7JxJeWT8r68tXGxyhkg2TBArk9LPk8VJi8+lRy
1ouRQh2ImNmV0g6oTfhNOdJMNWt3ltJHDffnm0R301JimXDIsBHDf6qnrSgHIMV2
WhqOmkmYcsIo7gqihgbXMCZsGLaMWuJRYy1qRw9oQb2T8T0JPhaPFGm50XsMa4rc
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:48:55 2026 by rpki-client