Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/F7277FE412D611F18C2C8EDD083D8C67.roa
File:                     F7277FE412D611F18C2C8EDD083D8C67.roa (raw, json)
Hash identifier:          +1nOu2fB0UfPOdtR/GPXBlUidaDISB7pkYEWMx17Nds=
Subject key identifier:   18:93:A2:DA:13:60:9C:33:89:17:BA:F9:6F:C5:C4:36:73:EA:70:4B
Certificate issuer:       /CN=A9196F7C/serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
Certificate serial:       5A
Authority key identifier: 6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/F7277FE412D611F18C2C8EDD083D8C67.roa
Signing time:             Thu 26 Feb 2026 05:49:51 +0000
ROA not before:           Thu 26 Feb 2026 05:49:50 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     7979
IP address blocks:        157.85.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.crl
                          rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:57:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196F7C, serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
        Validity
            Not Before: Feb 26 05:49:50 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=699fdefe-c1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:49:40:ac:0d:b0:f1:8b:97:86:12:f3:d6:7d:
                    86:62:71:5f:33:79:70:af:90:fb:31:70:03:c7:c2:
                    5f:d0:c8:be:b6:cf:76:5b:2f:04:54:6c:ee:f5:18:
                    e0:45:28:54:e9:de:80:f1:8e:65:af:5c:39:1d:36:
                    6e:6c:50:af:96:a4:9b:46:b6:c1:78:e7:4c:6a:b3:
                    c3:c4:e2:36:e7:47:ca:aa:24:d2:f3:7e:f1:ba:88:
                    01:24:c5:b8:b6:1b:92:eb:db:5a:0c:0e:b7:a0:27:
                    19:5a:3c:8d:fe:cc:45:09:94:b2:c3:fd:1b:a3:ff:
                    90:fe:43:0c:80:6c:51:bc:56:12:39:df:de:b0:ea:
                    dc:4b:cb:ce:3a:ea:b0:a9:5a:ac:d4:20:33:29:b2:
                    82:68:63:5c:ab:67:48:a0:95:7a:4b:a1:2d:e4:b5:
                    d0:b3:56:04:de:d4:a4:8c:e1:15:ce:d7:5c:75:09:
                    36:a3:9a:6b:9e:86:15:a0:42:2c:2e:57:9a:dd:d4:
                    c3:71:8d:9d:46:cc:d2:45:cf:99:ed:ec:c8:b4:94:
                    7f:e7:d1:ae:59:79:6b:f9:ba:7b:8d:46:bd:55:c6:
                    e5:d1:41:be:eb:f7:10:8a:d4:9b:c9:a1:c8:ab:7d:
                    50:ab:72:90:cd:86:4c:3a:ec:59:2e:5f:14:03:3b:
                    55:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:93:A2:DA:13:60:9C:33:89:17:BA:F9:6F:C5:C4:36:73:EA:70:4B
            X509v3 Authority Key Identifier:
                keyid:6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/F7277FE412D611F18C2C8EDD083D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:60:7b:72:7b:09:70:b3:48:9b:9f:c7:e5:ea:81:96:74:55:
         3d:c1:c0:b4:d2:6e:08:8c:08:bf:1d:6a:8f:7a:fc:73:dd:3a:
         34:0d:c4:fa:dc:cc:7d:16:3b:c7:99:1d:6b:cd:23:6b:27:22:
         59:49:c0:3e:ab:bf:fd:ce:7e:d5:cf:27:30:be:14:52:d5:68:
         7b:eb:95:23:1f:55:a1:1c:f8:9c:9a:86:2a:76:35:b6:94:bb:
         f7:97:b2:77:4d:37:eb:bc:24:5d:00:aa:9d:e6:4b:4d:f7:ed:
         37:a4:24:d9:03:aa:93:1f:75:84:82:96:91:d0:2c:51:fc:1d:
         ee:29:32:39:d7:33:da:81:ad:86:b9:cb:d5:13:38:24:c8:37:
         1a:a0:04:be:3c:4d:7d:3d:8c:35:9a:e5:de:85:ae:4d:2e:b4:
         e6:85:73:0e:16:b8:24:2e:5c:bb:98:d5:da:33:ce:09:5d:30:
         cd:c7:3e:f3:90:0d:52:ab:ef:78:4b:49:7a:b7:4d:05:85:62:
         87:c2:fd:8b:5d:a4:88:6d:75:f8:fd:fb:22:f5:a5:e0:3a:7e:
         2e:de:09:1d:fa:bf:2e:76:1e:b6:b7:68:34:3b:db:0e:58:9e:
         2b:33:32:ce:dd:2a:1a:27:88:87:5c:4b:39:e8:f1:40:9a:8e:
         de:10:5f:b8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:58:33 2026 by rpki-client