Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/6500BEB849E611F18B665F22B5833773.roa
File:                     6500BEB849E611F18B665F22B5833773.roa (raw, json)
Hash identifier:          oRJVDNNEq9yJM3kRWRLDOu8PzfoDFGvUq7nhvQCa5c4=
Subject key identifier:   48:67:74:F4:D8:D7:21:D0:2F:53:15:9E:7E:71:6D:80:3B:69:75:0E
Certificate issuer:       /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial:       099B
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/6500BEB849E611F18B665F22B5833773.roa
Signing time:             Wed 10 Jun 2026 21:24:31 +0000
ROA not before:           Wed 10 Jun 2026 21:24:30 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     36131
IP address blocks:        169.136.68.0/24 maxlen: 24
                          169.136.69.0/24 maxlen: 24
                          169.136.71.0/24 maxlen: 24
                          169.136.72.0/24 maxlen: 24
                          169.136.73.0/24 maxlen: 24
                          169.136.128.0/24 maxlen: 24
                          169.136.130.0/24 maxlen: 24
                          169.136.132.0/24 maxlen: 24
                          169.136.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
                          rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:30:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2459 (0x99b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
        Validity
            Not Before: Jun 10 21:24:30 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a29d60e-69fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ac:f5:05:1b:17:8b:62:33:c7:b7:9d:aa:cc:
                    6c:e9:58:11:0a:e3:99:1c:e8:d4:5c:43:25:81:1d:
                    f8:0d:2b:fe:fa:60:63:e8:dd:79:1c:16:46:07:2a:
                    5c:16:b8:31:fe:89:77:46:d2:cd:fb:9a:c3:02:b9:
                    81:9b:f5:c9:61:26:4e:8f:3d:35:eb:76:b4:c0:87:
                    de:94:55:aa:72:7a:3e:f6:41:8a:b5:d0:c8:cc:f2:
                    c2:71:61:13:47:6e:78:15:3a:48:45:39:81:32:5f:
                    b8:4d:b4:50:c1:7a:00:61:d3:7b:22:d6:fd:64:d1:
                    85:6b:05:23:32:a4:a4:4e:2d:5f:8c:2a:c8:15:0c:
                    14:5f:e5:61:26:08:3f:e6:8c:87:28:08:25:aa:3b:
                    b2:85:e5:58:7a:88:26:8c:eb:8a:0e:82:9f:6e:f3:
                    48:d0:0d:90:45:e4:5d:f7:57:0f:97:50:a1:f9:cb:
                    f8:5b:f8:98:50:e3:d9:01:6a:cc:3f:25:ed:39:a2:
                    e0:9b:09:0c:51:30:b2:4e:c5:85:cc:24:f4:ee:10:
                    c5:96:93:1e:7f:7d:1e:02:82:cc:5b:e6:56:83:d9:
                    e4:d4:98:17:df:e9:b6:e8:bc:5c:35:71:fb:ca:38:
                    0e:be:f6:96:d7:76:03:52:3e:b5:d6:55:3b:82:98:
                    66:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:67:74:F4:D8:D7:21:D0:2F:53:15:9E:7E:71:6D:80:3B:69:75:0E
            X509v3 Authority Key Identifier:
                keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/6500BEB849E611F18B665F22B5833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.136.68.0/23
                  169.136.71.0-169.136.73.255
                  169.136.128.0/24
                  169.136.130.0/24
                  169.136.132.0/24
                  169.136.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:9d:b0:58:09:fb:bf:55:d5:17:71:1b:c5:58:9c:68:67:49:
         25:21:6c:bf:56:b3:5c:36:a5:2d:5e:d7:55:6c:31:5f:1f:b5:
         15:47:85:ec:dc:5b:d3:1c:f4:bb:c6:96:c8:14:9b:42:6f:87:
         fb:65:51:a2:a4:d3:40:86:a0:91:bf:48:70:9a:22:b7:e1:25:
         a4:0e:86:88:a1:7c:29:95:7a:a1:24:0b:20:f8:27:b2:25:08:
         7f:d7:8d:61:02:24:b6:67:3e:c0:66:84:14:fe:be:4a:68:12:
         66:07:d0:51:e5:47:7a:98:0a:01:b7:90:2f:97:41:05:74:e1:
         e8:9f:d0:28:b7:79:0a:07:f3:04:7a:25:4f:fe:70:27:4c:0e:
         a4:b9:c0:90:67:45:10:58:15:6c:a3:68:68:af:cb:4f:2b:5e:
         36:d2:df:4b:ee:54:ef:bf:87:27:84:36:5b:02:70:54:ce:6f:
         16:df:55:98:aa:a9:c5:6b:cc:b2:83:58:92:60:07:c7:71:4d:
         71:08:e5:d0:79:4c:d8:7b:cb:ee:ee:4a:40:1e:c7:66:ad:aa:
         03:ac:7a:31:c4:a0:be:c8:25:d6:ee:3d:c1:47:58:32:6c:40:
         a5:ec:76:2a:52:58:04:f3:26:27:34:3c:57:26:6f:ba:dc:38:
         19:26:22:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:41:52 2026 by rpki-client