Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa
File:                     00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa (raw, json)
Hash identifier:          VbbAYRDB1MrB+OHsle6cq0lEvb0Mg7dou4jfOd/d1WA=
Subject key identifier:   6F:A4:D3:8D:9E:61:4B:0D:66:85:03:E9:0E:11:EE:57:C9:B1:11:0B
Certificate issuer:       /CN=A91EC3C9/serialNumber=1784AF68CF76D997B99F774063780DB299B54A93
Certificate serial:       99
Authority key identifier: 17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:08:42 +0000
ROA not before:           Tue 27 May 2025 08:17:18 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     138575
IP address blocks:        165.99.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl
                          rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC3C9, serialNumber=1784AF68CF76D997B99F774063780DB299B54A93
        Validity
            Not Before: May 27 08:17:18 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3f409-d8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:90:f6:0b:a5:95:f5:66:a1:9b:0f:31:08:4c:
                    d2:dc:50:60:d1:e7:59:08:2e:ab:dd:4e:48:e5:fd:
                    29:5a:be:6c:55:0e:eb:ae:cb:8f:10:33:82:7f:cf:
                    f5:b0:b7:d5:26:55:e1:13:be:31:d8:95:fa:9d:d1:
                    06:3e:1a:f8:e3:64:0f:d8:68:89:0d:b4:f6:33:da:
                    05:0d:1e:fd:01:63:6d:f5:e2:d1:11:32:eb:e1:f6:
                    32:82:bf:f6:4d:c4:9c:68:91:68:ea:e3:dc:1c:84:
                    ee:cd:dc:4d:64:44:14:ed:2d:6a:34:5d:9b:6f:e6:
                    de:78:92:79:61:32:6f:35:af:7f:5e:fe:14:bc:82:
                    63:7f:4e:bf:bb:ea:84:6f:cc:a0:cf:9a:94:91:71:
                    9f:45:1c:77:dd:6a:14:0c:70:74:3f:20:af:26:44:
                    ef:ac:68:47:c5:f7:0b:e4:5d:a6:b5:d6:61:3f:a6:
                    82:ef:af:a2:9d:97:66:f1:34:5c:be:16:f3:b8:80:
                    2d:6e:de:48:2b:84:26:e0:07:69:54:01:51:3f:0e:
                    7d:56:5f:73:d7:e9:0c:f0:ef:97:2d:4c:ea:c5:b0:
                    29:91:9b:4a:89:e5:6a:3d:4e:f8:97:03:53:3e:82:
                    44:d4:13:4e:62:a7:d1:ff:93:21:95:e6:93:ac:22:
                    b1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A4:D3:8D:9E:61:4B:0D:66:85:03:E9:0E:11:EE:57:C9:B1:11:0B
            X509v3 Authority Key Identifier:
                keyid:17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:61:7a:e2:9e:b8:d7:d3:f4:28:63:98:a6:f6:fc:35:0a:bb:
         ce:bc:b4:84:c8:af:1a:c3:77:25:20:06:a9:3d:42:30:17:a7:
         10:0b:f2:4d:ba:54:38:68:1e:4b:c8:47:81:fc:65:96:c6:d4:
         11:f4:02:2d:34:44:8d:f1:ba:82:52:7a:66:ff:b4:1f:e3:14:
         06:15:8f:79:7f:15:5c:bd:0b:f8:70:46:eb:d9:a3:e9:67:5b:
         dd:69:72:4f:cb:6a:e9:9d:4f:4b:6e:22:95:fc:b2:d2:3a:05:
         5e:45:05:8c:d3:03:bf:8a:c9:52:fa:ea:91:71:a5:63:99:34:
         21:dd:2e:49:15:fb:d8:c4:61:1f:81:8b:c4:35:d3:cf:43:d9:
         0e:56:c8:33:d9:a0:cf:d5:07:9e:0a:6b:57:c5:e8:dc:fc:d8:
         75:6f:a9:56:7b:d0:09:96:69:91:ca:04:96:a0:c6:1a:2e:45:
         da:ef:9b:36:50:01:1d:ae:49:f2:52:b0:e6:d0:8f:75:5b:03:
         11:4d:a5:4c:ab:92:19:dc:39:dc:6a:c1:b6:26:df:8a:d9:29:
         1b:d4:3d:5d:f7:1d:5d:35:80:66:6d:d0:2f:74:22:82:ea:a8:
         39:54:8e:32:d4:1f:34:97:e4:fa:c0:56:e0:33:ea:70:ce:1e:
         80:7d:6d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:34:14 2026 by rpki-client