Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9DB1FB565EA511EFBA70FD68C4F9AE02.roa
File:                     9DB1FB565EA511EFBA70FD68C4F9AE02.roa (raw, json)
Hash identifier:          65XWf2ICyot2hiO2LgcHuRKF3Gi9BMxT6EzYSw7Gng4=
Subject key identifier:   32:30:CE:03:E1:5C:D5:6E:1E:C5:3D:D8:50:13:7B:95:BB:3F:54:43
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       02B5
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9DB1FB565EA511EFBA70FD68C4F9AE02.roa
Signing time:             Mon 22 Jun 2026 06:32:46 +0000
ROA not before:           Mon 22 Jun 2026 06:32:46 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     152915
IP address blocks:        83.118.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 03:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 693 (0x2b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Jun 22 06:32:46 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a38d70e-8a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:11:df:12:17:45:5b:16:97:17:c1:de:84:c7:
                    25:f0:29:fa:01:06:77:39:4e:b2:d6:98:1c:51:f5:
                    82:51:4b:ee:f2:ee:1a:3b:8e:03:f8:de:5a:c3:97:
                    34:49:87:1d:f6:4d:17:67:ae:60:98:9a:f0:b6:d8:
                    9f:a4:f0:04:7a:06:ad:e4:1a:53:5a:61:3b:1e:63:
                    65:37:dc:36:b8:7e:2e:d4:c6:5a:5f:96:cf:1f:d2:
                    ff:5c:70:f0:d8:b9:01:2b:16:a2:87:e2:d8:54:25:
                    a7:dc:71:3c:47:fc:6c:2e:38:62:a1:8d:74:cb:ed:
                    09:e9:ef:8d:58:c9:6d:68:87:b8:d7:fe:5e:f8:f3:
                    c4:65:73:73:c7:67:1f:f9:f4:23:db:c3:8f:bf:cf:
                    a1:17:17:09:f5:10:c5:5b:ec:82:4e:94:6b:b3:bb:
                    08:66:43:e3:fe:82:db:b2:19:c8:3b:19:63:8f:dd:
                    da:9f:8a:05:fe:9c:3e:15:07:ab:52:32:81:68:20:
                    c6:79:3d:51:03:8a:75:00:52:ab:e3:81:e9:6a:aa:
                    0d:e3:02:33:10:b3:71:78:50:39:c1:1d:14:40:07:
                    2e:31:50:d4:2d:36:ea:d7:9a:9f:cd:04:17:5d:e7:
                    98:44:07:e3:50:51:4e:27:49:f5:d8:e0:23:68:83:
                    ae:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:30:CE:03:E1:5C:D5:6E:1E:C5:3D:D8:50:13:7B:95:BB:3F:54:43
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/9DB1FB565EA511EFBA70FD68C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.118.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:34:a1:42:a0:6f:5b:f6:67:e8:d5:9e:22:80:59:9f:fc:1d:
         1b:4e:6c:88:84:1b:87:de:f0:0c:79:4d:ed:21:91:b8:91:49:
         33:d0:13:ab:d7:97:46:55:13:5a:a1:75:37:f4:4e:54:a5:a2:
         97:37:19:ff:e2:c1:38:cf:7e:66:3d:f0:43:00:e3:54:29:df:
         18:fc:3b:f5:ce:a6:08:5c:bb:2a:0e:5d:68:8f:df:ed:eb:91:
         af:9a:cf:1c:cd:2d:28:20:65:4e:0a:9e:ad:d8:18:c8:53:fd:
         73:ba:ab:01:fb:47:99:7c:e4:cb:06:a9:21:14:88:77:c4:c3:
         52:63:ba:94:c1:39:28:e6:12:61:79:68:44:b8:0d:05:01:23:
         f6:ee:e3:0f:d1:85:16:29:f7:a4:55:72:ad:7c:46:48:f7:e8:
         fc:65:fb:08:89:7a:f1:dd:80:15:52:78:0e:7c:a8:f6:43:8c:
         f0:27:41:62:b4:b6:4b:0c:22:a6:97:0f:b1:fb:f8:26:2d:82:
         5d:3a:fe:6d:ea:8a:9c:44:e7:a8:0e:dd:a0:8e:d4:f4:6f:29:
         04:a8:3a:f5:ef:59:7e:0c:08:58:43:e5:e2:e5:71:4d:8d:83:
         b8:53:df:e0:96:b1:c6:06:f7:06:a2:a2:39:8c:d8:89:5b:f3:
         ee:c8:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:22:23 2026 by rpki-client