Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/273A4FCA6ED311F0A3E54621C4F9AE02.roa
File:                     273A4FCA6ED311F0A3E54621C4F9AE02.roa (raw, json)
Hash identifier:          CurVvuFvGCChFnaVj7pMLSdnDalHV3wfc5Ysc9lNhe8=
Subject key identifier:   51:23:D8:9E:B5:9F:4E:80:09:6E:CD:7E:5D:DA:1B:6C:49:B9:2B:F9
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3091
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/273A4FCA6ED311F0A3E54621C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:15:08 +0000
ROA not before:           Mon 06 Jul 2026 16:15:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     132778
IP address blocks:        165.99.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12433 (0x3091)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:15:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd48c-52ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:80:6b:61:c4:bf:ae:6e:40:91:a5:37:4f:4c:
                    7a:4b:1d:18:ea:77:e1:f6:10:40:93:40:72:eb:07:
                    80:12:aa:7d:6c:89:5b:34:a8:28:54:6c:70:6e:f3:
                    ab:5f:47:f9:dd:47:36:a5:fe:0b:cf:e5:64:86:52:
                    40:68:50:bc:0a:0b:c2:d9:ee:e2:9c:4e:d7:85:4c:
                    00:3e:ef:fa:ae:b4:e0:0a:ed:de:fa:d7:92:17:39:
                    6f:5f:aa:e5:a0:f0:c7:fd:b2:28:fa:50:9b:44:9e:
                    13:6c:de:6d:2d:20:ae:03:62:78:13:d4:be:d8:6f:
                    d2:5f:fc:f2:89:70:b6:70:8d:1f:d1:e1:47:f7:c7:
                    24:b6:01:3b:6a:40:7b:46:56:09:7b:9f:83:aa:e1:
                    ba:6b:c0:e5:a1:79:32:53:00:bc:b6:e8:a4:27:50:
                    61:57:61:c4:a6:18:20:7a:8c:79:6b:d0:1c:46:39:
                    33:2c:d2:f9:3a:80:bc:b7:40:81:9a:50:17:93:4a:
                    8d:ef:aa:cc:82:f6:92:f5:31:65:7f:fe:7f:10:b2:
                    be:ca:48:44:17:e1:f5:25:36:30:30:c7:a8:47:f1:
                    9c:05:e4:c3:0f:fe:ac:9d:5b:32:11:52:53:5e:d8:
                    d7:cc:dc:4b:fd:1e:f9:90:cb:8d:10:96:93:5e:7d:
                    b0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:23:D8:9E:B5:9F:4E:80:09:6E:CD:7E:5D:DA:1B:6C:49:B9:2B:F9
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/273A4FCA6ED311F0A3E54621C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:33:50:8e:f2:de:d6:a9:5b:20:41:11:45:72:46:d5:61:4e:
         e5:f6:d4:75:b5:ba:d8:61:44:26:63:59:55:e4:58:ec:5f:4c:
         31:39:97:61:73:95:e3:41:50:fc:a9:c0:9c:ce:3b:32:fc:ed:
         52:08:ea:d7:e8:a7:85:56:b5:f8:af:71:5a:2f:46:1e:f8:56:
         54:54:4e:7a:5b:12:59:cc:3e:62:da:14:59:dc:c6:09:4b:05:
         67:3c:cc:ad:f2:fe:00:78:f1:c8:7c:1e:62:25:6d:66:5b:83:
         2b:df:06:ad:2b:8a:15:a6:8b:09:52:11:f3:15:df:bc:fd:88:
         26:cf:ed:d0:c2:26:f4:4f:4a:1a:d1:71:44:ae:73:8b:a6:13:
         f7:51:ea:2e:77:30:58:7a:9f:2f:ec:c0:37:dc:a3:8b:1f:4b:
         cb:e3:8f:44:25:19:a0:3a:13:98:c7:3d:9d:80:10:26:9f:4b:
         cb:60:dc:d7:28:c7:5c:a0:06:e2:03:af:59:06:9d:21:ba:5a:
         93:c6:92:2f:e3:24:b7:48:87:83:19:96:bf:ff:dd:fb:35:7c:
         c3:b0:fd:af:73:4d:ea:58:02:a7:6a:a6:84:ea:7b:43:d5:3d:
         57:e4:ec:94:5f:f1:70:54:46:f0:e2:d8:6c:51:96:20:7b:7c:
         ee:2a:88:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:26 2026 by rpki-client