Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/F7277FE412D611F18C2C8EDD083D8C67.roa
File:                     F7277FE412D611F18C2C8EDD083D8C67.roa (raw, json)
Hash identifier:          ABnkDNpIA+QVePwJWCXREVMCvxrDTvxpKv7NgGh++D8=
Subject key identifier:   91:15:A1:E3:93:C7:09:FD:31:67:9D:6B:58:CF:6E:31:28:BB:86:C4
Certificate issuer:       /CN=A9196F7C/serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
Certificate serial:       60
Authority key identifier: 6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/F7277FE412D611F18C2C8EDD083D8C67.roa
Signing time:             Sun 01 Mar 2026 13:09:00 +0000
ROA not before:           Thu 26 Feb 2026 05:49:50 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     7979
IP address blocks:        157.85.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.crl
                          rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 04:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196F7C, serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
        Validity
            Not Before: Feb 26 05:49:50 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a43a6b-d6fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:67:fb:70:22:3d:56:c4:a5:88:86:c2:2f:d8:
                    18:90:dd:f6:c4:8d:2f:38:0a:b9:24:a9:a6:6b:4a:
                    b3:a3:24:e5:ab:b6:52:56:9b:18:c4:c2:1f:3f:d7:
                    33:db:be:62:41:bd:fc:a6:b8:92:b9:8e:2e:d7:d3:
                    33:19:3d:21:6d:4d:cc:aa:b8:a4:89:fa:9e:44:55:
                    7b:73:fa:87:75:76:36:61:41:e6:7b:7e:5f:7d:92:
                    2b:c2:59:08:28:ce:db:75:28:1d:83:d3:3c:39:67:
                    07:a4:a0:8a:21:f9:69:b3:f9:4c:54:35:08:1c:9e:
                    3b:e0:e4:c6:16:d5:95:dc:f5:cf:e9:48:8a:76:d8:
                    c7:20:57:ae:96:2d:0f:34:49:3c:c9:50:aa:c1:71:
                    fe:91:c5:fa:05:3d:65:52:c9:3f:09:e9:6f:fd:69:
                    59:50:fa:94:cf:01:09:6a:6d:af:1a:5d:d4:3b:2e:
                    a3:c7:d9:c8:b4:0f:54:68:2d:a1:be:8d:a2:2c:bd:
                    c6:08:70:88:82:28:28:54:e2:2e:fc:5e:b0:f5:0f:
                    97:da:8e:8f:32:3f:79:9a:34:af:bd:d2:b3:e7:0f:
                    3e:fb:ee:83:14:9e:cb:ec:19:d2:a4:a7:9b:96:08:
                    8a:73:d0:39:63:0e:b7:99:14:ca:75:e5:21:a2:8f:
                    5d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:15:A1:E3:93:C7:09:FD:31:67:9D:6B:58:CF:6E:31:28:BB:86:C4
            X509v3 Authority Key Identifier:
                keyid:6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/F7277FE412D611F18C2C8EDD083D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:66:e0:71:9e:56:cc:8f:1b:87:e6:51:54:61:ff:7b:ee:6c:
         a5:7d:32:c2:b5:9e:5b:11:bc:18:4d:0f:ef:6d:7d:42:c2:6e:
         66:9a:11:a4:a9:c3:5b:9d:07:de:36:af:58:ee:0d:83:a0:58:
         1a:cc:b3:79:90:34:1f:35:e5:6b:ea:d4:58:2b:ee:5e:d1:ac:
         b0:60:0a:64:6f:35:29:6f:11:6d:c8:92:6a:ec:2f:1c:31:ed:
         ec:f2:36:78:68:e7:b4:35:81:56:ff:18:78:b5:ad:00:1c:bd:
         fc:e4:51:cd:39:34:7e:79:a9:8b:40:04:c3:f6:68:64:fb:95:
         25:77:b3:85:be:a6:a0:ea:31:29:c6:69:a8:5e:9c:d4:d3:12:
         6b:9e:64:8e:c0:12:c5:66:0a:b7:13:7f:03:b3:fe:53:b7:bf:
         94:07:5f:6c:fc:59:aa:be:57:f3:62:14:c5:28:33:0f:15:be:
         f0:19:ae:00:50:43:c1:b5:48:b3:72:e2:ea:7a:e9:87:f3:fc:
         d5:ac:93:5c:6c:5d:09:80:02:02:d9:c2:22:3c:c7:ad:c6:54:
         9d:ae:3f:9e:5a:78:8b:11:3e:c6:2b:86:90:f6:86:3a:49:d9:
         1a:af:ed:ea:c6:eb:4f:ad:56:f0:eb:88:ae:35:ed:2e:dd:a8:
         9f:18:6c:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 4 09:52:53 2026 by rpki-client