Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/99D18D463C0211EAA729693AC4F9AE02.roa
File:                     99D18D463C0211EAA729693AC4F9AE02.roa (raw, json)
Hash identifier:          pY4SgLNpyM0+cwXTwD+6IYLZcZpbBnG7S77SqpO3y6Q=
Subject key identifier:   35:83:7A:40:25:CE:15:8F:51:38:7C:51:08:31:AC:99:57:BB:51:35
Certificate issuer:       /CN=A91971CB/serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
Certificate serial:       0C01
Authority key identifier: 7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/99D18D463C0211EAA729693AC4F9AE02.roa
Signing time:             Mon 02 Feb 2026 15:12:06 +0000
ROA not before:           Mon 02 Feb 2026 15:12:06 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     56038
IP address blocks:        137.83.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl
                          rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 15:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3073 (0xc01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91971CB, serialNumber=7D045165B29A68AFCB8BA81599CE30674544FD8F
        Validity
            Not Before: Feb  2 15:12:06 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6980bec6-7e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:43:dc:84:84:9a:68:83:0a:39:bd:be:47:12:
                    a0:d5:af:de:48:d6:93:74:7a:ef:9c:1a:c1:e8:1b:
                    59:55:f1:d9:c2:e8:b2:ae:4e:50:fd:cc:d5:6b:56:
                    15:3a:4b:32:de:8f:31:05:12:e0:17:b7:5d:38:76:
                    9a:72:79:2f:62:bf:b0:5c:10:6f:32:23:7c:11:36:
                    66:3e:7a:21:fb:2c:04:11:52:5e:de:bc:5b:96:9d:
                    8b:d8:53:db:34:04:b4:56:9b:97:19:84:53:f0:05:
                    a5:2b:b6:3d:3e:07:84:ce:64:c7:69:69:1f:38:31:
                    cf:b1:77:11:fe:8d:b1:bd:8f:53:37:8c:36:38:9d:
                    fd:b6:89:d7:18:1f:d6:f5:1a:75:fd:50:5c:1f:51:
                    fa:0c:a8:44:ec:5d:26:d5:5e:6c:e2:62:c9:88:73:
                    f6:d7:c1:d0:de:92:9e:57:4d:09:be:e7:2b:67:7d:
                    de:43:c4:72:12:f9:f5:55:93:c0:54:98:2e:2b:7f:
                    f5:f0:9e:7b:4a:35:80:0f:de:d1:04:35:7d:ee:b6:
                    da:14:8c:da:a9:26:ab:55:07:22:24:26:9b:c5:57:
                    16:18:6e:7c:2b:91:30:61:7c:73:3a:c5:9d:58:25:
                    cf:ed:cf:9c:b8:38:a7:9c:1b:98:86:c2:5d:d4:46:
                    6d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:83:7A:40:25:CE:15:8F:51:38:7C:51:08:31:AC:99:57:BB:51:35
            X509v3 Authority Key Identifier:
                keyid:7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/99D18D463C0211EAA729693AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:a2:22:9b:55:7e:bd:7b:85:6e:d2:eb:b1:d5:d0:57:15:46:
         6e:f7:b1:39:14:d4:ee:c2:a6:63:a1:8c:55:a4:30:ab:18:da:
         2f:97:4b:6f:58:9c:2b:05:b4:a1:94:07:65:6c:20:8f:19:1d:
         4a:93:e9:14:b8:e8:66:14:2a:1e:63:1c:b6:ed:7a:f6:d1:5d:
         da:66:06:89:94:34:23:2b:53:26:88:84:75:ab:03:82:c6:92:
         01:13:ce:40:6e:be:bf:42:f5:23:d2:92:3c:bf:e2:fb:dc:c8:
         15:c4:07:3f:81:28:f1:62:3c:05:4e:0a:57:8e:2c:31:69:e9:
         40:0a:7b:d2:d2:48:9c:19:95:b3:df:64:8c:c6:cd:a8:1f:a4:
         2d:07:b1:5e:56:09:b5:cc:ef:ab:d3:b1:91:cd:1e:bd:d9:6e:
         a9:ff:35:8c:a9:05:59:ce:a3:c2:1f:dd:f5:0f:bd:cd:5b:fd:
         06:71:2a:69:48:da:7e:27:85:b6:bf:91:50:4d:48:36:35:e9:
         43:13:47:19:eb:9d:e4:ae:ba:0a:4f:0d:d6:d6:0c:65:cb:89:
         4e:69:03:d5:11:bf:97:a7:30:95:e1:e7:b3:fa:62:d2:02:f0:
         cb:30:3b:4f:95:8d:16:5f:de:a2:c4:9b:36:f7:05:5b:fc:cc:
         c0:51:f6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:45:36 2026 by rpki-client