Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/99877EC2907F11F0BC6C6638C4F9AE02.roa
File:                     99877EC2907F11F0BC6C6638C4F9AE02.roa (raw, json)
Hash identifier:          o9b9ESFEEs1aF7CtI2I05ihVAB7xr51kgDbfpMmNTlE=
Subject key identifier:   A0:E1:47:91:24:F1:0F:43:47:52:2C:08:B4:BF:BC:A6:9B:34:14:9E
Certificate issuer:       /CN=A91B13FE/serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D
Certificate serial:       42
Authority key identifier: 52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/99877EC2907F11F0BC6C6638C4F9AE02.roa
Signing time:             Wed 15 Oct 2025 14:03:29 +0000
ROA not before:           Wed 15 Oct 2025 14:03:29 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     154006
IP address blocks:        165.101.100.0/24 maxlen: 24
                          165.101.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl
                          rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 11:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B13FE, serialNumber=52A1C420D827C16CEAA04283DD28B640A315634D
        Validity
            Not Before: Oct 15 14:03:29 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68efa9b1-3d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fa:e7:d5:c4:16:7b:fa:5a:64:53:a1:43:77:
                    4a:ff:62:d6:31:01:8c:1b:20:35:0d:10:3f:18:68:
                    99:7d:7e:3c:71:5e:2e:88:87:da:11:c1:f1:25:1a:
                    9a:5a:92:fb:42:08:2f:89:89:d5:af:26:ee:5d:53:
                    a3:49:69:2c:eb:59:22:13:01:bf:f4:3b:ab:1e:eb:
                    b3:25:42:b6:85:0a:c6:31:e3:8d:0c:0e:5b:59:19:
                    e6:86:2d:ca:ef:ae:7b:90:bf:4a:7e:bc:6f:32:b2:
                    65:28:39:e9:7b:db:1a:82:c9:dc:cd:4d:c1:e1:1c:
                    d8:0c:ee:15:5a:bb:8e:23:99:c3:6a:43:d8:50:36:
                    55:70:a5:0b:4b:91:e9:07:1c:f0:dd:3a:0d:2e:f3:
                    55:19:48:61:c7:33:bd:51:cc:99:f3:61:93:71:9e:
                    f2:75:04:5f:e0:32:71:67:cc:3a:d1:20:09:e2:b9:
                    10:7f:da:a3:79:1d:81:35:40:51:c1:0d:2a:e1:91:
                    df:73:ef:96:58:4e:df:4a:df:94:28:a0:85:6f:59:
                    b8:31:db:91:36:25:12:6d:87:01:ea:8d:1c:f3:f8:
                    df:2d:df:5b:18:4c:0c:3b:a1:c7:a2:8a:ab:84:32:
                    51:e6:60:fb:b1:f1:93:49:3f:82:8f:ba:35:c5:ee:
                    76:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E1:47:91:24:F1:0F:43:47:52:2C:08:B4:BF:BC:A6:9B:34:14:9E
            X509v3 Authority Key Identifier:
                keyid:52:A1:C4:20:D8:27:C1:6C:EA:A0:42:83:DD:28:B6:40:A3:15:63:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/UqHEINgnwWzqoEKD3Si2QKMVY00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UqHEINgnwWzqoEKD3Si2QKMVY00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/8D8E22C2564311F0B1627A15C4F9AE02/99877EC2907F11F0BC6C6638C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:9d:7d:9c:50:21:d3:df:fd:d9:45:9e:23:9e:06:66:00:b2:
         48:e6:84:43:38:7c:09:be:6c:d9:33:31:7e:f3:0f:d5:86:f8:
         2c:55:a5:8b:8e:8e:4a:73:50:91:e8:e2:92:fb:54:0f:9b:74:
         e9:a8:18:3a:45:bd:08:3c:e6:3e:56:94:2b:b1:31:bb:5c:27:
         f0:10:e4:74:90:98:0a:74:97:94:11:66:8c:98:55:57:f9:8f:
         d1:5e:a0:5c:c9:75:f8:0c:3f:b9:79:6e:c1:77:74:d5:67:02:
         79:f1:23:c1:2f:b4:8c:c8:47:4e:8d:b4:9b:39:aa:43:1c:21:
         89:81:71:d6:40:8c:a7:3d:d8:1d:3b:00:6c:5d:5b:06:d6:b1:
         22:5c:e9:5f:bb:b1:c6:52:88:4c:6b:25:37:05:ea:0c:e4:18:
         ad:ec:b2:8c:03:d8:26:e0:8d:62:35:bf:90:65:6d:ed:ca:10:
         d8:a8:76:dd:63:bb:3f:d3:5c:b8:41:9f:8f:09:9c:3f:dd:37:
         c1:f6:ce:48:c6:7a:bf:d1:b8:72:27:0b:e5:18:a6:b1:fc:f0:
         71:c2:9c:23:06:03:2f:dc:49:d6:f3:2b:d2:36:3c:67:b4:96:
         d0:36:1d:84:d6:0c:2a:e8:09:38:e8:12:6c:e0:84:d7:d3:eb:
         04:08:99:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:09:19 2025 by rpki-client