Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/29CA404A3B0D11F18EE2601DA2833773.roa
File:                     29CA404A3B0D11F18EE2601DA2833773.roa (raw, json)
Hash identifier:          Jzax6E6Sfv6INltxB8Hf3ktPyBHc/bZL9WLenaL6FpM=
Subject key identifier:   A1:EB:CD:42:5D:CF:3C:3D:85:51:00:89:EE:B1:48:94:78:58:0A:65
Certificate issuer:       /CN=A91E3E80/serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
Certificate serial:       A4
Authority key identifier: 9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/29CA404A3B0D11F18EE2601DA2833773.roa
Signing time:             Sat 18 Apr 2026 09:58:35 +0000
ROA not before:           Sat 18 Apr 2026 09:58:35 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     56264
IP address blocks:        165.99.196.0/24 maxlen: 24
                          165.99.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl
                          rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 09:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3E80, serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
        Validity
            Not Before: Apr 18 09:58:35 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69e355cb-21b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:24:65:d7:78:f5:6e:e9:e9:6a:f9:70:9b:d9:
                    7a:94:f7:c2:35:56:c6:e8:44:82:01:1a:04:19:d2:
                    a0:01:a2:0e:07:b1:e4:b1:96:f6:ad:98:05:fc:cd:
                    2f:1e:cd:30:f6:9d:de:fc:6e:85:a8:ee:c3:6b:52:
                    25:5a:20:f4:1f:f5:66:f1:55:0a:91:e8:69:ff:da:
                    4f:47:fb:ae:f9:bf:29:6e:5d:d8:2d:3a:36:79:cc:
                    fd:5c:f7:26:74:4a:ff:8a:b7:17:f3:03:04:0e:d4:
                    ad:4d:50:d8:ab:8c:66:3e:d3:fc:8a:4b:b4:bb:c2:
                    2c:4c:35:bc:f5:1e:8f:66:6a:d1:f4:d8:1b:da:bc:
                    65:a8:95:ea:38:5b:09:81:d2:e7:1c:50:2b:8e:28:
                    8e:d3:0a:e0:17:3a:5c:e3:e1:a9:a5:98:b3:79:c2:
                    49:ae:70:1d:3e:22:e5:34:00:e7:17:2f:55:8d:d8:
                    2e:cf:6d:8e:dd:03:b9:57:f7:39:f1:38:f0:6a:c5:
                    d6:00:e2:34:58:01:ce:0a:c1:5d:10:5c:6b:56:5e:
                    89:ef:54:87:4d:ad:0d:ad:27:0b:0a:43:08:cc:f8:
                    66:5e:83:95:85:48:00:01:c5:2c:18:e9:63:6b:f0:
                    e6:cd:ba:94:ae:0b:1a:21:3e:03:a0:a0:67:e3:3f:
                    7b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EB:CD:42:5D:CF:3C:3D:85:51:00:89:EE:B1:48:94:78:58:0A:65
            X509v3 Authority Key Identifier:
                keyid:9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/29CA404A3B0D11F18EE2601DA2833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:49:94:af:97:dc:0c:5a:27:73:6c:87:7a:0b:7e:66:ad:ab:
         13:d1:f4:4f:31:17:c3:15:ad:7e:78:a1:1b:22:52:0e:ef:b6:
         e4:6d:ed:6d:8b:8b:cb:1a:b9:fb:21:b7:28:52:f7:ea:a8:de:
         b0:df:08:92:1e:8a:8e:30:c3:ba:b4:1c:a0:fd:4c:37:f9:0e:
         87:cd:dc:0a:cf:f8:bd:36:6b:db:29:f4:11:f6:bd:d4:51:4b:
         62:35:83:e3:eb:b7:c7:75:6d:a8:86:db:bd:0b:8a:67:f9:61:
         0d:4b:e3:bf:71:ec:ba:6b:48:57:11:6c:f5:fb:48:f0:4b:6a:
         2e:c1:25:22:f2:65:2d:aa:98:26:4e:06:9f:3d:b0:1b:8e:5f:
         bd:6c:cc:5a:2c:52:b9:e3:9e:d1:aa:83:48:27:ca:58:2d:89:
         f7:e9:02:57:b4:0c:cf:56:3a:63:da:40:39:08:35:80:f2:62:
         1d:a9:25:d2:d2:1d:04:ce:e2:d4:42:00:7b:10:1a:77:a3:ab:
         4e:e2:de:ff:6f:2d:2e:39:12:bf:0e:39:45:82:16:e3:96:fb:
         55:1b:5a:9e:f5:f8:79:16:6a:80:11:a2:b3:38:9b:b6:33:a5:
         84:bf:df:06:43:be:3a:b7:5d:7d:5b:e5:46:49:52:fb:a0:7e:
         a1:8b:68:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 22:17:00 2026 by rpki-client