Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/29CA404A3B0D11F18EE2601DA2833773.roa
File:                     29CA404A3B0D11F18EE2601DA2833773.roa (raw, json)
Hash identifier:          SEQeKAJZ47ssFRvOtGo19kLELwxUiKXiWbmguFVl+b4=
Subject key identifier:   E2:B8:A6:8D:EB:04:DE:31:F9:03:1A:BD:15:FF:68:3F:9A:9E:6C:05
Certificate issuer:       /CN=A91E3E80/serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
Certificate serial:       DB
Authority key identifier: 9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/29CA404A3B0D11F18EE2601DA2833773.roa
Signing time:             Fri 31 Jul 2026 08:56:38 +0000
ROA not before:           Fri 31 Jul 2026 08:56:38 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     56264
IP address blocks:        165.99.196.0/24 maxlen: 24
                          165.99.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl
                          rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Aug 2026 00:23:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3E80, serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939
        Validity
            Not Before: Jul 31 08:56:38 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a6c6346-ae97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ee:9a:72:4e:e5:bd:d3:bd:38:f2:17:0d:9a:
                    3f:af:f5:f7:6e:13:77:37:db:77:d5:f2:68:b1:04:
                    eb:48:7c:08:83:79:cb:2a:29:91:c0:d5:89:ac:57:
                    d2:65:f2:c2:bb:a0:1b:bb:a3:83:5c:b2:4a:b2:e7:
                    4c:50:4e:50:6b:89:4b:2a:5d:ce:37:ff:de:19:f1:
                    d0:85:23:a2:18:8c:ab:eb:59:8a:80:f2:e8:4f:8d:
                    e6:fe:24:77:1b:97:31:b8:15:34:97:53:87:67:d5:
                    a2:79:64:e6:9b:58:65:fd:3f:c4:55:95:8e:91:fd:
                    fb:0f:f0:ed:af:d9:d2:9f:aa:39:64:5b:df:56:14:
                    28:bb:d7:ac:d7:f4:80:e4:96:63:32:d8:09:21:8c:
                    47:60:74:14:49:43:9f:0b:8b:92:b6:c2:df:34:15:
                    94:85:7a:5f:2b:c5:95:59:e8:40:13:eb:0a:2e:c9:
                    cc:58:9a:ce:0e:41:6d:5b:98:03:8a:b1:ed:2f:90:
                    83:a8:6c:b7:6e:66:68:69:cc:b8:41:6e:c0:20:82:
                    03:b8:8f:36:96:92:62:92:9b:6b:3d:72:a7:34:e5:
                    26:ef:77:c2:d3:f5:ae:6c:41:e4:cd:05:5b:7f:4d:
                    26:0c:7a:41:9f:62:57:bc:45:56:d5:18:24:f5:38:
                    02:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B8:A6:8D:EB:04:DE:31:F9:03:1A:BD:15:FF:68:3F:9A:9E:6C:05
            X509v3 Authority Key Identifier:
                keyid:9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/29CA404A3B0D11F18EE2601DA2833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:a4:8e:e5:f8:12:6e:1a:ba:60:14:42:81:71:0d:38:3b:ae:
         06:30:4a:25:f7:4e:3f:47:d7:43:5c:73:57:43:0b:0d:75:da:
         74:f8:9c:f4:d8:98:6d:c8:7c:e4:1b:69:26:45:1d:1a:de:c7:
         05:df:76:06:4f:8c:c4:55:39:ab:75:90:e1:97:89:61:47:02:
         a4:73:67:37:e9:82:7d:77:d3:d8:1c:ee:3e:03:da:ac:03:40:
         30:22:17:aa:58:72:94:2a:d5:75:f4:70:54:d6:09:47:9e:94:
         1d:d2:b2:a5:7e:11:0d:66:9b:30:d9:3e:bf:a3:53:87:ce:fe:
         e5:75:d8:e6:c2:d9:b2:e1:57:f6:f5:b0:6a:69:c4:70:6f:d5:
         08:61:62:c8:26:5b:33:52:9b:0c:fe:15:8f:13:cc:fe:50:27:
         86:2e:21:a7:01:f0:48:c1:95:d2:bd:e1:51:58:0c:a1:90:d0:
         03:56:28:4c:aa:aa:7e:9f:56:3f:92:b6:13:e6:95:47:7d:b0:
         f3:52:8a:a2:7a:06:a1:68:a1:0a:96:87:a7:73:64:ed:1a:a1:
         53:ad:ad:2b:a3:42:69:c0:53:83:22:dc:32:96:0f:4f:c0:32:
         38:08:40:e7:cc:bd:70:4e:e3:6b:d0:e4:36:2f:7d:7b:b3:79:
         00:fc:c3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 00:11:09 2026 by rpki-client