Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/51E2DA3C032811F1B93270B91D3D8C67.roa
File:                     51E2DA3C032811F1B93270B91D3D8C67.roa (raw, json)
Hash identifier:          ZdHxlT3OqwPC+xGI71Ljv6ozI4riSBo2nvgbAgHx1Rg=
Subject key identifier:   1E:F0:45:B0:C9:5F:C2:34:E6:86:F1:0E:1E:DD:44:34:D3:D5:23:E8
Certificate issuer:       /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
Certificate serial:       C6
Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/51E2DA3C032811F1B93270B91D3D8C67.roa
Signing time:             Fri 15 May 2026 07:43:45 +0000
ROA not before:           Fri 15 May 2026 07:43:45 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     131471
IP address blocks:        165.99.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl
                          rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 09:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
        Validity
            Not Before: May 15 07:43:45 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a06ceb1-5e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:99:d2:a7:c5:61:aa:f6:29:6d:6a:33:e4:5e:
                    e0:89:c5:89:42:c2:ba:d9:33:a6:b4:8e:cb:f5:67:
                    b1:4b:a2:76:5a:01:f3:a0:6c:24:f3:88:e5:b7:f3:
                    2a:57:23:ed:cf:84:66:fb:96:ae:ea:bf:8c:4f:8e:
                    c6:5a:ce:f3:58:2d:66:bd:09:fe:3f:d6:6a:66:d2:
                    be:f5:04:0f:6b:3d:33:02:a2:99:12:4f:3f:a5:31:
                    cb:ab:89:83:7f:b8:4f:54:03:45:69:a4:eb:3b:a8:
                    cc:fa:ba:de:50:85:6d:7a:f1:5e:11:61:79:9c:ca:
                    b2:a6:2b:48:a1:00:15:0d:36:0e:e4:ca:c8:3b:a9:
                    4a:2c:de:67:98:04:8b:09:a0:93:29:22:6b:c8:b0:
                    de:8b:1a:d9:1c:ac:c7:da:8c:4b:68:1a:68:81:6c:
                    00:e4:f3:10:fa:ec:38:e4:ec:23:01:29:b8:f2:62:
                    b3:b2:f9:0a:5c:58:dd:1d:d2:fe:db:10:32:bf:f2:
                    3e:68:60:bf:ab:c6:4b:40:68:33:c2:e5:f6:bd:e5:
                    f2:bc:12:49:4f:03:47:7d:38:19:43:25:ae:87:c0:
                    98:de:91:28:60:44:ec:f5:2b:ea:bc:a8:62:0b:d9:
                    13:f3:46:e2:eb:6b:75:0a:07:56:37:4f:1b:7c:aa:
                    60:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F0:45:B0:C9:5F:C2:34:E6:86:F1:0E:1E:DD:44:34:D3:D5:23:E8
            X509v3 Authority Key Identifier:
                keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/51E2DA3C032811F1B93270B91D3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:be:9e:11:0d:e4:9a:6d:6f:00:30:6e:bf:d8:5e:92:1c:cb:
         d1:ac:29:c1:30:4c:8e:49:11:86:2d:39:8a:b9:9c:39:ba:c2:
         31:e3:f2:7c:1d:8c:fa:10:06:9b:21:32:44:d7:5e:f5:70:53:
         75:55:ee:ca:eb:a8:9e:09:88:ea:8e:fa:0c:d0:02:85:9a:1f:
         26:b9:6c:a5:a6:96:0e:e9:f4:33:68:ba:1c:23:89:39:37:10:
         f5:25:5b:87:f3:f5:e1:17:96:c3:3a:97:60:b5:04:a5:e7:ee:
         9b:d9:e9:15:72:56:21:14:52:74:71:81:38:fb:04:61:d5:81:
         2a:c2:8b:30:df:32:13:37:b7:cb:a2:76:9e:45:34:34:34:ce:
         41:fa:42:d6:e4:37:89:f8:bd:85:49:7a:2c:b2:b1:2c:6b:0d:
         eb:69:c5:fa:6f:1c:73:eb:cb:fb:f7:99:9d:38:7b:96:1c:38:
         e8:12:cf:8d:a1:5e:7a:7e:2e:8c:61:eb:bd:7f:91:b0:9f:96:
         03:dd:44:d2:03:f3:37:bb:22:7c:e6:fe:64:bd:fa:29:d5:0f:
         45:95:cb:71:3c:09:ff:18:5e:55:a6:cd:85:a6:22:9c:62:69:
         2b:2c:16:4a:93:3e:ae:d8:8d:ee:a8:47:7e:a1:95:ce:92:19:
         c6:35:cc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 14:42:07 2026 by rpki-client