Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/CE1C73F63F8211F1AB237298B0833773.roa
File:                     CE1C73F63F8211F1AB237298B0833773.roa (raw, json)
Hash identifier:          0E3rcn/AMOWR95yzSBcRzzQYaugTtSGyakdzbiglBbk=
Subject key identifier:   7D:4A:C6:4B:3E:A8:31:43:FB:4A:CD:CA:09:20:E4:37:C4:5D:D7:73
Certificate issuer:       /CN=A91EBBAF/serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
Certificate serial:       C7
Authority key identifier: D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/CE1C73F63F8211F1AB237298B0833773.roa
Signing time:             Tue 26 May 2026 13:22:03 +0000
ROA not before:           Tue 26 May 2026 13:22:03 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     153885
IP address blocks:        165.99.60.0/24 maxlen: 24
                          165.99.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl
                          rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBBAF, serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
        Validity
            Not Before: May 26 13:22:03 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6a159e7b-d8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c7:6f:4e:3f:21:9a:a8:90:50:09:8d:e8:e6:
                    a9:47:da:c3:25:f0:9d:16:b7:8c:06:cf:c6:e2:36:
                    81:d1:2e:5f:4f:34:27:f9:fc:be:14:20:6b:f8:58:
                    2a:59:dd:ce:1e:4a:56:69:77:9c:7c:9d:48:22:a6:
                    2f:34:25:2d:80:6d:4d:38:33:59:ca:21:64:3d:71:
                    32:85:7f:3b:9c:9c:69:02:75:b5:55:27:61:9b:71:
                    24:6d:9a:da:e5:82:03:1b:74:36:32:66:d5:68:91:
                    b3:75:d2:8e:cd:ab:3b:b3:93:53:ce:ba:fe:f2:c0:
                    54:2d:13:e4:9c:63:cc:c2:e7:2c:23:22:40:ef:fc:
                    8d:76:c4:b1:e9:45:72:02:31:cc:ce:fc:79:48:ca:
                    49:2a:c7:1b:4a:d8:ce:ad:cd:75:a6:2b:97:f5:29:
                    37:d8:0d:84:49:83:f3:f3:2a:1e:1d:40:7d:57:e0:
                    73:07:69:72:a9:dc:db:5f:5c:92:40:f6:96:ee:51:
                    7f:be:4e:04:f3:82:fe:fc:ef:94:49:4a:71:e3:7d:
                    7c:39:d3:71:2e:ec:c9:fd:c7:fc:54:35:fa:e7:84:
                    4e:f8:94:d6:25:c7:0e:41:0f:9d:66:f8:ba:ee:db:
                    2c:93:1f:ea:15:74:28:aa:f6:d2:67:1d:20:c9:16:
                    c0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4A:C6:4B:3E:A8:31:43:FB:4A:CD:CA:09:20:E4:37:C4:5D:D7:73
            X509v3 Authority Key Identifier:
                keyid:D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/CE1C73F63F8211F1AB237298B0833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:6f:4e:62:d4:ee:24:41:60:86:13:66:4f:27:3b:1c:0a:a7:
         46:cb:61:30:7c:cd:d0:9a:9b:54:3e:57:0a:ea:5f:82:c6:8a:
         c2:85:23:10:0b:76:0a:37:6d:e7:b5:e6:ef:66:b9:85:db:98:
         19:db:b0:77:97:d2:05:35:2a:a1:f2:78:c3:87:83:fe:20:4c:
         7d:36:c3:38:1f:1f:2e:1b:e4:e0:31:79:6c:bd:48:51:d1:ff:
         07:20:b6:dc:31:1b:59:19:5a:ec:e9:47:ca:4a:4b:93:e9:d5:
         93:b0:9e:40:b9:6c:f9:da:5f:42:ce:c8:0a:66:5d:43:b0:1b:
         f8:bf:4f:9c:e5:58:17:38:5b:e9:6c:aa:df:21:d6:a6:59:64:
         d3:cb:81:19:4e:79:55:40:64:bf:61:47:a1:f4:6c:6d:77:33:
         be:7c:7e:4e:81:bd:cf:d6:bb:f7:5a:08:f4:86:51:7c:6c:1e:
         d5:69:fa:c3:18:c9:67:55:6c:26:a4:e7:ec:2b:1e:60:51:f1:
         b0:39:13:e2:d0:85:5b:d8:5d:de:4e:21:5c:49:85:90:bf:68:
         e6:34:fe:2b:38:42:30:01:c4:2c:3e:9e:86:77:33:04:dd:b2:
         67:65:a2:65:6d:60:0a:c5:22:a2:02:3e:36:3a:e3:85:ab:7a:
         fe:66:96:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:52 2026 by rpki-client