Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/7B6FCB36340B11F0B358096BC4F9AE02.roa
File:                     7B6FCB36340B11F0B358096BC4F9AE02.roa (raw, json)
Hash identifier:          iTzbz5PCw1aQuW0uRFHeZ7rDpaXUvi2u17Jsk49Glpg=
Subject key identifier:   EA:1A:FF:67:9C:E0:4E:78:F7:F9:61:BD:62:69:48:13:73:1F:CE:2A
Certificate issuer:       /CN=A91EC3C9/serialNumber=1784AF68CF76D997B99F774063780DB299B54A93
Certificate serial:       DB
Authority key identifier: 17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/7B6FCB36340B11F0B358096BC4F9AE02.roa
Signing time:             Wed 01 Jul 2026 08:35:08 +0000
ROA not before:           Wed 01 Jul 2026 08:35:08 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     153899
IP address blocks:        165.99.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl
                          rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 07:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC3C9, serialNumber=1784AF68CF76D997B99F774063780DB299B54A93
        Validity
            Not Before: Jul  1 08:35:08 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a44d13c-807e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:09:94:05:fd:55:81:e9:ed:32:5d:e5:3c:05:
                    11:49:7d:de:17:f9:88:93:23:45:3a:f3:b6:0c:db:
                    b3:63:38:16:cd:f4:31:ab:60:fc:08:95:56:33:69:
                    cd:ba:d6:5f:08:f6:29:e0:7a:e3:bb:6e:9e:8f:c4:
                    6c:0c:b6:82:23:de:e8:4e:40:fc:b5:bc:5b:c4:57:
                    3c:00:10:ec:a9:c5:cb:dd:a3:a8:67:39:6e:21:15:
                    2e:74:7b:e3:5f:46:41:20:48:f9:54:04:f8:b3:db:
                    7f:ad:77:b1:68:e7:ef:0e:e7:54:a9:91:82:a8:0c:
                    ec:25:2d:e9:6a:45:7f:76:92:01:86:a8:0e:ed:d4:
                    81:47:04:e5:8e:1c:ec:91:38:7e:e0:ac:0e:ce:7e:
                    1d:43:0b:68:41:45:c8:f4:db:d9:20:4a:9b:64:df:
                    09:83:58:42:0e:7b:c4:b4:eb:f6:a3:7f:88:81:96:
                    40:e8:9b:86:bf:d0:c1:95:f6:be:65:ff:dd:05:e2:
                    1b:c9:95:cb:f9:7e:75:9e:b1:c1:f6:1e:d4:72:77:
                    2d:e7:a6:6e:0e:29:d6:96:af:0f:a6:47:4f:fc:1b:
                    05:34:66:99:1e:4d:54:b4:b0:15:6c:c8:fe:e5:ae:
                    1f:72:b4:d0:8f:6f:46:06:be:e5:89:92:9f:b6:66:
                    a4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1A:FF:67:9C:E0:4E:78:F7:F9:61:BD:62:69:48:13:73:1F:CE:2A
            X509v3 Authority Key Identifier:
                keyid:17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/7B6FCB36340B11F0B358096BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:8d:65:81:7a:9c:07:4e:5a:a8:9b:9b:c3:db:57:de:32:a9:
         6f:b8:79:f0:95:16:00:cd:fb:d9:cb:12:cb:22:c1:c3:0f:9b:
         b3:fc:2a:95:d2:77:42:92:c8:2d:bd:91:e9:69:1e:a3:d1:dc:
         20:02:18:5f:ca:b6:a5:e3:07:1c:d9:80:3c:04:83:72:01:00:
         af:84:cd:2f:72:96:70:a0:ed:96:60:dd:ed:30:8b:3b:3e:52:
         5f:c5:44:05:e4:92:11:fc:e7:f6:cc:17:c0:c0:32:eb:58:10:
         db:79:62:5c:de:c9:09:1e:f5:1f:56:b5:ee:6a:01:50:33:e8:
         e4:87:a8:a5:17:20:48:aa:b1:5e:a3:c2:bd:13:60:c7:e3:63:
         6b:ee:3f:27:42:a8:02:a3:20:18:be:d8:e4:45:45:88:16:56:
         91:41:f9:19:4d:7f:20:82:95:64:0b:f9:14:3e:7f:d9:d2:d9:
         ec:17:63:66:7e:a3:0d:da:98:ce:de:d9:41:1a:17:e4:e9:db:
         78:37:24:7f:e4:98:ae:f6:a6:a9:6c:a2:2f:04:e4:ee:6a:d5:
         32:4f:f2:88:5b:47:40:68:38:61:b3:74:9b:1e:aa:2d:b7:f4:
         de:50:bb:cb:d0:d2:de:ef:17:35:b2:9e:fd:00:9c:8e:53:3c:
         80:af:b9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:21:33 2026 by rpki-client