Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/9F9EF74086A111F18D87851971A30FBC.roa
File:                     9F9EF74086A111F18D87851971A30FBC.roa (raw, json)
Hash identifier:          MFU9g1zLut/X+3qK5+QNkUBcEhI1pfxDqvyTIelsUy4=
Subject key identifier:   07:6F:F2:B9:B1:0E:37:3A:3C:59:4B:DD:53:ED:FD:F9:3E:B3:EB:D0
Certificate issuer:       /CN=A91389E7/serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
Certificate serial:       D5
Authority key identifier: 05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/9F9EF74086A111F18D87851971A30FBC.roa
Signing time:             Thu 23 Jul 2026 14:20:15 +0000
ROA not before:           Thu 23 Jul 2026 14:20:15 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     149173
IP address blocks:        165.101.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl
                          rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 14:20:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91389E7, serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
        Validity
            Not Before: Jul 23 14:20:15 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6a62231f-edf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:54:1d:00:92:e3:8c:c5:50:90:88:e6:50:59:
                    91:7e:75:6c:a1:1e:2c:12:6d:07:95:5a:e5:0a:c7:
                    f2:b5:1c:6a:06:d8:1c:2b:ad:5d:c7:fb:4b:3e:a5:
                    20:1d:27:96:b3:00:18:9d:45:63:9b:53:2a:a3:be:
                    be:08:80:24:fc:5d:bd:37:b9:e9:65:c8:e7:09:57:
                    07:78:84:b9:d2:2f:c6:dd:bd:04:dd:6c:aa:b9:24:
                    b3:1a:93:b7:86:2c:29:d3:1b:36:29:aa:69:19:77:
                    bd:3e:11:66:9c:fc:f5:50:9e:47:1e:c5:46:0f:01:
                    cc:49:19:86:10:6d:a5:ed:58:c5:45:84:df:ec:a6:
                    4b:4c:ca:23:6a:40:f0:ac:2f:e9:71:51:e3:79:4c:
                    8a:c4:7f:94:15:93:f9:39:d8:20:55:ad:b2:8c:d7:
                    9e:bf:fc:fd:e1:46:f1:97:ba:3b:71:af:da:88:15:
                    6c:86:e6:16:27:05:6b:e5:6f:87:a9:b6:1e:cb:3c:
                    5f:83:25:b7:2e:38:2e:c8:dc:7e:8d:c6:2d:af:b6:
                    4d:d4:28:00:2a:5e:05:85:b4:95:0b:32:dd:18:0b:
                    21:1f:29:3c:24:59:dc:cb:70:75:89:dc:49:67:cd:
                    d6:d7:4d:10:eb:6a:f6:76:ed:b8:5d:f4:41:7b:fc:
                    92:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6F:F2:B9:B1:0E:37:3A:3C:59:4B:DD:53:ED:FD:F9:3E:B3:EB:D0
            X509v3 Authority Key Identifier:
                keyid:05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/9F9EF74086A111F18D87851971A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:57:19:62:6e:d5:b7:1c:95:5c:58:89:58:15:b4:f8:67:48:
         75:77:c9:16:35:f1:cf:8d:3f:7d:ff:82:7f:2a:3a:ae:85:15:
         54:08:92:b0:cd:70:a5:44:16:35:76:2b:f7:a6:f4:b8:27:bc:
         aa:1b:73:84:69:57:b5:62:e2:17:82:e0:37:a7:7d:52:79:41:
         d9:9a:97:80:0d:df:6d:05:9f:ac:be:ef:ef:7c:d8:2d:dd:66:
         da:52:85:3e:e9:7c:2b:d0:03:67:59:0f:3c:d2:cb:86:27:e0:
         15:d8:6e:b3:3a:f6:04:fa:0d:33:f3:23:ec:eb:c4:9f:26:34:
         5d:fd:f4:e1:12:7d:bc:28:06:42:a5:3b:6e:bf:28:f5:c3:6d:
         bc:79:78:17:bd:c1:f5:fd:18:a4:88:99:42:97:9f:ac:39:e1:
         bb:69:e2:d4:0b:d3:a2:93:dc:a6:3b:1b:88:09:77:3c:04:9d:
         1d:a1:3d:68:80:e4:69:2a:49:9a:40:fa:fd:9b:53:3c:c5:6c:
         5c:34:f4:ca:d5:ba:f9:8a:0d:46:e0:d9:a7:6c:db:c6:ee:de:
         64:91:1a:60:35:19:73:47:08:f3:df:0f:42:d3:e4:70:5c:71:
         ca:17:7b:17:15:28:67:50:01:d8:7e:bd:bc:7b:29:2d:be:4c:
         64:23:60:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:37 2026 by rpki-client