Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/99F2F124063811F0979FF734C4F9AE02.roa
File:                     99F2F124063811F0979FF734C4F9AE02.roa (raw, json)
Hash identifier:          CjbYwNsqPoTghF1RNZcCRcLk7tEKMRV4Rsn36VPvKJk=
Subject key identifier:   26:3D:C2:B8:53:06:A6:62:20:2E:0F:79:A6:B0:83:40:30:5B:B8:FD
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       36B6
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/99F2F124063811F0979FF734C4F9AE02.roa
Signing time:             Wed 08 Oct 2025 14:40:40 +0000
ROA not before:           Wed 08 Oct 2025 14:40:40 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     142565
IP address blocks:        175.29.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14006 (0x36b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct  8 14:40:40 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68e677e7-191a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c6:77:de:e5:da:b8:64:d8:3f:20:43:f8:e9:
                    60:85:8c:27:ae:75:92:43:2c:58:ec:8d:d5:77:1b:
                    33:f8:6b:e1:89:de:ec:68:78:eb:87:fb:a4:28:18:
                    75:1e:83:44:62:1f:8d:56:20:7c:5c:16:14:47:b6:
                    a0:d0:b0:65:4a:75:04:6d:8d:f3:ec:6b:bc:dc:8a:
                    e7:88:f3:92:86:a7:ec:70:39:fd:0c:28:27:9e:ee:
                    cd:dd:5e:d0:2b:fc:d4:cd:de:07:d5:3e:78:12:b8:
                    ad:d0:36:bc:c4:fb:9b:8e:4a:c6:6c:50:c1:a7:28:
                    9b:88:a3:86:04:6c:03:2d:81:06:c2:0d:4d:ba:58:
                    31:e8:40:05:b6:e5:17:5e:17:8e:45:0f:d6:e7:5a:
                    82:8e:4d:85:13:c2:5e:b1:33:56:e0:f3:1f:ef:3c:
                    c8:94:5e:3b:7c:f3:8a:a6:94:74:58:aa:00:6c:7a:
                    25:94:bd:16:a4:aa:66:d0:ac:87:36:4e:22:1d:5a:
                    1f:e2:c3:0e:ce:3e:72:75:5b:fd:a7:7a:57:75:4d:
                    68:b0:ca:96:60:ea:a8:d1:1d:80:54:43:47:93:11:
                    0c:10:a2:82:8c:74:d6:66:c3:09:9c:df:7f:4a:36:
                    2a:1d:0e:bf:7d:d4:ef:00:1c:0d:82:30:fe:ac:db:
                    81:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3D:C2:B8:53:06:A6:62:20:2E:0F:79:A6:B0:83:40:30:5B:B8:FD
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/99F2F124063811F0979FF734C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:31:bf:49:b6:ea:71:42:3b:e3:0f:35:7e:82:fc:0a:ae:7c:
         ed:29:43:99:67:09:18:c4:f6:06:14:70:4f:a7:08:5e:f2:86:
         d7:e7:6c:51:81:7b:58:f8:e7:38:35:a4:6a:e7:a2:f8:fe:74:
         72:3c:73:15:c0:7a:2a:24:e4:85:8a:c1:27:27:0d:f1:aa:35:
         55:cb:e4:c5:65:29:f7:59:74:b5:78:ad:09:d2:c1:e4:5e:0d:
         c4:5a:c1:63:a6:c7:49:26:77:37:f6:9a:0f:ad:ef:45:e2:0a:
         89:84:3e:00:a3:2f:b3:3c:bd:15:e9:cf:98:b3:5d:f0:0d:d3:
         6d:d7:67:be:01:00:f5:8b:b9:88:d3:6d:32:b6:a9:f1:65:98:
         a7:0b:d7:35:18:ab:35:d6:a9:22:d5:41:c4:8a:a5:03:eb:2e:
         fd:7f:09:c4:f5:a4:8b:11:c7:05:49:41:42:1b:f9:d6:5d:4e:
         6b:e2:dd:3d:77:51:5e:3d:2e:5f:0d:d8:10:f6:7c:e3:ec:11:
         e8:7a:ec:07:16:d1:99:15:64:dc:53:9c:7e:47:2f:cb:42:a5:
         bf:e9:20:26:9a:c5:43:01:2a:c7:81:8a:e0:c4:80:0b:c3:4f:
         87:61:82:68:18:42:fa:ba:b4:bd:b7:2a:ee:09:de:13:05:6d:
         e5:4d:b5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:19:39 2025 by rpki-client