Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/99B68AAA366311EEB376DC3AC4F9AE02.roa
File:                     99B68AAA366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          hYMNVGKl5jzxF3jAoOCFYow8FG2fD9GWWcC61vry2ek=
Subject key identifier:   CD:21:EB:56:1B:7D:FC:5D:55:D1:50:6A:25:36:38:F8:90:A1:45:7E
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       01B1
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/99B68AAA366311EEB376DC3AC4F9AE02.roa
Signing time:             Mon 23 Jun 2025 03:22:02 +0000
ROA not before:           Mon 23 Jun 2025 03:22:02 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     150686
IP address blocks:        83.118.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Jun 23 03:22:02 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6858c85a-29e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:00:81:c8:3b:a2:7c:51:b9:fe:d0:06:26:5c:
                    5c:cb:1f:99:14:3f:2b:50:ab:f8:b3:8a:d3:4e:2a:
                    d7:17:6a:df:3a:3f:61:c6:c5:40:69:8f:b8:6c:d6:
                    d4:03:47:72:79:62:28:26:9c:5b:53:12:79:0c:e7:
                    0d:42:b4:65:26:be:eb:bd:f0:59:a4:41:e2:47:43:
                    6d:22:1a:36:2f:09:ae:16:c0:b9:7f:dd:ba:1e:ed:
                    81:02:32:27:a9:1e:0d:49:ae:96:04:44:ee:a9:36:
                    cf:f6:77:fc:65:b5:ab:eb:7b:5e:e7:20:d8:bf:42:
                    4d:a8:29:3f:38:65:ea:0e:35:8a:4f:47:ef:73:44:
                    7c:1a:ee:a3:9a:b9:f8:d4:d9:a9:eb:aa:8f:6d:b0:
                    7a:e6:ba:33:88:ba:69:0c:cd:7a:fc:49:93:35:99:
                    82:8e:e3:a7:61:ae:5b:25:fc:57:92:eb:f6:a5:88:
                    3e:33:3f:d6:1d:40:cc:90:0e:90:a5:9b:cc:b9:73:
                    38:ec:86:3c:51:b2:27:68:7f:05:31:12:aa:b1:64:
                    d0:d2:30:2c:5d:36:b2:0f:55:a8:3b:7f:65:30:05:
                    71:4a:df:06:f6:8d:78:c2:ef:5a:89:14:42:24:db:
                    82:b4:a1:d3:56:44:56:5f:0d:15:5a:3a:92:83:d4:
                    de:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:21:EB:56:1B:7D:FC:5D:55:D1:50:6A:25:36:38:F8:90:A1:45:7E
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/99B68AAA366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.118.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:26:c9:f4:0d:28:b6:ba:39:53:4c:8a:6b:ad:5e:1e:ff:51:
         7f:ed:72:13:07:2b:ae:f1:96:a7:a1:68:5b:59:7e:a3:51:a1:
         45:10:2d:aa:2e:03:01:a4:4a:dd:d6:0b:99:34:86:49:a0:cf:
         08:76:02:57:94:11:fc:bb:7c:e5:f5:c2:9c:ba:0a:4a:e2:8b:
         c5:2d:50:b4:19:78:83:b0:8d:ec:82:e4:3d:02:a6:38:da:7f:
         b2:e4:0a:30:27:dd:46:4b:57:68:15:3e:0b:ea:a3:5a:7d:97:
         b7:73:7c:e1:01:1c:e4:33:8b:21:2e:63:40:ed:0d:3d:25:35:
         96:c7:89:29:4b:57:c4:74:53:63:fa:d8:ce:5d:d7:68:82:36:
         92:9f:a7:24:5c:fe:b7:18:ee:6d:3a:00:d7:0b:ea:aa:2a:ea:
         86:d1:6f:90:32:87:dd:23:76:dd:4e:a6:d6:f3:34:79:86:54:
         7a:98:98:5b:23:a2:e6:d7:75:cf:6e:b4:e4:c6:92:55:63:49:
         85:42:12:df:f5:b8:ed:4b:04:7e:be:d4:79:f7:30:e3:b8:91:
         71:83:4b:8b:55:79:dc:b1:6e:ed:3a:97:0f:8a:74:09:a6:53:
         fa:5e:a7:94:1d:f7:9b:a0:7b:17:c0:20:1a:f9:1a:17:c9:1e:
         e6:4b:dc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 08:29:09 2025 by rpki-client