Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/F7277FE412D611F18C2C8EDD083D8C67.roa
File:                     F7277FE412D611F18C2C8EDD083D8C67.roa (raw, json)
Hash identifier:          gI9WWBFQv25QPeKOZgESpHWxIt5z7rgTPKFMhN/VASU=
Subject key identifier:   C0:35:E0:E1:B9:EB:FF:70:CA:7E:D2:AF:9C:70:C5:07:5E:FA:85:0B
Certificate issuer:       /CN=A9196F7C/serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
Certificate serial:       AB
Authority key identifier: 6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/F7277FE412D611F18C2C8EDD083D8C67.roa
Signing time:             Fri 17 Jul 2026 04:28:25 +0000
ROA not before:           Fri 17 Jul 2026 04:28:25 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     7979
IP address blocks:        157.85.86.0/24 maxlen: 24
                          157.85.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.crl
                          rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196F7C, serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
        Validity
            Not Before: Jul 17 04:28:25 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a59af69-502d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b9:49:17:6c:91:39:b5:33:f3:8c:cc:df:c8:
                    40:ef:56:23:39:b3:d8:87:4c:3f:40:7c:c0:c2:1a:
                    86:b5:54:b0:f2:03:9f:8a:e5:73:c8:c5:0d:65:37:
                    0f:ae:19:c2:32:2d:02:1b:1f:ad:7b:03:3b:7f:c1:
                    9f:bb:10:df:74:8e:ba:b6:71:e5:1a:6d:9c:23:bb:
                    b4:71:e4:16:de:4a:c8:a9:b2:bb:fb:24:17:3d:7c:
                    b4:25:6b:53:a0:05:6a:6d:d8:d4:01:81:c5:ff:34:
                    81:93:4b:f9:ff:e5:a7:68:9e:97:3f:47:7b:62:71:
                    ec:bb:5e:8d:f1:31:99:84:30:0c:7f:81:b7:ef:1b:
                    e4:c8:a7:1d:ee:42:50:56:34:f1:5c:70:3a:a9:d5:
                    c3:79:dd:43:e5:db:17:7e:0d:77:ff:73:23:72:50:
                    76:2c:8d:9d:3f:5a:c1:14:a7:6b:f5:8b:b8:bf:95:
                    0d:a6:25:12:17:a8:49:8b:c8:16:e5:8f:8b:8f:62:
                    29:a5:25:47:09:93:c9:a5:48:9f:11:84:24:b7:0e:
                    a4:20:56:6a:a2:e2:a5:6d:9b:23:43:eb:79:7f:19:
                    c8:60:f0:ec:2d:3d:3a:f1:d8:d1:27:39:99:66:81:
                    c1:f0:2b:f2:48:f5:f2:4e:12:35:a0:49:d6:85:07:
                    2e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:35:E0:E1:B9:EB:FF:70:CA:7E:D2:AF:9C:70:C5:07:5E:FA:85:0B
            X509v3 Authority Key Identifier:
                keyid:6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/F7277FE412D611F18C2C8EDD083D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:f1:a4:c4:48:bb:35:e0:ce:48:b6:ab:54:49:22:cc:64:7e:
         1f:16:e7:d6:54:ad:e8:bd:07:5b:25:ea:f6:72:71:84:6c:1d:
         de:37:c5:7f:80:94:a0:c9:c1:c7:22:b3:08:aa:67:ba:3b:3f:
         b8:04:5a:74:62:4a:66:23:ff:ba:96:37:bf:8d:8b:07:29:6d:
         65:29:85:a3:50:14:62:80:bd:04:02:a0:f7:87:52:2c:ac:0b:
         5f:8a:ba:e5:53:b4:9a:e2:0a:81:5a:65:eb:f7:51:6c:2b:d4:
         45:22:48:9a:c9:f8:b3:b2:34:a6:ef:2f:38:f3:ed:e8:38:da:
         1b:69:83:22:10:b4:49:a5:c4:00:37:20:f6:52:0f:03:97:3b:
         92:c7:37:f9:c6:7f:07:39:e9:56:07:ea:cb:eb:90:5a:52:ff:
         e2:a5:4d:54:c9:f8:af:00:ba:20:2f:80:05:c2:d7:0f:41:51:
         08:8d:55:cb:be:a2:13:c1:47:ba:4b:7d:6b:92:3d:27:a0:27:
         7d:8d:78:59:ab:ed:04:43:bc:1e:dd:36:15:d0:c7:a4:83:fc:
         80:51:5d:82:f9:52:94:ca:94:34:0d:ec:4d:93:11:99:50:ff:
         aa:96:b3:16:94:64:18:b0:6a:d1:dc:37:d3:47:76:1d:0c:2c:
         67:ec:86:6c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZGN0MxMTAvBgNVBAUTKDZFRjhGRUNFRjMzOUVBNkRFOTY5OENDMkM1RjU4NjQ1
Q0Y2NUVGREUwHhcNMjYwNzE3MDQyODI1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU5YWY2OS01MDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoblJF2yRObUz84zM38hA71YjObPYh0w/QHzAwhqGtVSw8gOfiuVzyMUNZTcP
rhnCMi0CGx+tewM7f8GfuxDfdI66tnHlGm2cI7u0ceQW3krIqbK7+yQXPXy0JWtT
oAVqbdjUAYHF/zSBk0v5/+WnaJ6XP0d7YnHsu16N8TGZhDAMf4G37xvkyKcd7kJQ
VjTxXHA6qdXDed1D5dsXfg13/3MjclB2LI2dP1rBFKdr9Yu4v5UNpiUSF6hJi8gW
5Y+Lj2IppSVHCZPJpUifEYQktw6kIFZqouKlbZsjQ+t5fxnIYPDsLT068djRJzmZ
ZoHB8CvySPXyThI1oEnWhQcuWwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMA14OG5
6/9wyn7Sr5xwxQde+oULMB8GA1UdIwQYMBaAFG74/s7zOept6WmMwsX1hkXPZe/e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkY3Qy8wN0YzNEYwOEE0
QjIxMUYwQjg0QzEzNDNDNEY5QUUwMi9idmotenZNNTZtM3BhWXpDeGZXR1JjOWw3
OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2J2ai16dk01Nm0zcGFZekN4ZldHUmM5bDc5NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTZGN0MvMDdGMzRGMDhBNEIyMTFGMEI4NEMxMzQzQzRGOUFFMDIvRjcyNzdGRTQx
MkQ2MTFGMThDMkM4RUREMDgzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnVVWMA0GCSqGSIb3DQEBCwUAA4IBAQBY8aTESLs14M5ItqtUSSLM
ZH4fFufWVK3ovQdbJer2cnGEbB3eN8V/gJSgycHHIrMIqme6Oz+4BFp0YkpmI/+6
lje/jYsHKW1lKYWjUBRigL0EAqD3h1IsrAtfirrlU7Sa4gqBWmXr91FsK9RFIkia
yfizsjSm7y848+3oONobaYMiELRJpcQANyD2Ug8DlzuSxzf5xn8HOelWB+rL65Ba
Uv/ipU1UyfivALogL4AFwtcPQVEIjVXLvqITwUe6S31rkj0noCd9jXhZq+0EQ7we
3TYV0Mekg/yAUV2C+VKUypQ0DexNkxGZUP+qlrMWlGQYsGrR3DfTR3YdDCxn7IZs
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:13:18 2026 by rpki-client