Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/F7277FE412D611F18C2C8EDD083D8C67.roa
File:                     F7277FE412D611F18C2C8EDD083D8C67.roa (raw, json)
Hash identifier:          fO9b1Jwp8JdlI4bZ5aOCcLqj9SWiGSO9E5cl3pvCyM8=
Subject key identifier:   91:B6:7B:1C:8D:59:4C:DF:E0:10:E1:5F:8D:A4:7F:C7:F0:7B:A9:71
Certificate issuer:       /CN=A9196F7C/serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
Certificate serial:       83
Authority key identifier: 6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/F7277FE412D611F18C2C8EDD083D8C67.roa
Signing time:             Wed 29 Apr 2026 05:40:32 +0000
ROA not before:           Wed 29 Apr 2026 05:40:32 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     7979
IP address blocks:        157.85.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.crl
                          rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:34:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196F7C, serialNumber=6EF8FECEF339EA6DE9698CC2C5F58645CF65EFDE
        Validity
            Not Before: Apr 29 05:40:32 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f199d0-d533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0f:60:db:32:60:23:21:6b:16:79:88:d0:b8:
                    7d:dd:22:b7:2d:33:77:5c:10:33:46:e7:5a:e1:ce:
                    f3:0e:5a:d5:ae:79:3e:93:6b:a0:5b:9a:c9:9d:2d:
                    07:e0:69:c2:02:16:0a:7c:68:5c:f8:9c:b4:93:11:
                    7a:a7:0b:f4:83:56:bb:c6:a5:c1:a0:8c:d3:86:c0:
                    52:76:f7:e8:dc:c3:f1:59:ef:f4:0d:97:da:f3:b6:
                    5e:9e:87:7c:71:1d:5d:41:65:bf:30:4c:98:36:5a:
                    80:7c:91:e0:0b:92:e6:28:75:ce:5a:87:13:30:7c:
                    11:7c:54:5b:96:aa:71:e8:d7:a6:4a:15:3c:fe:2e:
                    9b:db:4e:e5:06:f4:8f:6e:7a:09:7e:a7:1e:e1:2d:
                    ef:0f:14:4b:b3:ab:94:0c:b3:32:0e:cc:c7:0a:1c:
                    eb:53:51:d3:4c:15:83:66:30:f6:92:82:79:11:a7:
                    ba:5d:ef:28:dd:52:8d:71:4c:6f:fe:05:6d:48:58:
                    12:20:88:0a:e4:23:c9:2b:ea:42:f5:e5:9c:82:e9:
                    fb:11:ee:2f:bb:e8:32:a5:ff:a1:bf:63:00:06:7a:
                    5a:12:16:91:85:24:bc:87:17:7f:04:ab:c6:28:1b:
                    33:56:83:71:b7:03:b2:0f:11:69:26:0e:d8:d1:c0:
                    04:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B6:7B:1C:8D:59:4C:DF:E0:10:E1:5F:8D:A4:7F:C7:F0:7B:A9:71
            X509v3 Authority Key Identifier:
                keyid:6E:F8:FE:CE:F3:39:EA:6D:E9:69:8C:C2:C5:F5:86:45:CF:65:EF:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/bvj-zvM56m3paYzCxfWGRc9l794.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bvj-zvM56m3paYzCxfWGRc9l794.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F7C/07F34F08A4B211F0B84C1343C4F9AE02/F7277FE412D611F18C2C8EDD083D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.85.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:7f:92:5a:bf:6d:09:5c:65:43:ef:8b:0d:39:51:6e:ac:49:
         ce:0d:2a:30:28:98:71:24:81:b5:f0:31:00:6a:b2:ef:ad:7a:
         be:59:03:09:10:1e:fd:87:0f:8b:7b:61:78:89:10:ab:57:2e:
         aa:a4:44:8e:42:da:23:39:0f:2b:95:a7:09:e7:34:ab:e1:f9:
         70:b7:e5:a2:96:fc:0e:90:3a:5c:c9:31:b9:6d:cc:52:28:18:
         54:2f:18:76:3f:21:24:a9:37:fb:55:98:55:1d:b1:48:91:d0:
         c9:59:63:5b:ed:8e:ec:82:38:b4:e6:3d:ab:3c:c1:6d:b3:26:
         e1:e7:f7:de:46:cb:37:35:67:31:6d:51:e3:d8:7f:35:32:02:
         e7:3e:37:e0:d1:2c:54:66:72:45:4e:e3:8c:a3:f8:cc:1e:fe:
         c7:6f:d9:59:ea:03:cc:a8:84:11:02:f2:12:f7:ed:0e:fd:db:
         39:b8:15:e6:fa:71:9b:fd:b8:80:68:02:11:54:39:bb:ec:1b:
         9b:59:bd:ca:ff:55:41:a9:31:0b:2a:da:ee:f7:5f:34:70:da:
         3d:15:8e:29:3f:31:76:ac:df:f7:31:93:93:c0:20:38:89:83:
         6f:00:93:0f:3e:52:5b:01:5e:5e:7a:5f:da:0d:0f:78:65:43:
         46:e7:b5:b5
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZGN0MxMTAvBgNVBAUTKDZFRjhGRUNFRjMzOUVBNkRFOTY5OENDMkM1RjU4NjQ1
Q0Y2NUVGREUwHhcNMjYwNDI5MDU0MDMyWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWYxOTlkMC1kNTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Q9g2zJgIyFrFnmI0Lh93SK3LTN3XBAzRuda4c7zDlrVrnk+k2ugW5rJnS0H
4GnCAhYKfGhc+Jy0kxF6pwv0g1a7xqXBoIzThsBSdvfo3MPxWe/0DZfa87Zenod8
cR1dQWW/MEyYNlqAfJHgC5LmKHXOWocTMHwRfFRblqpx6NemShU8/i6b207lBvSP
bnoJfqce4S3vDxRLs6uUDLMyDszHChzrU1HTTBWDZjD2koJ5Eae6Xe8o3VKNcUxv
/gVtSFgSIIgK5CPJK+pC9eWcgun7Ee4vu+gypf+hv2MABnpaEhaRhSS8hxd/BKvG
KBszVoNxtwOyDxFpJg7Y0cAE4wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJG2exyN
WUzf4BDhX42kf8fwe6lxMB8GA1UdIwQYMBaAFG74/s7zOept6WmMwsX1hkXPZe/e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkY3Qy8wN0YzNEYwOEE0
QjIxMUYwQjg0QzEzNDNDNEY5QUUwMi9idmotenZNNTZtM3BhWXpDeGZXR1JjOWw3
OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2J2ai16dk01Nm0zcGFZekN4ZldHUmM5bDc5NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTZGN0MvMDdGMzRGMDhBNEIyMTFGMEI4NEMxMzQzQzRGOUFFMDIvRjcyNzdGRTQx
MkQ2MTFGMThDMkM4RUREMDgzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAnVVXMA0GCSqGSIb3DQEBCwUAA4IBAQADf5Jav20JXGVD74sNOVFu
rEnODSowKJhxJIG18DEAarLvrXq+WQMJEB79hw+Le2F4iRCrVy6qpESOQtojOQ8r
lacJ5zSr4flwt+WilvwOkDpcyTG5bcxSKBhULxh2PyEkqTf7VZhVHbFIkdDJWWNb
7Y7sgji05j2rPMFtsybh5/feRss3NWcxbVHj2H81MgLnPjfg0SxUZnJFTuOMo/jM
Hv7Hb9lZ6gPMqIQRAvIS9+0O/ds5uBXm+nGb/biAaAIRVDm77BubWb3K/1VBqTEL
Ktru9180cNo9FY4pPzF2rN/3MZOTwCA4iYNvAJMPPlJbAV5eel/aDQ94ZUNG57W1
-----END CERTIFICATE-----
Generated at Wed May 13 02:57:59 2026 by rpki-client