Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B77CC7CE526911F0BB1C0885C4F9AE02.roa
File:                     B77CC7CE526911F0BB1C0885C4F9AE02.roa (raw, json)
Hash identifier:          TJ6KMhN9kOfWDPU11ozfbGlVm4locMDT7r0uv5tZrvw=
Subject key identifier:   70:77:8C:E1:11:3A:69:90:4D:78:76:05:99:82:F7:87:E0:A5:75:05
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       060C
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B77CC7CE526911F0BB1C0885C4F9AE02.roa
Signing time:             Thu 26 Jun 2025 08:44:06 +0000
ROA not before:           Thu 26 Jun 2025 08:44:06 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     150828
IP address blocks:        165.99.234.0/24 maxlen: 24
                          165.99.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 14:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1548 (0x60c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Jun 26 08:44:06 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=685d0855-f3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9e:3a:03:4a:3f:e5:1c:ec:9c:e5:21:99:f8:
                    b1:a4:93:b8:47:73:0e:59:94:95:f3:a5:7a:fa:c0:
                    e0:3a:6b:27:67:0a:fb:ba:0f:54:c0:1e:f3:a7:3a:
                    12:f4:b4:ac:e9:ad:93:a2:0f:3b:ec:c9:31:82:78:
                    47:82:62:cf:67:07:45:2a:7c:c5:ba:e6:f9:a0:47:
                    ed:c6:30:32:5e:db:c7:03:a7:e0:77:08:e7:70:04:
                    f5:26:16:4f:3c:90:ff:56:d5:db:d3:55:b8:e4:ed:
                    e1:a6:46:2e:0b:0d:38:48:0d:77:1b:ec:f0:c8:a6:
                    34:0a:82:34:ff:c8:73:58:f8:8d:9c:fb:73:4b:f5:
                    29:da:f5:b5:36:77:12:fb:9e:84:13:d3:66:77:56:
                    f2:d6:e1:7d:fd:33:41:77:41:d5:62:5a:3a:47:90:
                    03:89:9e:1e:3d:20:51:80:04:e9:99:52:6f:00:d7:
                    50:43:20:f5:53:24:b3:4c:c2:03:32:35:22:60:de:
                    08:cf:dc:78:23:8b:e0:64:fe:86:3d:91:7f:d2:57:
                    c8:e8:71:cf:da:11:c6:f8:88:f5:12:dc:fe:f2:ae:
                    9d:5d:87:09:9d:94:94:df:c2:a3:5c:41:b4:d1:15:
                    92:a3:97:78:fb:ed:2c:db:e8:a7:68:eb:91:15:af:
                    57:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:77:8C:E1:11:3A:69:90:4D:78:76:05:99:82:F7:87:E0:A5:75:05
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B77CC7CE526911F0BB1C0885C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:8a:ec:8d:0b:ed:59:5e:96:aa:1d:90:f9:d4:af:73:fd:fc:
         f9:63:ea:6b:67:fa:19:ac:48:17:32:18:fb:62:82:62:0b:3f:
         ba:98:11:c8:2a:bf:08:65:ca:36:1c:72:f8:9a:03:65:23:a4:
         67:77:99:86:e3:a3:d6:95:f9:dd:78:02:21:23:c0:d6:31:f0:
         d0:f3:cf:cb:1f:f7:a4:33:3d:11:81:ca:3a:b1:a2:d2:59:93:
         01:51:4d:73:ac:92:ee:63:d9:cd:6a:54:13:52:ed:ad:86:75:
         2c:b7:2f:fd:7c:2e:70:6a:9a:55:a3:55:19:8f:98:7f:44:fa:
         b6:e8:2e:15:30:50:79:11:c7:b5:dd:8c:41:b6:b9:08:83:f3:
         47:a2:4d:7d:ff:45:2e:93:50:5f:b0:9a:e3:68:69:44:bc:d7:
         63:56:e0:8f:d4:97:47:af:ca:49:18:e1:21:17:c3:28:dd:a7:
         a5:39:91:39:c4:59:05:2f:62:f7:ae:39:34:29:b2:b6:af:1c:
         82:c7:b2:45:9a:7f:51:a0:c5:17:da:75:1f:74:38:4f:73:0d:
         ae:ba:54:12:7b:19:f9:8f:c5:f9:b4:70:b5:df:f2:62:da:b3:
         dc:8d:9e:fb:b0:7c:16:8e:9e:d5:b2:b0:2a:37:fc:fb:e6:e0:
         7a:81:83:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:58:57 2025 by rpki-client