Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C4F38BE0119A11F182B92405393D8C67.roa
File:                     C4F38BE0119A11F182B92405393D8C67.roa (raw, json)
Hash identifier:          Frf4jajDK/lh0fEZSY4nnaNXiaEWgN331q/6tTICGOo=
Subject key identifier:   D4:C1:80:20:12:20:67:91:58:E6:80:26:A5:FC:9A:C7:CD:5A:77:5D
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       2267
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C4F38BE0119A11F182B92405393D8C67.roa
Signing time:             Fri 24 Apr 2026 04:16:07 +0000
ROA not before:           Fri 24 Apr 2026 04:16:07 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150818
IP address blocks:        165.99.130.0/24 maxlen: 24
                          165.99.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8807 (0x2267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Apr 24 04:16:07 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69eaee86-2b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:04:6b:8b:cf:ac:e9:66:9b:ff:28:50:f3:83:
                    6c:01:11:5e:98:97:cd:17:ea:98:49:4d:b2:aa:17:
                    ab:53:e7:f8:75:91:50:92:6b:f2:1d:1d:88:ce:a1:
                    09:b4:3c:3d:6a:3c:5a:d9:81:fc:12:ab:1b:5f:08:
                    18:cc:0e:1d:ce:85:4a:92:71:b5:cb:7f:66:14:0d:
                    8f:77:b3:56:9f:0a:b7:67:e0:3b:63:3a:47:20:54:
                    a1:86:33:68:19:17:d5:4d:7f:75:6e:1e:13:a7:e5:
                    7e:5f:ef:e7:61:90:d9:35:22:49:6a:db:51:18:79:
                    5c:3c:3f:53:f4:06:59:1c:13:39:92:41:bd:91:62:
                    b7:c2:d7:ff:ca:1a:ee:9e:9c:0c:ba:cf:83:18:c0:
                    2f:66:3d:f8:b2:52:6c:7a:f4:9b:a7:06:2e:0f:be:
                    8e:98:e4:e2:e8:aa:84:ee:db:74:ff:b7:a5:43:de:
                    3b:a2:6c:07:4f:b8:2a:f1:fa:a8:02:f9:f6:a2:8c:
                    42:43:db:d7:19:8c:bb:16:65:a7:28:05:84:e5:5f:
                    1c:2e:4e:96:e5:f4:cd:c9:23:4f:dc:29:38:90:97:
                    b1:14:51:e4:6d:56:3f:17:94:8d:22:54:46:41:7e:
                    e6:b4:89:4d:c3:16:79:78:6b:0f:53:88:d4:1e:f0:
                    ae:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C1:80:20:12:20:67:91:58:E6:80:26:A5:FC:9A:C7:CD:5A:77:5D
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C4F38BE0119A11F182B92405393D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:f2:22:8b:07:ac:d9:ab:14:20:36:52:cc:19:76:98:fb:50:
         17:0d:14:11:e3:29:35:0c:94:33:58:f6:a7:ef:4b:56:c3:82:
         da:37:23:4f:a0:dd:2e:59:79:bf:69:ae:3a:68:1b:cd:06:0f:
         ac:de:30:ed:fe:8b:d4:d3:a7:bd:79:34:65:d8:89:fb:8a:58:
         ac:0e:5d:40:a4:0c:e2:66:98:61:bb:db:9b:d0:ae:0f:f9:74:
         cf:a9:64:f4:08:8b:18:d4:65:11:e9:7e:59:91:7b:8e:2c:12:
         96:ec:d4:85:b0:f3:69:18:1b:31:01:76:d0:81:a6:bd:05:37:
         07:26:65:1f:4f:b8:29:08:21:31:55:01:88:90:92:3d:0c:be:
         93:d2:59:93:f6:cd:9b:64:6d:da:e7:62:9a:4a:1d:b3:26:df:
         8a:91:2b:29:bf:d2:c4:0b:ca:4b:2d:e6:58:51:1d:aa:ec:ef:
         74:ee:18:48:42:c7:d9:92:7e:18:b1:cb:34:48:54:7b:b3:b3:
         79:5b:a5:ee:66:b5:6d:ab:a2:c2:ba:cd:16:48:90:a7:86:78:
         c5:55:83:4f:50:ee:89:16:f0:6c:5f:9e:59:73:22:d1:25:db:
         55:56:49:05:cb:47:68:f9:4f:9a:fb:61:5d:2d:df:da:c8:a9:
         42:9c:14:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:01:49 2026 by rpki-client