Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/CE1C73F63F8211F1AB237298B0833773.roa
File:                     CE1C73F63F8211F1AB237298B0833773.roa (raw, json)
Hash identifier:          wmJO/RC/icF4iS9DvaqPjod6p0WgtVixmksw7oAc8/c=
Subject key identifier:   3B:16:5B:31:40:28:80:18:5A:F3:75:09:7C:71:3E:B6:69:AD:A3:30
Certificate issuer:       /CN=A91EBBAF/serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
Certificate serial:       B2
Authority key identifier: D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/CE1C73F63F8211F1AB237298B0833773.roa
Signing time:             Fri 24 Apr 2026 02:10:46 +0000
ROA not before:           Fri 24 Apr 2026 02:10:46 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     153885
IP address blocks:        165.99.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl
                          rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBBAF, serialNumber=D2066B61934E77CF267A9DCC38BF5DEE21F07BA3
        Validity
            Not Before: Apr 24 02:10:46 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69ead126-0648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:84:51:71:93:a1:ca:b9:b4:fa:2a:d3:3c:d5:
                    0c:b8:32:47:88:b7:08:2e:d9:07:de:50:81:d2:e6:
                    e4:10:44:6a:47:4c:93:36:98:4b:c6:41:9f:5e:36:
                    c4:81:53:92:93:76:83:11:56:dd:6c:ac:47:8a:d7:
                    24:10:fd:ca:67:70:85:15:fe:00:e3:0e:de:49:96:
                    80:2a:7d:e0:46:f9:c5:ad:6f:6c:ff:0e:a9:c3:cc:
                    75:8e:e3:2e:53:f1:1d:1e:ca:56:db:af:b6:ec:12:
                    e3:e3:d3:2a:74:a4:71:f9:d8:14:08:0d:b0:b2:88:
                    47:7f:f4:98:7b:c9:3c:53:c9:0b:61:e0:bc:41:b2:
                    47:04:9f:ff:4d:96:a4:b7:3d:ba:6e:ab:3c:81:f2:
                    04:0a:b0:f4:9a:3c:54:27:04:6c:c9:82:49:4a:1d:
                    9f:a6:28:af:db:71:18:80:66:25:3c:de:09:12:6b:
                    51:38:06:d2:9b:f4:93:e2:a0:e4:9c:eb:34:a8:a9:
                    7c:8c:1f:4e:ad:d8:54:0c:1b:4d:0a:f2:ba:a0:dd:
                    73:e1:1b:34:7d:ee:60:ea:76:55:8a:58:13:0d:31:
                    5a:22:2c:c3:f8:9b:bf:cb:ec:4c:a5:0e:67:c2:ac:
                    32:cb:52:fc:8e:f8:a1:ef:04:f9:09:64:53:41:f4:
                    3f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:16:5B:31:40:28:80:18:5A:F3:75:09:7C:71:3E:B6:69:AD:A3:30
            X509v3 Authority Key Identifier:
                keyid:D2:06:6B:61:93:4E:77:CF:26:7A:9D:CC:38:BF:5D:EE:21:F0:7B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/0gZrYZNOd88mep3MOL9d7iHwe6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0gZrYZNOd88mep3MOL9d7iHwe6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBBAF/10C19D3036DD11F096862166C4F9AE02/CE1C73F63F8211F1AB237298B0833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:4b:d1:a4:96:41:41:b9:07:c9:c9:7b:03:1c:91:8c:a1:24:
         21:90:8c:fa:20:cf:86:9e:0e:fb:e8:1f:9c:df:22:d9:ee:e7:
         4a:bb:08:9e:70:31:50:cf:d1:6a:f6:f8:f4:72:3c:70:e7:c7:
         67:95:e4:03:c6:dc:a4:b4:00:00:c3:4c:7c:da:49:9f:d3:f1:
         04:52:8f:bb:91:42:50:a6:1a:3b:c2:5e:2d:c7:3c:60:9f:83:
         a9:ea:16:11:14:01:df:89:3b:a3:96:25:b1:e0:b3:d3:26:92:
         1c:34:60:00:6f:2d:ef:a9:42:60:8c:39:7c:26:3a:ae:25:9e:
         2f:b1:45:29:b5:41:c1:9b:56:f4:6f:6b:a6:fa:91:9d:ad:70:
         d2:7e:fa:1b:fa:b8:f1:61:1f:d7:25:c3:71:d0:2b:70:69:e9:
         ce:b0:04:7e:88:16:23:10:89:83:e2:9c:24:13:26:13:6a:ba:
         b7:5f:4f:c3:99:18:4a:c4:24:63:a1:ca:93:09:76:2d:45:8e:
         ff:6b:c0:f8:63:4a:7f:cf:08:06:bf:5a:31:d6:4b:ab:72:09:
         81:46:61:c9:d1:d5:f6:e1:be:d4:fc:9d:48:2f:92:ca:c4:3e:
         ec:cd:56:c6:e1:91:f6:15:a8:30:6b:3b:0b:d2:6e:0b:d0:48:
         ae:4c:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:05 2026 by rpki-client