Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/E73A5E40A28C11F0A6491A72C4F9AE02.roa
File:                     E73A5E40A28C11F0A6491A72C4F9AE02.roa (raw, json)
Hash identifier:          tcOXOuYgGu+RB0bUc2Sne4w/DApsR3iV2dNestsnCuc=
Subject key identifier:   55:4A:60:E6:4B:B9:2A:0B:AD:46:70:F4:76:EF:85:28:13:10:52:42
Certificate issuer:       /CN=A911DFC9/serialNumber=7665E2835D160085E31EC245222D4B2F7E484409
Certificate serial:       59
Authority key identifier: 76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/E73A5E40A28C11F0A6491A72C4F9AE02.roa
Signing time:             Mon 06 Oct 2025 08:17:31 +0000
ROA not before:           Mon 06 Oct 2025 08:17:31 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     401701
IP address blocks:        165.99.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl
                          rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:38:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DFC9, serialNumber=7665E2835D160085E31EC245222D4B2F7E484409
        Validity
            Not Before: Oct  6 08:17:31 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68e37b1a-5e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e7:d3:95:cb:c2:dd:d9:70:5d:66:c8:34:e6:
                    bc:36:3b:b9:fe:4c:ba:04:c3:45:e1:83:31:b1:99:
                    92:c9:b7:b3:e1:dc:2e:43:89:f1:c5:51:7d:9b:49:
                    59:72:a1:ad:c7:c6:f0:21:ab:c5:be:02:73:7d:93:
                    27:c3:c0:2b:e4:fb:a8:30:45:04:63:2f:45:ac:df:
                    bc:40:eb:fd:08:b8:33:64:38:4a:60:fd:a2:88:3a:
                    36:d7:dc:98:23:ac:a9:ae:e2:7a:fa:1f:ca:18:fe:
                    12:63:d9:0b:f8:0f:9d:0c:5e:02:98:19:e8:99:f2:
                    22:16:9f:d9:58:d9:a1:7d:5b:0b:8a:f3:3d:f3:f3:
                    54:98:24:7e:da:fb:1d:4e:1a:40:23:7d:fc:16:90:
                    88:57:81:72:fd:b1:90:4e:73:58:d7:3c:51:85:bc:
                    61:f7:eb:f7:a2:1f:60:b5:f3:dc:59:9e:56:9f:f2:
                    d8:24:8a:15:26:e0:d3:3b:2f:8d:6e:e5:1c:eb:df:
                    02:f5:20:2d:14:9a:5c:72:21:44:29:db:e0:33:0a:
                    d6:cc:99:04:01:b1:88:ae:f1:23:67:c3:07:04:53:
                    10:6e:af:1c:d1:20:59:33:7f:ee:a4:4a:39:13:8d:
                    d9:89:7c:10:ad:34:64:ff:50:dc:f0:88:e7:0b:7a:
                    d0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4A:60:E6:4B:B9:2A:0B:AD:46:70:F4:76:EF:85:28:13:10:52:42
            X509v3 Authority Key Identifier:
                keyid:76:65:E2:83:5D:16:00:85:E3:1E:C2:45:22:2D:4B:2F:7E:48:44:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/dmXig10WAIXjHsJFIi1LL35IRAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dmXig10WAIXjHsJFIi1LL35IRAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DFC9/8D35E82E302C11F087764A2BC4F9AE02/E73A5E40A28C11F0A6491A72C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:43:a3:e3:08:57:3d:1e:24:57:90:43:04:e6:43:11:34:92:
         fb:00:56:de:df:91:f6:07:4c:c9:eb:90:0c:6c:a2:71:67:67:
         d9:66:9b:b2:6b:46:9b:cd:dd:53:dd:bc:90:06:53:1a:a7:1a:
         d4:fd:94:4e:bf:e1:6e:d4:58:df:2a:9f:10:80:fd:df:9b:c6:
         1b:fd:18:89:b3:54:5c:ab:b9:3f:66:11:1c:08:2b:73:05:6d:
         77:e8:a6:34:b2:7b:2f:b0:1c:ed:3f:47:7b:86:3a:41:9a:49:
         80:1a:dd:3c:2d:96:9d:ad:40:e7:e0:b1:bc:83:e0:c6:33:7e:
         95:86:b3:96:e0:83:78:3e:36:2d:f4:73:1b:7c:1c:d4:e4:d3:
         bd:11:22:c4:d0:49:80:17:27:ca:4e:f6:bc:96:fd:f8:2c:fd:
         a3:f8:bc:bf:3f:04:c0:d7:31:78:d5:56:b2:fa:d8:fd:7e:5a:
         67:0e:60:5b:fa:4b:d0:c8:62:f8:86:d3:7a:3c:2c:96:a2:68:
         07:3d:ea:3b:e3:1a:00:43:02:db:be:75:67:dc:72:50:4d:6d:
         23:70:95:75:9b:6f:cb:e9:67:68:5f:8a:36:aa:1e:bd:05:df:
         5d:65:b3:aa:50:a1:19:3e:1f:e6:c3:03:bd:a2:88:b2:b2:62:
         f3:9a:3a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:55:33 2025 by rpki-client