Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/FAB0D026881F11F0AAA2086FC4F9AE02.roa
File:                     FAB0D026881F11F0AAA2086FC4F9AE02.roa (raw, json)
Hash identifier:          p6QY5PVIvSx1qqEScHsp8RNr6LjcbKhzpMC+wNmfh+c=
Subject key identifier:   9F:06:75:28:2F:38:EA:96:5B:76:C0:FA:6E:E8:05:6B:B6:85:65:33
Certificate issuer:       /CN=A913075E/serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7
Certificate serial:       51
Authority key identifier: 6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/FAB0D026881F11F0AAA2086FC4F9AE02.roa
Signing time:             Sat 20 Sep 2025 13:10:23 +0000
ROA not before:           Sat 20 Sep 2025 13:10:23 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     153523
IP address blocks:        165.99.62.0/24 maxlen: 24
                          165.99.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl
                          rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913075E, serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7
        Validity
            Not Before: Sep 20 13:10:23 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68cea7bf-13e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:a5:2b:35:b9:a0:1c:6f:2e:29:0e:46:c2:
                    8d:e3:05:4e:00:99:73:9e:1c:dc:cd:0c:d7:6c:72:
                    a4:29:9a:77:a9:b7:0e:7e:f6:6c:0c:be:29:96:19:
                    cc:69:9c:f7:a1:ed:cc:bc:e2:d5:f1:a4:46:76:5a:
                    ac:16:1b:8a:2f:af:5d:ec:e0:22:c0:1e:98:90:38:
                    ed:83:15:02:26:a7:d4:a3:b8:d0:31:04:0e:7c:19:
                    aa:7b:f4:3f:60:98:23:8e:44:ab:09:ec:db:3b:1e:
                    75:00:55:c5:f7:be:0c:d9:35:4d:ab:16:76:97:42:
                    4b:79:82:c4:fd:ef:5b:87:c2:92:44:98:d0:09:ba:
                    94:1c:5b:26:0d:ee:c6:c8:85:31:cf:2c:8a:f4:c7:
                    af:c3:1a:08:63:bb:7a:bc:51:c1:3c:44:31:72:4b:
                    8a:a8:87:12:11:ab:0d:88:ce:e7:47:c1:3c:ca:d4:
                    07:38:6f:a0:2b:18:5c:e2:c0:fd:f0:fb:e9:b0:06:
                    2f:c4:b1:dd:8b:c2:1d:6d:84:78:09:92:af:45:47:
                    9d:03:68:8e:70:39:86:94:d2:2c:6b:ff:9e:36:b0:
                    c5:70:9b:ca:af:bb:0a:c6:85:e8:10:0e:4d:01:5d:
                    80:39:17:10:50:12:fc:92:d2:46:82:09:43:ae:b4:
                    1d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:06:75:28:2F:38:EA:96:5B:76:C0:FA:6E:E8:05:6B:B6:85:65:33
            X509v3 Authority Key Identifier:
                keyid:6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/FAB0D026881F11F0AAA2086FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:b7:90:63:1e:3c:af:ca:2f:be:f7:bd:ac:62:fa:07:82:53:
         5f:9f:01:d7:0c:41:bf:39:34:f4:24:85:ef:e2:71:51:87:7a:
         b2:ed:da:c4:01:ef:e2:ac:a2:16:2f:80:de:56:c2:fa:d7:5b:
         a7:4f:01:eb:a7:90:a1:4c:c4:0e:44:94:84:05:16:66:1d:8c:
         b1:da:90:5f:f7:fb:f6:5b:e1:36:e4:07:a6:61:3f:bb:70:14:
         c5:5c:8a:5c:97:ce:22:9b:ff:10:48:85:b9:de:45:60:89:12:
         c1:4b:3f:42:07:5d:50:51:a4:64:07:0b:e5:19:7d:6d:bd:cc:
         a7:7b:ee:31:7a:bc:e2:c2:aa:ab:dc:a1:32:18:2b:f0:47:5d:
         0e:14:4f:3b:fd:1e:a9:8e:93:d3:be:57:4b:a0:72:b5:75:3f:
         0f:9f:59:43:12:10:ac:17:28:a1:45:34:48:68:b7:e1:f3:a2:
         fd:40:fe:5d:7f:b4:f4:05:5d:2d:6c:a3:2f:09:d1:2e:3a:a6:
         15:e6:11:80:00:c2:0b:3c:df:e4:58:be:dc:12:bf:a8:54:92:
         74:9b:db:f6:cb:5e:87:c5:57:16:1c:d0:8b:e7:bf:23:50:31:
         0c:4c:d8:22:ca:36:5b:2e:93:39:e7:82:0d:13:1e:60:37:f1:
         72:eb:57:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:05:26 2025 by rpki-client