Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/4567CDC2A0EE11F081D8CB27C4F9AE02.roa
File:                     4567CDC2A0EE11F081D8CB27C4F9AE02.roa (raw, json)
Hash identifier:          NZk8gPQKW1EfRq0UDEGtez/4CFQTjjGfw0ouBgNdDzQ=
Subject key identifier:   B2:C8:38:70:44:26:74:BC:B9:DC:9D:29:63:87:1A:02:83:F8:8A:4B
Certificate issuer:       /CN=A913695E/serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543
Certificate serial:       50
Authority key identifier: 21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/4567CDC2A0EE11F081D8CB27C4F9AE02.roa
Signing time:             Sat 04 Oct 2025 07:00:22 +0000
ROA not before:           Sat 04 Oct 2025 07:00:22 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     153989
IP address blocks:        165.101.54.0/23 maxlen: 23
                          165.101.54.0/24 maxlen: 24
                          165.101.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.crl
                          rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913695E, serialNumber=212818907589B2CA846B49D109DD33AC9E2EB543
        Validity
            Not Before: Oct  4 07:00:22 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68e0c606-9709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d4:3d:c0:18:a5:c6:2b:12:05:a3:ef:ec:ca:
                    a2:5f:0a:7c:f0:13:94:1d:a2:93:59:17:b9:70:5a:
                    dc:8c:ec:48:3d:ab:f0:98:4e:e1:26:4a:a5:1d:0b:
                    f1:5c:d7:5e:b1:e7:91:37:c5:a5:01:65:d2:76:5f:
                    06:c5:c1:35:47:33:1d:40:ad:df:b4:f1:8e:1b:a6:
                    5c:9a:d4:7a:d7:97:dc:04:b0:37:e4:06:c5:63:6e:
                    a9:7e:cf:d0:25:7d:9b:19:0c:db:47:da:1a:6a:f0:
                    3f:bc:6a:b1:98:7f:fe:17:70:27:1c:d2:b3:1a:72:
                    34:b7:f3:7b:28:75:a9:2b:86:4a:30:6f:ca:6e:79:
                    08:da:be:99:7e:db:30:0e:9b:16:eb:f2:d0:90:64:
                    60:dc:7d:a3:1d:c1:0f:07:f3:aa:bd:bf:2a:82:ff:
                    42:7b:25:48:d2:d7:56:6b:4a:23:f2:34:53:4c:19:
                    2a:f8:24:0a:a8:16:6d:39:db:da:fd:d0:59:87:03:
                    90:a4:37:24:51:39:72:fa:cc:50:47:51:8a:00:4a:
                    b9:1f:5f:4e:4c:91:67:cc:44:5d:58:f8:80:b3:83:
                    03:49:55:0d:38:ca:19:51:34:ae:35:6a:da:d2:a2:
                    b5:a3:5a:6e:66:66:4d:4c:be:ab:bc:cc:cc:1e:ce:
                    8f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C8:38:70:44:26:74:BC:B9:DC:9D:29:63:87:1A:02:83:F8:8A:4B
            X509v3 Authority Key Identifier:
                keyid:21:28:18:90:75:89:B2:CA:84:6B:49:D1:09:DD:33:AC:9E:2E:B5:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/ISgYkHWJssqEa0nRCd0zrJ4utUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ISgYkHWJssqEa0nRCd0zrJ4utUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913695E/E7B34972534011F08C869441C4F9AE02/4567CDC2A0EE11F081D8CB27C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:c1:99:ee:11:22:aa:de:1e:d1:94:ab:4c:45:53:46:00:aa:
         f3:c5:37:0e:d3:64:7b:42:43:85:f8:f1:82:2f:85:26:36:0b:
         ac:f5:c3:14:c8:94:cc:d8:79:95:20:b3:4c:0b:89:a6:1a:bf:
         a2:79:0d:f9:b3:1b:10:79:43:d1:de:ca:5a:3e:da:4b:6e:17:
         18:b4:2d:53:b8:74:ff:ac:f2:c3:45:01:29:62:43:a6:61:3d:
         2e:95:38:2d:65:fd:73:b2:48:dd:a4:31:78:3a:8c:18:fc:c7:
         17:db:c0:a6:0a:d4:2b:7e:b4:d4:5b:e7:90:85:0b:28:6a:a3:
         a0:3b:d5:a1:3c:cd:36:4a:5a:5d:8f:03:aa:81:13:81:7d:7c:
         e8:53:6d:3f:b3:0e:71:9c:99:d9:02:77:dc:15:ec:17:85:5e:
         9f:ce:82:81:e7:c2:08:9e:13:e9:4c:bc:ae:6f:94:f0:cb:c0:
         80:48:91:a4:ab:73:2b:62:4e:41:5b:c1:30:e1:c4:ec:1e:da:
         d8:54:04:dd:1a:9f:83:1b:f0:ce:36:f6:64:86:d7:4b:72:8a:
         84:0f:9d:77:f1:9c:33:b4:26:db:bc:20:a6:34:fe:46:da:7f:
         fb:c6:e1:ed:ca:67:9c:41:df:8f:c9:3d:2e:9e:f8:0b:32:77:
         aa:b5:34:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:17:26 2025 by rpki-client