Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/0CEE97B4563411F09FBF271BC4F9AE02.roa
File:                     0CEE97B4563411F09FBF271BC4F9AE02.roa (raw, json)
Hash identifier:          +5nsa0L3pEvZ7rt0LONhGmy6TtSxJKovU9i/lVSRT84=
Subject key identifier:   67:4D:DE:29:CD:63:9D:28:6A:6E:D5:91:6B:7A:C5:CD:CD:28:95:33
Certificate issuer:       /CN=A913E83E/serialNumber=26A11C57F50BF3A1F7A2784A1D494D5E898361CD
Certificate serial:       03
Authority key identifier: 26:A1:1C:57:F5:0B:F3:A1:F7:A2:78:4A:1D:49:4D:5E:89:83:61:CD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/0CEE97B4563411F09FBF271BC4F9AE02.roa
Signing time:             Tue 01 Jul 2025 04:30:01 +0000
ROA not before:           Tue 01 Jul 2025 04:30:01 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     64072
IP address blocks:        165.101.78.0/24 maxlen: 24
                          165.101.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.crl
                          rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E83E, serialNumber=26A11C57F50BF3A1F7A2784A1D494D5E898361CD
        Validity
            Not Before: Jul  1 04:30:01 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68636448-6a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:04:92:fb:8c:40:ee:9e:14:2d:19:68:61:dd:
                    a4:64:0f:ab:17:26:8f:15:97:c2:23:48:e6:4c:6e:
                    6f:56:86:61:f7:01:49:35:12:64:a3:90:cd:1f:7a:
                    fa:5c:27:95:95:13:8f:a9:a6:3b:8c:00:b2:c4:99:
                    a7:ba:70:c0:fb:e2:d2:5c:11:b5:9f:7d:31:c0:bb:
                    8e:57:64:36:6e:05:4f:f3:02:ab:66:90:26:ad:52:
                    ad:5c:17:c9:59:8b:c2:a3:dd:07:b5:b6:4c:29:eb:
                    7d:60:57:cc:eb:8f:88:42:f2:cf:14:b2:f1:f9:e6:
                    e4:ff:b7:85:a7:c9:0a:fb:dd:15:2d:04:2c:eb:96:
                    97:f8:1c:6e:19:fc:1e:15:88:61:2f:20:59:f2:e6:
                    26:34:e3:7f:3e:05:8b:12:00:2c:5c:fe:92:21:b7:
                    c0:e2:01:8a:23:7e:bb:27:91:e8:bc:5f:5d:68:7d:
                    63:fa:b8:06:53:5a:41:6d:e3:40:69:c7:ff:08:b8:
                    b9:5d:b5:24:e8:c1:96:4b:89:57:50:3f:23:df:96:
                    fd:db:ce:24:cb:a9:37:6d:5e:36:b5:6d:5c:8f:de:
                    3a:71:b0:a1:4a:a1:95:d1:1b:a5:5d:cd:1f:82:a2:
                    d3:21:67:05:a8:1b:a6:ef:b5:11:fa:ed:a8:28:30:
                    fe:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4D:DE:29:CD:63:9D:28:6A:6E:D5:91:6B:7A:C5:CD:CD:28:95:33
            X509v3 Authority Key Identifier:
                keyid:26:A1:1C:57:F5:0B:F3:A1:F7:A2:78:4A:1D:49:4D:5E:89:83:61:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/JqEcV_UL86H3onhKHUlNXomDYc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JqEcV_UL86H3onhKHUlNXomDYc0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E83E/EB0F758E563111F0A1AAE24DC4F9AE02/0CEE97B4563411F09FBF271BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:f8:c7:b5:8c:46:38:ea:1d:f0:0e:c6:61:03:b0:8c:17:94:
         d3:d4:fc:23:e5:09:2e:5d:dc:e9:2c:c7:ba:78:37:da:ae:70:
         d7:59:e7:a7:ca:b1:fb:ed:bc:fe:24:7d:8f:07:20:a1:82:ff:
         03:b1:d8:fe:d4:cb:0e:fa:a4:a1:02:27:cd:06:00:78:9e:a2:
         8d:63:87:94:9d:7b:b5:8c:d1:eb:7a:fd:36:65:b5:cd:5e:20:
         03:2e:6a:95:57:73:63:3c:a3:b4:f8:89:5b:40:90:02:03:c4:
         05:f2:ea:9d:85:35:8b:ff:d9:c1:a1:fd:d1:f2:32:a3:87:45:
         fc:50:e8:dc:6e:7e:5a:a6:69:16:c7:b7:51:49:cb:4b:1f:23:
         88:f1:ea:e1:44:4a:11:51:a5:0d:1c:e4:a1:e9:fa:e9:72:8e:
         77:31:2a:df:f3:bc:a4:31:bd:61:b8:35:0b:b1:54:af:d2:71:
         0f:21:5d:88:61:3c:35:1f:bf:a4:ec:48:9c:35:ea:70:27:f9:
         d9:df:f2:ef:5a:f5:2e:14:8d:03:87:6a:99:7f:a9:ca:ab:f5:
         05:eb:fe:b4:6e:c9:89:99:6f:f7:f8:9b:8c:25:35:0f:bb:a3:
         47:63:e6:88:ff:0c:88:1e:ce:a6:92:17:b1:e4:dd:8d:0e:86:
         42:7a:d7:3c
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
RTgzRTExMC8GA1UEBRMoMjZBMTFDNTdGNTBCRjNBMUY3QTI3ODRBMUQ0OTRENUU4
OTgzNjFDRDAeFw0yNTA3MDEwNDMwMDFaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4NjM2NDQ4LTZhMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5BJL7jEDunhQtGWhh3aRkD6sXJo8Vl8IjSOZMbm9WhmH3AUk1EmSjkM0fevpc
J5WVE4+ppjuMALLEmae6cMD74tJcEbWffTHAu45XZDZuBU/zAqtmkCatUq1cF8lZ
i8Kj3Qe1tkwp631gV8zrj4hC8s8UsvH55uT/t4WnyQr73RUtBCzrlpf4HG4Z/B4V
iGEvIFny5iY0438+BYsSACxc/pIht8DiAYojfrsnkei8X11ofWP6uAZTWkFt40Bp
x/8IuLldtSTowZZLiVdQPyPflv3bziTLqTdtXja1bVyP3jpxsKFKoZXRG6VdzR+C
otMhZwWoG6bvtRH67agoMP69AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUZ03eKc1j
nShqbtWRa3rFzc0olTMwHwYDVR0jBBgwFoAUJqEcV/UL86H3onhKHUlNXomDYc0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFODNFL0VCMEY3NThFNTYz
MTExRjBBMUFBRTI0REM0RjlBRTAyL0pxRWNWX1VMODZIM29uaEtIVWxOWG9tRFlj
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvSnFFY1ZfVUw4Nkgzb25oS0hVbE5Yb21EWWMwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RTgzRS9FQjBGNzU4RTU2MzExMUYwQTFBQUUyNERDNEY5QUUwMi8wQ0VFOTdCNDU2
MzQxMUYwOUZCRjI3MUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaVlTjANBgkqhkiG9w0BAQsFAAOCAQEAqvjHtYxGOOod8A7G
YQOwjBeU09T8I+UJLl3c6SzHung32q5w11nnp8qx++28/iR9jwcgoYL/A7HY/tTL
DvqkoQInzQYAeJ6ijWOHlJ17tYzR63r9NmW1zV4gAy5qlVdzYzyjtPiJW0CQAgPE
BfLqnYU1i//ZwaH90fIyo4dF/FDo3G5+WqZpFse3UUnLSx8jiPHq4URKEVGlDRzk
oen66XKOdzEq3/O8pDG9Ybg1C7FUr9JxDyFdiGE8NR+/pOxInDXqcCf52d/y71r1
LhSNA4dqmX+pyqv1Bev+tG7JiZlv9/ibjCU1D7ujR2PmiP8MiB7OppIXseTdjQ6G
QnrXPA==
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:26:30 2025 by rpki-client