Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/B0316860572F11F088461C69C4F9AE02.roa
File:                     B0316860572F11F088461C69C4F9AE02.roa (raw, json)
Hash identifier:          5V0QNOw88FXF/mGu8PltzmfvTB733rLSxbGFqy6I/Rw=
Subject key identifier:   D1:52:69:A0:D6:BB:A9:DC:BE:51:88:2E:61:38:F7:76:4E:9F:4A:02
Certificate issuer:       /CN=A91410C5/serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53
Certificate serial:       03
Authority key identifier: 57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/B0316860572F11F088461C69C4F9AE02.roa
Signing time:             Wed 02 Jul 2025 10:31:18 +0000
ROA not before:           Wed 02 Jul 2025 10:31:18 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     24499
IP address blocks:        165.99.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.crl
                          rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91410C5, serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53
        Validity
            Not Before: Jul  2 10:31:18 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68650a76-7b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:58:d2:41:0b:a2:c3:d2:42:a9:1b:98:0c:a9:
                    63:99:2c:cd:f6:cd:fb:a5:1a:09:88:3d:73:de:34:
                    cc:a6:f3:eb:9a:ef:5f:40:07:ea:6a:c7:91:81:b2:
                    fe:b1:10:f2:f1:f3:89:b6:9c:fa:62:2c:f8:8f:bf:
                    ea:1f:b9:d2:72:c9:b5:b0:a6:9e:9d:72:49:fc:c5:
                    e0:7a:d3:82:e6:10:44:b6:6a:02:ad:15:2f:e9:3c:
                    6a:1e:ad:e3:78:40:17:c5:de:ce:95:21:f7:15:12:
                    5b:6d:86:ca:42:0e:63:20:a1:ca:37:b8:3a:ca:60:
                    5d:a2:22:cb:d2:09:33:3d:7b:b4:d0:ed:ab:49:8c:
                    55:17:89:4b:b2:7c:f3:cc:4b:b8:21:a0:52:06:a8:
                    1b:93:6e:ad:03:4a:a6:63:aa:2e:12:74:a6:a6:b5:
                    b2:0e:d8:d9:07:1a:37:4a:36:64:48:5f:2c:f4:03:
                    2d:c9:2b:4c:dc:d2:8e:43:20:24:0b:61:14:ae:07:
                    f3:d3:f2:c0:7c:2b:28:cd:dc:8e:e8:13:b0:dd:61:
                    86:e9:ec:c4:69:ac:9c:2d:78:be:f5:e0:d0:fc:31:
                    1f:81:e0:a6:36:06:ca:af:8e:15:80:0f:a6:11:e9:
                    29:28:54:e6:72:0d:25:30:3a:8f:6f:19:7e:a4:32:
                    be:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:52:69:A0:D6:BB:A9:DC:BE:51:88:2E:61:38:F7:76:4E:9F:4A:02
            X509v3 Authority Key Identifier:
                keyid:57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/B0316860572F11F088461C69C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:e2:14:7b:39:9b:2e:a0:b9:3d:e3:a7:0a:7c:e3:ff:25:7e:
         1f:07:84:26:b1:e7:7b:00:17:ea:b5:fa:29:a4:12:4d:1e:52:
         3c:57:c7:9b:75:26:4b:13:04:f5:72:b4:71:c5:5d:9a:96:12:
         0e:b3:54:79:26:bf:f8:11:ba:e1:33:5a:60:5c:01:bb:8d:d2:
         cb:21:9f:f6:68:ed:f3:32:4e:b0:19:80:74:36:37:a8:fa:9e:
         46:1c:2a:45:62:6e:48:4d:32:e8:9f:11:d4:c8:71:fc:3c:ca:
         c2:e0:db:a8:c3:ec:77:93:20:9e:f4:fa:00:97:e6:be:e6:88:
         a1:f9:cb:c4:a5:39:97:b3:69:18:cc:9b:ce:b9:03:04:bd:9d:
         ec:8a:e2:6a:82:fd:c2:a6:27:21:ba:c9:c4:4d:98:c2:5d:93:
         33:e8:bb:b4:49:a5:bc:33:53:30:ed:24:64:70:fc:6a:0f:33:
         3a:05:99:20:1e:3c:aa:87:c6:8a:b2:8f:62:8b:94:22:eb:19:
         d3:26:29:fe:17:ae:a2:0e:d2:a2:6c:14:88:ff:3f:c8:fc:be:
         b6:47:d0:b1:8b:89:65:be:bf:81:d6:a7:f3:41:33:e1:df:ef:
         49:24:a5:29:93:d0:5b:46:a3:1b:7f:cd:78:49:0c:a0:99:e3:
         4a:b3:8a:a3
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MTBDNTExMC8GA1UEBRMoNTc4ODQ5QzlCOTRBMzU1QTc2MjBBOTc0Nzk3M0QyMUJC
RURBM0Y1MzAeFw0yNTA3MDIxMDMxMThaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4NjUwYTc2LTdiNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvWNJBC6LD0kKpG5gMqWOZLM32zfulGgmIPXPeNMym8+ua719AB+pqx5GBsv6x
EPLx84m2nPpiLPiPv+ofudJyybWwpp6dckn8xeB604LmEES2agKtFS/pPGoereN4
QBfF3s6VIfcVEltthspCDmMgoco3uDrKYF2iIsvSCTM9e7TQ7atJjFUXiUuyfPPM
S7ghoFIGqBuTbq0DSqZjqi4SdKamtbIO2NkHGjdKNmRIXyz0Ay3JK0zc0o5DICQL
YRSuB/PT8sB8KyjN3I7oE7DdYYbp7MRprJwteL714ND8MR+B4KY2BsqvjhWAD6YR
6SkoVOZyDSUwOo9vGX6kMr5NAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU0VJpoNa7
qdy+UYguYTj3dk6fSgIwHwYDVR0jBBgwFoAUV4hJyblKNVp2IKl0eXPSG77aP1Mw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxMEM1L0QxMDlFQkQwNTcy
RTExRjA5NUY3RkU0OEM0RjlBRTAyL1Y0aEp5YmxLTlZwMklLbDBlWFBTRzc3YVAx
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvVjRoSnlibEtOVnAySUtsMGVYUFNHNzdhUDFNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MTBDNS9EMTA5RUJEMDU3MkUxMUYwOTVGN0ZFNDhDNEY5QUUwMi9CMDMxNjg2MDU3
MkYxMUYwODg0NjFDNjlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKVj/zANBgkqhkiG9w0BAQsFAAOCAQEAUeIUezmbLqC5PeOn
Cnzj/yV+HweEJrHnewAX6rX6KaQSTR5SPFfHm3UmSxME9XK0ccVdmpYSDrNUeSa/
+BG64TNaYFwBu43SyyGf9mjt8zJOsBmAdDY3qPqeRhwqRWJuSE0y6J8R1Mhx/DzK
wuDbqMPsd5MgnvT6AJfmvuaIofnLxKU5l7NpGMybzrkDBL2d7IriaoL9wqYnIbrJ
xE2Ywl2TM+i7tEmlvDNTMO0kZHD8ag8zOgWZIB48qofGirKPYouUIusZ0yYp/heu
og7SomwUiP8/yPy+tkfQsYuJZb6/gdan80Ez4d/vSSSlKZPQW0ajG3/NeEkMoJnj
SrOKow==
-----END CERTIFICATE-----
Generated at Thu Jul 3 15:24:55 2025 by rpki-client