Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/22CDB420688111F0ADE02116C4F9AE02.roa
File:                     22CDB420688111F0ADE02116C4F9AE02.roa (raw, json)
Hash identifier:          cU0btbGETNSiVfIPEybbQHdGLtibsKCuD5znry5aMpk=
Subject key identifier:   39:71:69:A5:3E:98:D5:B8:E7:B9:9C:C2:3F:05:22:18:3C:E5:13:26
Certificate issuer:       /CN=A9166279/serialNumber=474BF735ED28F3518BCE0AC462958BEC582CD765
Certificate serial:       0E
Authority key identifier: 47:4B:F7:35:ED:28:F3:51:8B:CE:0A:C4:62:95:8B:EC:58:2C:D7:65
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/22CDB420688111F0ADE02116C4F9AE02.roa
Signing time:             Thu 24 Jul 2025 11:27:09 +0000
ROA not before:           Thu 24 Jul 2025 11:27:09 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     141031
IP address blocks:        165.101.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl
                          rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166279, serialNumber=474BF735ED28F3518BCE0AC462958BEC582CD765
        Validity
            Not Before: Jul 24 11:27:09 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6882188d-26e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b3:af:b9:78:0b:62:55:58:31:3d:a0:03:fb:
                    aa:41:8c:ab:12:d7:9b:03:cb:1d:49:a9:c9:60:70:
                    ed:d2:4b:bd:2d:71:55:4c:33:70:71:d3:11:6f:31:
                    e2:00:df:45:7f:ce:59:0e:ef:8a:5e:f9:6d:55:c3:
                    70:3a:bb:00:17:19:7b:24:73:78:d5:38:9a:99:15:
                    d9:9e:e0:fd:08:da:30:ff:47:45:03:24:1a:70:81:
                    2f:ed:dd:76:3b:ad:80:a3:0f:d1:0d:3b:75:ae:7c:
                    2e:b4:b8:21:84:4b:88:23:aa:9b:71:d4:69:b3:bf:
                    21:b8:2c:7d:d0:cf:8f:32:f8:0b:40:06:59:04:46:
                    6b:12:55:a3:03:fc:8c:1b:61:a1:5f:8b:40:09:b1:
                    51:d1:f2:25:a5:be:db:ad:7a:2d:9f:2f:f2:55:77:
                    d1:e6:d3:ce:f6:ba:50:b8:07:47:95:19:43:fd:11:
                    4a:93:3d:71:c1:fe:cc:cd:39:3c:91:33:af:e3:59:
                    74:ca:f9:40:b9:cc:db:ef:a3:c7:35:2c:77:4a:a7:
                    a9:31:f7:b8:de:b8:63:78:e5:2f:57:3b:fe:49:f0:
                    62:3a:9f:28:7f:76:73:bd:be:5e:6e:64:c1:3d:2a:
                    cc:ee:d7:49:07:99:e5:1b:19:1b:dc:0e:99:a7:77:
                    8e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:71:69:A5:3E:98:D5:B8:E7:B9:9C:C2:3F:05:22:18:3C:E5:13:26
            X509v3 Authority Key Identifier:
                keyid:47:4B:F7:35:ED:28:F3:51:8B:CE:0A:C4:62:95:8B:EC:58:2C:D7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/R0v3Ne0o81GLzgrEYpWL7Fgs12U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R0v3Ne0o81GLzgrEYpWL7Fgs12U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166279/38B2C7BC58CD11F0AD100877C4F9AE02/22CDB420688111F0ADE02116C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:8b:d8:dc:c0:91:21:1d:69:b8:20:c1:9b:bd:42:c8:53:ca:
         ba:c5:61:06:07:28:08:ef:35:2b:3f:83:f7:35:03:79:3a:b7:
         8f:e5:a9:a4:9a:1c:7d:3b:15:9b:65:24:9a:f4:9d:41:25:fb:
         26:0d:f5:86:c4:e0:64:9d:4f:38:e8:9a:a7:da:89:02:8d:5f:
         d9:cc:0b:66:d4:7e:4a:20:8a:8c:8d:20:e7:4c:3f:bb:16:10:
         93:6e:2f:cd:42:8c:00:74:14:33:78:e4:93:87:2d:1c:b7:4f:
         bd:d8:b0:2c:89:30:db:78:21:e0:cc:89:e7:8d:65:99:06:d5:
         58:0d:a4:93:cc:c8:27:6d:8e:ee:1a:be:d5:1a:9e:60:de:0a:
         c6:36:ec:d9:9f:e1:6b:d4:5e:05:d0:00:8c:da:b1:97:5f:8b:
         e7:63:17:b3:fe:14:9b:02:e3:b1:5c:60:25:80:01:ba:7e:2b:
         aa:1e:a3:a1:64:22:ee:1f:96:2e:16:8c:87:5b:77:0e:ed:75:
         b8:20:b6:66:ac:dc:ec:c0:c8:e8:4a:73:84:56:37:bf:10:0b:
         49:84:81:24:5b:00:9b:27:99:bf:c0:a0:3c:ee:e3:fc:a7:d4:
         5e:20:4b:6d:26:d3:42:1c:cb:f8:5d:ba:22:65:fd:09:d7:56:
         ae:9e:60:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:11:19 2025 by rpki-client