Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0165302C769D11F0BCD7AA19C4F9AE02.roa
File:                     0165302C769D11F0BCD7AA19C4F9AE02.roa (raw, json)
Hash identifier:          TvrW3k4Dr8R8Sc6clU8Q417Xsx+Go9WSrjwzXiLzv+s=
Subject key identifier:   5C:96:E6:2B:4B:33:EF:49:C3:E9:7A:3B:A4:18:06:5C:5C:94:96:5A
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1F58
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0165302C769D11F0BCD7AA19C4F9AE02.roa
Signing time:             Mon 11 Aug 2025 10:21:55 +0000
ROA not before:           Mon 11 Aug 2025 10:21:55 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150654
IP address blocks:        165.99.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 15:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8024 (0x1f58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Aug 11 10:21:55 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6899c443-5f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:df:59:83:ee:d4:3c:2a:e9:cf:9d:d3:dd:2b:
                    89:3f:f2:12:a5:0e:a0:ad:8e:5f:9b:2a:f1:ee:0a:
                    31:eb:31:cb:ac:9c:52:0b:45:cc:59:4a:76:53:bf:
                    aa:04:29:ee:28:fa:82:d4:8f:73:e5:1f:7c:78:44:
                    15:08:14:a5:41:95:67:36:a1:6e:18:f4:1e:7d:ad:
                    47:5c:04:8d:df:96:11:a5:17:52:0b:a0:e1:1c:42:
                    1f:b7:3e:3b:4c:bd:40:37:ba:2e:d9:4d:11:4e:ae:
                    cf:3a:b1:64:6b:dc:1b:e2:ab:ee:46:07:76:5d:17:
                    dd:db:b7:b6:39:8d:d2:a9:ba:95:1f:68:f8:94:3b:
                    10:48:9a:9f:17:40:2a:11:f2:17:ff:48:53:e0:52:
                    b0:9d:fb:69:dd:e5:78:a7:c7:37:3a:f6:00:c5:57:
                    43:2d:95:8d:47:d8:b8:cc:2c:b3:53:a3:2e:bb:2c:
                    ca:42:a1:02:0e:c7:cc:5d:58:11:bb:ee:3d:f8:05:
                    70:d8:48:90:a3:74:7c:32:30:5d:9f:85:bf:54:02:
                    b8:dd:59:70:c1:0c:ad:50:55:f1:9e:cf:1c:9c:5e:
                    c0:56:8b:d3:33:03:bb:d4:6d:db:89:91:42:8c:0b:
                    e9:6c:c5:38:44:a1:15:65:0d:62:27:7b:13:d7:95:
                    23:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:96:E6:2B:4B:33:EF:49:C3:E9:7A:3B:A4:18:06:5C:5C:94:96:5A
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0165302C769D11F0BCD7AA19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:11:e3:90:ca:1e:24:96:35:22:48:1a:ba:7e:17:53:5a:aa:
         6b:30:f8:ae:43:52:30:a4:db:b9:33:5c:0d:7b:06:cf:1a:6e:
         2d:4b:e2:6a:ed:ee:2d:3f:a1:a8:76:3a:ef:43:ae:67:73:0a:
         3a:62:ba:5f:80:33:34:e1:ab:17:08:52:93:28:01:e8:5a:93:
         8b:c7:4d:59:47:46:ed:a3:24:aa:02:04:26:91:89:74:de:36:
         2b:0d:4b:eb:6b:23:71:51:d1:96:ea:fc:9c:9a:ac:24:ce:52:
         e4:01:a4:c2:32:35:74:10:89:fc:07:1f:eb:f1:3c:23:eb:9b:
         50:84:46:ae:2c:dd:78:0c:57:3e:9d:99:86:59:fc:91:fa:48:
         c4:9e:08:93:f7:f3:d2:73:c2:fd:4c:99:4f:94:49:63:ff:a9:
         a7:b6:f0:1a:af:d8:66:5e:d8:ec:dd:1c:d4:f4:c6:59:d2:25:
         11:d4:8c:67:aa:a1:18:86:0e:1b:ba:cc:78:a7:31:87:13:fe:
         41:a5:25:92:30:78:03:53:d2:b8:1b:8a:72:57:43:62:9e:7f:
         ec:d9:86:fb:01:de:e2:5e:dd:d5:81:39:8a:d3:f9:5b:80:5a:
         f1:92:83:e2:a6:08:19:ca:bc:98:46:99:5e:e2:08:e8:43:a9:
         27:11:b8:3d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICH1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwODExMTAyMTU1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODk5YzQ0My01ZjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyN9Zg+7UPCrpz53T3SuJP/ISpQ6grY5fmyrx7gox6zHLrJxSC0XMWUp2U7+q
BCnuKPqC1I9z5R98eEQVCBSlQZVnNqFuGPQefa1HXASN35YRpRdSC6DhHEIftz47
TL1AN7ou2U0RTq7POrFka9wb4qvuRgd2XRfd27e2OY3SqbqVH2j4lDsQSJqfF0Aq
EfIX/0hT4FKwnftp3eV4p8c3OvYAxVdDLZWNR9i4zCyzU6MuuyzKQqECDsfMXVgR
u+49+AVw2EiQo3R8MjBdn4W/VAK43VlwwQytUFXxns8cnF7AVovTMwO71G3biZFC
jAvpbMU4RKEVZQ1iJ3sT15UjaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFyW5itL
M+9Jw+l6O6QYBlxclJZaMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDE2NTMwMkM3
NjlEMTFGMEJDRDdBQTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAClY/0wDQYJKoZIhvcNAQELBQADggEBAMUR45DKHiSWNSJI
Grp+F1Naqmsw+K5DUjCk27kzXA17Bs8abi1L4mrt7i0/oah2Ou9DrmdzCjpiul+A
MzThqxcIUpMoAehak4vHTVlHRu2jJKoCBCaRiXTeNisNS+trI3FR0Zbq/JyarCTO
UuQBpMIyNXQQifwHH+vxPCPrm1CERq4s3XgMVz6dmYZZ/JH6SMSeCJP389Jzwv1M
mU+USWP/qae28Bqv2GZe2OzdHNT0xlnSJRHUjGeqoRiGDhu6zHinMYcT/kGlJZIw
eANT0rgbinJXQ2Kef+zZhvsB3uJe3dWBOYrT+VuAWvGSg+KmCBnKvJhGmV7iCOhD
qScRuD0=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:00:39 2025 by rpki-client