Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0D83164E481711F08F365D0FC4F9AE02.roa
File:                     0D83164E481711F08F365D0FC4F9AE02.roa (raw, json)
Hash identifier:          NldJTeyuZgYCXKDX7nUJITNNsuhXnB6SZ4fhy6MVZnM=
Subject key identifier:   CE:80:2C:A7:0D:AD:03:CD:43:95:4C:22:81:84:9D:24:C7:C6:9D:B0
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1EA4
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0D83164E481711F08F365D0FC4F9AE02.roa
Signing time:             Fri 13 Jun 2025 05:27:10 +0000
ROA not before:           Fri 13 Jun 2025 05:27:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137159
IP address blocks:        165.99.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7844 (0x1ea4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jun 13 05:27:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=684bb6ad-967f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:96:c9:e7:98:75:3a:2b:bf:9f:bf:27:3f:08:
                    62:bb:2f:ae:59:74:41:3b:1f:89:59:3f:0e:17:7e:
                    a6:d1:0a:1c:2d:b8:db:7d:b1:6c:8c:fe:99:66:a9:
                    a6:95:d8:e3:ae:3b:62:5e:27:73:38:88:6d:87:b9:
                    15:e1:fb:cb:c4:4c:43:34:fb:db:51:d1:23:d5:33:
                    a1:16:33:47:80:38:28:f8:b4:01:e5:02:1e:6c:e5:
                    38:3d:88:10:7c:9e:d0:75:02:64:41:65:9d:0c:01:
                    08:ef:27:32:59:0d:47:f0:78:27:a4:fe:35:b4:ca:
                    38:bd:e1:e1:f7:a7:13:99:5e:2e:a6:d1:21:64:98:
                    22:29:15:0e:d3:ac:3c:26:5d:e7:c2:a4:ca:d4:a6:
                    12:53:aa:fe:ea:ce:90:e7:1d:f5:be:aa:e5:12:2f:
                    7b:92:2f:7b:bb:6c:bd:3f:70:77:ab:02:2b:d0:cf:
                    2c:e3:92:af:1a:cc:e7:1e:9f:7a:57:05:87:5c:9a:
                    a3:33:19:fb:b2:c6:a2:93:81:8c:8c:53:63:44:32:
                    1a:b5:24:44:60:0b:79:93:96:19:2d:74:34:ce:c0:
                    ac:bf:8a:75:ef:fb:53:ee:30:6a:43:f7:9b:6e:c7:
                    78:6e:41:34:73:66:9e:58:65:bd:18:80:44:3a:0d:
                    bc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:80:2C:A7:0D:AD:03:CD:43:95:4C:22:81:84:9D:24:C7:C6:9D:B0
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0D83164E481711F08F365D0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:1e:cd:d8:eb:83:02:9e:d5:1f:42:cb:1d:ff:18:9d:aa:46:
         d9:60:73:36:4a:be:6f:7f:1d:23:84:fa:8f:81:69:3c:8f:eb:
         a5:28:03:40:0b:f0:f9:f9:e4:ba:b1:63:62:15:ca:b1:e4:d7:
         b5:d2:c8:c9:93:88:ff:8b:f4:2b:11:60:e1:98:c1:76:0c:1c:
         76:d9:9e:d0:cd:b8:b3:bc:69:68:63:de:cd:59:59:9a:e9:24:
         00:63:20:87:d7:cd:f1:f5:72:7b:4b:7b:a3:47:68:23:b9:65:
         92:6d:5f:81:0c:f3:fc:a2:9a:4a:26:c3:e9:fa:e8:4d:d9:4a:
         a4:48:ac:f0:8b:b0:80:c5:e9:f3:26:1a:c7:a0:c7:39:bf:f9:
         1c:9c:c0:c4:41:62:81:fd:df:fe:1a:e6:66:c1:70:21:45:55:
         2d:5b:e9:9c:db:34:7b:6c:80:5d:66:d5:ee:65:d3:89:39:e3:
         78:df:bf:7f:97:8b:dd:14:ff:84:b5:40:67:79:10:a6:89:b3:
         cd:54:8e:96:fb:e3:58:39:43:c9:47:ff:eb:e6:a5:82:57:b4:
         4f:ca:b9:bd:f3:3a:99:f8:ed:a3:13:3c:35:61:75:d3:8a:38:
         0e:e4:05:53:d3:0f:67:6c:31:62:c8:80:1e:a8:a9:3d:03:fc:
         76:92:15:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:21:29 2025 by rpki-client