Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/C053613E38B311F08DB63209C4F9AE02.roa
File:                     C053613E38B311F08DB63209C4F9AE02.roa (raw, json)
Hash identifier:          wM0FrDPXj1BZ9PXK7GbiyUW0I1P+yBtcBZcBvUtgK+0=
Subject key identifier:   46:01:0A:63:2F:2B:1A:3E:11:1D:82:2B:E4:07:27:BD:15:CC:50:B5
Certificate issuer:       /CN=A918EF87/serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
Certificate serial:       D1
Authority key identifier: 5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/C053613E38B311F08DB63209C4F9AE02.roa
Signing time:             Wed 01 Jul 2026 08:35:18 +0000
ROA not before:           Wed 01 Jul 2026 08:35:18 +0000
ROA not after:            Fri 30 Oct 2026 00:00:00 +0000
asID:                     132475
IP address blocks:        165.99.90.0/23 maxlen: 23
                          165.99.90.0/24 maxlen: 24
                          165.99.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl
                          rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:23:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EF87, serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
        Validity
            Not Before: Jul  1 08:35:18 2026 GMT
            Not After : Oct 30 00:00:00 2026 GMT
        Subject: CN=6a44d146-8d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:73:6c:84:02:a6:92:8d:47:d6:34:82:1f:cf:
                    a4:d4:83:ce:d2:96:4d:a1:5c:a2:1e:ab:07:dd:5b:
                    c9:1d:5a:b4:84:0c:16:10:eb:30:21:72:54:46:8a:
                    9f:4c:ff:cb:3f:d7:68:63:b6:d4:d2:b8:64:d5:31:
                    a0:7d:43:8b:cc:d4:17:05:1c:15:75:25:43:33:d8:
                    7b:3c:1c:bb:de:d5:e0:18:92:68:65:b7:72:c0:d7:
                    f1:9f:8b:d3:55:0c:34:e2:a4:ec:ef:be:88:24:83:
                    d2:16:52:86:d8:a2:e3:d8:c7:eb:fd:1e:6c:c2:1d:
                    08:e9:43:a0:4d:43:c3:6b:e8:93:58:65:d7:2a:04:
                    03:f6:e6:77:91:10:f7:33:ed:30:3a:5d:63:b3:1f:
                    ed:86:5f:3d:9b:75:03:b2:b3:57:7b:4d:8c:78:f3:
                    da:cb:a6:cd:22:0a:c4:c8:8f:ee:75:f1:fc:60:a1:
                    a8:ea:11:a1:04:d1:d0:eb:39:bd:74:9a:85:6e:dc:
                    cb:47:43:58:7d:07:f1:07:34:b3:a4:87:eb:c0:c9:
                    71:ac:12:3c:29:f5:f8:b9:f3:88:44:bc:2d:47:68:
                    b1:a9:c8:f5:ef:fb:e3:17:0e:1c:97:e3:dd:91:f9:
                    4e:0f:db:67:e9:6c:31:5a:07:aa:c5:e5:6b:cb:ff:
                    d9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:01:0A:63:2F:2B:1A:3E:11:1D:82:2B:E4:07:27:BD:15:CC:50:B5
            X509v3 Authority Key Identifier:
                keyid:5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/C053613E38B311F08DB63209C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:ad:a5:76:0b:af:c1:fb:5f:a6:da:7e:82:e2:37:51:11:59:
         72:96:6f:de:96:1b:a0:15:6a:fb:39:90:74:1b:12:8d:5d:9f:
         a6:2d:9e:99:56:0d:10:32:c8:48:ff:44:55:0f:3b:2b:e8:49:
         8b:69:df:81:df:00:b7:6b:42:53:60:84:19:0d:ad:78:3b:0d:
         4e:75:5c:23:59:02:b9:eb:1d:b7:4b:96:d8:a2:61:c7:05:17:
         03:4c:66:db:b7:3a:d4:5f:fe:52:10:3a:86:37:cc:b7:a2:c9:
         48:fb:cb:68:ee:05:02:19:b5:61:a5:03:39:d1:60:62:37:8f:
         21:b4:bc:db:56:d9:89:90:7e:c9:78:0a:b7:73:4f:8d:b9:84:
         2a:2b:c8:c2:35:ed:6e:20:24:88:46:67:22:7b:c9:94:e6:2b:
         a3:bd:95:13:68:a2:60:a2:b1:3c:5c:a3:11:5a:64:09:ec:b7:
         bf:18:aa:a9:1d:7e:fa:ec:7c:f8:65:4c:54:2f:46:14:97:7f:
         3b:48:be:b6:a5:c8:89:36:37:42:2e:ee:b5:65:4f:0d:ef:1b:
         c8:26:90:a0:11:a2:42:1b:82:2c:58:a5:b0:67:1d:4a:f0:0c:
         4c:84:68:af:02:dc:8e:7c:f8:26:8f:3c:1f:24:87:11:37:79:
         49:39:9b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:03:36 2026 by rpki-client