Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/E9331F863B2911F084C93028C4F9AE02.roa
File:                     E9331F863B2911F084C93028C4F9AE02.roa (raw, json)
Hash identifier:          Pnz5aFAbJ5Bkp2gyQ97UceAHI3FhcCchW1EhmLkhr+s=
Subject key identifier:   32:C3:71:E4:61:0B:3F:21:BB:1D:11:DC:21:AD:DE:61:90:B6:E7:70
Certificate issuer:       /CN=A913075E/serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7
Certificate serial:       0F
Authority key identifier: 6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/E9331F863B2911F084C93028C4F9AE02.roa
Signing time:             Tue 27 May 2025 18:39:24 +0000
ROA not before:           Tue 27 May 2025 18:39:24 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     153523
IP address blocks:        165.99.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl
                          rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 07:23:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913075E, serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7
        Validity
            Not Before: May 27 18:39:24 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=683606dc-ca65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:43:a8:ab:3c:7a:fa:ba:67:fd:25:92:c6:
                    41:7b:94:cc:2a:4d:d9:d2:28:1b:b6:82:dd:57:99:
                    bd:c4:04:35:2c:20:17:24:d3:55:d6:e5:5a:df:b2:
                    20:42:a5:41:84:43:a5:68:2d:1d:bb:2b:c6:4c:ff:
                    d7:c9:6b:62:0d:37:20:e4:b8:16:a0:b0:e3:d0:63:
                    2a:7a:c3:d1:98:b7:da:0c:03:51:1d:ea:fe:99:a3:
                    dc:ec:a3:24:b2:d8:fd:66:1a:07:79:43:d8:26:62:
                    c3:b5:3a:f3:7f:89:d9:3f:da:a6:5c:3b:c4:d5:fa:
                    0a:bf:62:1e:2a:e0:08:64:26:1c:6a:7b:bd:78:7d:
                    c6:ff:16:2b:8a:82:67:89:65:f6:c3:b6:29:95:ac:
                    de:db:d9:51:62:33:e2:46:b0:28:06:4a:8f:7d:9f:
                    dd:c5:43:a5:e2:38:26:49:3d:e0:57:a1:2b:c8:79:
                    b4:ad:08:fd:c5:71:b5:a6:6f:27:6e:14:6f:02:09:
                    7b:e5:15:8b:8e:b6:77:cb:4b:24:f3:24:af:8d:11:
                    9d:bd:dd:4b:0f:a4:6e:89:a0:44:87:07:9f:f7:25:
                    eb:10:44:c7:b1:8d:e4:ff:80:56:b6:69:f1:2f:05:
                    86:be:b1:c7:6f:3b:d5:16:3d:65:8a:88:e3:ac:06:
                    19:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C3:71:E4:61:0B:3F:21:BB:1D:11:DC:21:AD:DE:61:90:B6:E7:70
            X509v3 Authority Key Identifier:
                keyid:6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/E9331F863B2911F084C93028C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:be:f1:4f:ee:5c:68:8b:a3:1b:a6:f4:52:e6:b8:f6:d4:4f:
         d7:61:fd:5f:ea:02:36:12:46:8a:20:8c:a4:b7:a7:95:60:36:
         ab:82:32:1b:87:5b:27:f9:37:0d:0e:aa:36:52:7b:6b:47:89:
         89:47:63:a6:c4:2c:a1:72:24:89:ff:6a:b8:cd:38:77:08:08:
         2c:26:b0:00:7c:87:42:0b:fc:06:60:90:36:13:8a:bb:d2:62:
         84:a7:ea:ff:1c:a2:1c:cf:8b:aa:6e:52:51:b9:67:4c:38:0d:
         71:0d:58:84:85:af:14:c0:97:cd:27:8f:24:43:2b:ed:3f:75:
         47:30:ec:3d:ec:27:29:bc:2e:e5:3e:7c:52:4f:ee:71:3c:00:
         a2:10:3e:e3:a9:72:e8:4b:a7:2c:7c:d7:3c:73:4d:be:0d:cc:
         eb:69:87:f8:f0:2b:48:51:84:28:14:4c:af:02:fd:ab:d3:54:
         3e:ff:c6:ae:d3:17:41:91:0b:bd:04:23:7d:2a:4b:6a:04:7c:
         2e:94:aa:59:fc:a3:86:1c:af:cd:18:77:4f:b9:d7:28:78:1c:
         a9:a9:95:a3:8d:85:a8:6a:35:0f:dd:96:a0:92:d0:b6:39:63:
         5f:c7:bf:cd:9d:95:2e:92:bf:52:55:71:4c:86:b6:d3:bf:ac:
         59:23:7e:63
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MDc1RTExMC8GA1UEBRMoNkVBQzQxNjVFQzgyOTk4QTg5OEFBREZERDUxMUNDMkEw
NDZGRUVBNzAeFw0yNTA1MjcxODM5MjRaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4MzYwNmRjLWNhNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCUEOoqzx6+rpn/SWSxkF7lMwqTdnSKBu2gt1Xmb3EBDUsIBck01XW5VrfsiBC
pUGEQ6VoLR27K8ZM/9fJa2INNyDkuBagsOPQYyp6w9GYt9oMA1Ed6v6Zo9zsoySy
2P1mGgd5Q9gmYsO1OvN/idk/2qZcO8TV+gq/Yh4q4AhkJhxqe714fcb/FiuKgmeJ
ZfbDtimVrN7b2VFiM+JGsCgGSo99n93FQ6XiOCZJPeBXoSvIebStCP3FcbWmbydu
FG8CCXvlFYuOtnfLSyTzJK+NEZ293UsPpG6JoESHB5/3JesQRMexjeT/gFa2afEv
BYa+scdvO9UWPWWKiOOsBhnRAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUMsNx5GEL
PyG7HRHcIa3eYZC253AwHwYDVR0jBBgwFoAUbqxBZeyCmYqJiq391RHMKgRv7qcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNzVFL0Q3MDhBQjFBMzE2
RTExRjBCQjMyN0UzMEM0RjlBRTAyL2JxeEJaZXlDbVlxSmlxMzkxUkhNS2dSdjdx
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvYnF4QlpleUNtWXFKaXEzOTFSSE1LZ1J2N3FjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDc1RS9ENzA4QUIxQTMxNkUxMUYwQkIzMjdFMzBDNEY5QUUwMi9FOTMzMUY4NjNC
MjkxMUYwODRDOTMwMjhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaVjPjANBgkqhkiG9w0BAQsFAAOCAQEAUL7xT+5caIujG6b0
Uua49tRP12H9X+oCNhJGiiCMpLenlWA2q4IyG4dbJ/k3DQ6qNlJ7a0eJiUdjpsQs
oXIkif9quM04dwgILCawAHyHQgv8BmCQNhOKu9JihKfq/xyiHM+Lqm5SUblnTDgN
cQ1YhIWvFMCXzSePJEMr7T91RzDsPewnKbwu5T58Uk/ucTwAohA+46ly6EunLHzX
PHNNvg3M62mH+PArSFGEKBRMrwL9q9NUPv/GrtMXQZELvQQjfSpLagR8LpSqWfyj
hhyvzRh3T7nXKHgcqamVo42FqGo1D92WoJLQtjljX8e/zZ2VLpK/UlVxTIa207+s
WSN+Yw==
-----END CERTIFICATE-----
Generated at Fri Jun 20 13:52:16 2025 by rpki-client