Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/55418358654A11F09C239084C4F9AE02.roa
File:                     55418358654A11F09C239084C4F9AE02.roa (raw, json)
Hash identifier:          udDF0+4Fbi+k+BtlmU9I90c7Zyi75cUJclDUUNYc0gY=
Subject key identifier:   59:B0:3E:1D:80:E8:00:A2:FB:E5:45:C2:88:49:25:56:CC:CD:DB:0E
Certificate issuer:       /CN=A91410C5/serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53
Certificate serial:       11
Authority key identifier: 57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/55418358654A11F09C239084C4F9AE02.roa
Signing time:             Sun 20 Jul 2025 09:17:18 +0000
ROA not before:           Sun 20 Jul 2025 09:17:18 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     24499
IP address blocks:        165.99.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.crl
                          rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91410C5, serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53
        Validity
            Not Before: Jul 20 09:17:18 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=687cb41e-28a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:69:79:47:44:fe:ec:7b:9e:57:03:82:e7:48:
                    c7:9e:74:e0:2d:be:57:01:fe:39:f6:d9:95:e6:08:
                    bd:68:34:fa:e4:4d:91:f2:4e:1f:fe:0d:50:04:9d:
                    6a:4a:11:4a:ae:25:6f:9a:99:18:be:ff:c9:79:06:
                    22:53:46:5a:ca:a5:f8:31:6d:80:4f:26:67:9e:c9:
                    91:ad:c6:cf:a5:92:4d:d0:4d:26:04:10:72:b3:d4:
                    90:bb:f7:76:7d:43:40:fc:60:36:29:01:93:55:1a:
                    0e:6a:9a:47:4a:61:ea:c0:9f:0a:9b:1d:e6:c5:42:
                    c7:e2:e0:13:f2:3c:c0:06:d3:d0:1e:d5:6e:37:73:
                    6b:34:f2:90:5a:cc:77:66:db:5d:58:18:cd:b9:08:
                    7a:96:d6:1a:ca:2f:74:40:f9:86:4e:44:f4:ea:64:
                    89:93:5a:45:d5:a3:26:a4:b6:80:00:8e:4c:d1:55:
                    4c:fa:2a:1a:61:7f:b9:d6:1d:cb:fa:a7:dd:cf:0c:
                    b2:53:0d:f6:b3:76:08:05:42:a7:87:26:de:29:33:
                    49:9d:3a:7a:bc:23:cd:d5:80:a3:33:09:3d:b1:8f:
                    75:98:5a:d5:51:02:c2:68:0c:af:4b:e8:b8:cb:29:
                    f3:12:ed:55:53:aa:3c:02:7f:e2:d7:6d:66:9c:1a:
                    f4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B0:3E:1D:80:E8:00:A2:FB:E5:45:C2:88:49:25:56:CC:CD:DB:0E
            X509v3 Authority Key Identifier:
                keyid:57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/55418358654A11F09C239084C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:96:ef:f2:e9:47:b6:cf:ee:0c:34:82:b0:77:07:3c:2d:c0:
         b6:c6:35:4f:f7:29:14:c4:f2:6d:11:44:c9:25:6e:59:73:2a:
         14:9e:f7:81:1c:d5:7d:54:d6:78:4e:22:df:7c:d4:a9:9f:2e:
         62:13:e9:ca:7f:b8:07:0d:87:09:86:05:0d:01:31:17:b9:ed:
         17:be:5b:b8:07:b0:15:fc:b9:78:4f:1e:b6:70:0d:6a:e0:86:
         df:71:e6:0d:54:78:e9:80:b0:f4:5e:c2:2d:bc:b6:a2:55:db:
         c5:c6:f4:81:ad:0f:eb:a9:3c:12:78:f4:37:e5:a1:0b:28:0f:
         83:1f:09:04:c0:83:e1:8f:18:13:01:f4:43:42:4e:b4:0c:38:
         85:7f:cd:12:2a:8e:be:d3:2f:0c:34:d7:78:d0:6f:d6:20:b2:
         8a:7a:a8:73:38:98:de:ad:21:e3:00:ec:49:fa:ac:90:e1:78:
         aa:7c:31:bb:72:73:36:8a:62:dc:2c:6b:84:ae:e8:5c:82:57:
         a2:b7:11:2c:e9:17:07:4b:71:f0:c1:80:5c:68:42:f9:f4:4b:
         84:14:c8:82:ac:15:02:d7:50:e8:11:e5:3d:b3:a8:98:6d:47:
         c7:82:df:ad:38:c4:5b:ab:d1:df:e4:cb:77:94:5b:84:80:cd:
         0d:2b:b9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:22:18 2025 by rpki-client