Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/583C86380BB211ED8F05E427C4F9AE02.roa
File:                     583C86380BB211ED8F05E427C4F9AE02.roa (raw, json)
Hash identifier:          cG1NSTCHLn5vicb1ufAMlhQdqrLCijyh6U7DgWV8zhY=
Subject key identifier:   2F:03:2D:E0:B2:BE:C3:B8:6F:76:B4:66:B6:52:F4:2A:DE:47:8B:CA
Certificate issuer:       /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial:       35B1
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/583C86380BB211ED8F05E427C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:40:45 +0000
ROA not before:           Fri 04 Jul 2025 14:50:20 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     396982
IP address blocks:        165.213.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13745 (0x35b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
        Validity
            Not Before: Jul  4 14:50:20 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4882d-e28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e0:64:c8:83:2e:49:e1:ee:f2:51:17:4c:8e:
                    54:5d:da:c9:d1:78:c3:a6:67:6b:75:4e:dc:07:b8:
                    01:a9:5b:61:89:7d:04:a6:89:84:bd:b2:02:c1:e4:
                    90:99:1d:bd:fc:ec:61:84:6c:2b:72:36:0a:1f:70:
                    68:c2:3e:09:f5:fa:b2:43:ee:18:34:ef:cc:11:fa:
                    d2:59:bb:1d:a1:2c:2c:76:90:4d:3b:ef:d1:ca:09:
                    24:12:a9:b5:64:07:87:88:40:1b:8c:af:d9:0c:63:
                    74:9c:da:5f:0f:20:2b:7c:38:ab:77:6f:2a:bb:ea:
                    71:a9:0b:99:02:e9:ed:23:7e:2f:a7:0e:c1:22:55:
                    ff:a0:8b:76:09:18:ec:1d:1d:3a:2c:43:14:06:a6:
                    92:09:84:23:fc:15:eb:78:2a:e4:d9:f8:c8:94:78:
                    6a:19:b8:44:b7:07:a2:05:d1:8d:f3:cb:2f:aa:15:
                    2e:ee:cb:7d:29:47:bd:97:1a:26:d8:82:6b:ab:46:
                    b7:65:1e:ce:f2:d2:53:31:7d:c6:9d:78:cd:e1:fa:
                    36:55:b0:69:95:81:92:b8:39:07:b1:9e:db:12:89:
                    3f:7f:20:2e:2d:83:08:e9:31:a1:dc:2c:6a:8c:18:
                    e0:22:97:2e:6e:e4:8a:3e:5c:09:24:b4:ce:14:7a:
                    f8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:03:2D:E0:B2:BE:C3:B8:6F:76:B4:66:B6:52:F4:2A:DE:47:8B:CA
            X509v3 Authority Key Identifier:
                keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/583C86380BB211ED8F05E427C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.213.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:39:0d:d0:ea:0d:3a:1c:d5:87:09:d4:6a:da:3b:f6:25:bb:
         03:c4:bf:18:a9:1f:e8:4a:ba:3a:13:94:8f:7c:4e:46:30:a9:
         10:aa:77:09:43:76:91:15:9b:45:cf:02:ae:ce:64:95:a5:09:
         8c:e4:f6:a6:15:45:b4:c7:3b:3d:97:5b:f7:cc:7e:b7:8a:ea:
         59:29:ff:1a:27:f9:85:82:9e:c1:63:9e:ff:87:d5:8b:3d:2b:
         34:39:96:c4:5f:12:4a:7f:cb:68:e4:94:a1:f9:00:49:fa:fc:
         82:88:87:36:aa:eb:dd:2c:66:5a:06:d9:5d:1c:19:68:a9:5f:
         cc:ef:43:7f:5e:57:27:be:ce:f6:22:f6:b4:8d:66:a7:c2:91:
         37:6d:85:7d:a7:ca:05:c5:7e:b8:d5:fd:88:64:1b:77:bb:73:
         a7:db:8c:d8:a1:54:5f:71:5f:eb:58:0a:0d:d9:35:c5:d2:39:
         64:bd:d8:4b:cb:04:fa:cf:f9:0d:b3:d8:6b:0e:97:7d:0e:cd:
         6a:7f:81:80:19:ee:06:4a:35:e2:78:be:5b:d6:54:f2:cc:3b:
         57:15:89:fa:f6:01:52:23:fd:2b:72:87:e5:f7:7a:e4:c0:93:
         d8:9e:be:1f:5b:d1:63:20:4f:7d:02:cd:65:ec:11:72:4c:b3:
         2a:d2:ca:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:41 2026 by rpki-client