Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0E15C20044F711F0AD02E568C4F9AE02.roa
File:                     0E15C20044F711F0AD02E568C4F9AE02.roa (raw, json)
Hash identifier:          72w3DrEMgpLZUdQ8fXMlvJAUN8leR+HsY7e4C/8fQIQ=
Subject key identifier:   6B:BF:CE:41:4E:9E:51:DF:D3:53:2E:D3:94:5F:C7:5A:1C:31:72:68
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1E8D
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0E15C20044F711F0AD02E568C4F9AE02.roa
Signing time:             Mon 09 Jun 2025 06:00:33 +0000
ROA not before:           Mon 09 Jun 2025 06:00:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153951
IP address blocks:        165.99.214.0/24 maxlen: 24
                          165.99.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:22:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7821 (0x1e8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jun  9 06:00:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68467881-8547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:00:5d:e0:00:ae:e1:23:27:30:44:95:bf:d4:
                    b3:81:2b:85:1f:9a:a5:ce:cd:a7:35:ec:e2:56:5c:
                    42:80:4a:8c:8d:0b:6d:5e:09:b3:77:64:6c:0a:4f:
                    a9:3d:58:18:40:60:c3:83:cf:ff:0c:71:51:bc:4f:
                    92:a8:40:0b:8e:cb:97:91:2f:ed:e3:71:e9:97:10:
                    78:45:41:d2:b1:a2:18:97:74:ce:47:bb:4c:16:40:
                    ce:26:56:3d:76:1f:dc:e3:33:ed:44:f1:30:29:5b:
                    36:78:4e:f2:37:09:bc:99:d5:50:c9:a2:7a:79:fd:
                    83:70:4e:b3:ed:7a:6d:40:e7:12:e4:f0:c2:1d:7d:
                    4c:25:86:a3:f0:17:57:e3:f6:19:e4:12:ea:2c:d9:
                    60:d3:36:1c:db:f9:b6:9d:e2:58:f8:45:f1:e4:25:
                    84:7b:a9:e2:17:15:cc:81:53:a3:c8:a3:71:00:0e:
                    10:a2:f0:1e:2f:75:40:80:c9:e0:cd:f0:a3:43:b5:
                    29:41:9a:22:a5:32:9c:0b:fd:ba:bb:bb:ef:b4:6c:
                    47:6d:0e:8a:64:50:a2:2c:98:ed:f9:7d:a9:11:08:
                    f5:b1:44:59:20:1c:92:34:c8:92:f5:59:2a:8c:61:
                    19:9d:27:7e:6e:65:93:3b:3c:34:4f:50:f1:d5:97:
                    86:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BF:CE:41:4E:9E:51:DF:D3:53:2E:D3:94:5F:C7:5A:1C:31:72:68
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0E15C20044F711F0AD02E568C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:2b:66:31:2e:83:f4:20:b9:c1:f3:4f:da:6a:5a:5f:c6:59:
         01:6a:bb:9b:6c:cf:c0:bc:00:06:0a:31:2f:59:f7:8c:ad:2c:
         99:f0:10:fd:7d:34:41:a5:77:16:de:b9:dc:91:88:9a:7b:bb:
         53:7c:b4:10:58:88:f5:52:2d:ce:44:e5:7d:4b:58:b3:bf:06:
         57:86:05:d6:e1:ed:2e:ad:f6:b4:bd:56:bc:af:3b:e9:57:0f:
         1c:0d:42:ea:61:a6:b7:af:8c:c1:d8:65:77:fb:5e:d7:81:b4:
         0c:19:13:63:2d:b0:e2:3f:cf:44:9e:25:fe:5f:1f:8f:d4:9d:
         1e:ab:05:08:21:1d:60:41:e9:51:b9:57:2d:71:11:8f:27:f3:
         40:2c:5d:5a:12:60:ef:6c:70:72:8c:0c:85:65:f4:a9:ab:83:
         95:bb:09:69:4b:e6:e1:db:f7:b0:8e:39:38:d5:e3:5e:ec:32:
         51:62:56:f1:10:0d:c3:44:48:33:ba:03:22:e2:7d:9a:69:0a:
         55:07:19:eb:c6:43:47:40:37:5f:f1:4d:e9:ae:7d:44:fb:dc:
         b3:88:19:10:b0:c4:e6:1e:5d:d4:9d:a4:7e:cf:91:34:93:04:
         e5:05:f1:ff:be:8f:c2:74:8e:84:c9:d7:ad:6c:9e:ac:ef:f7:
         45:47:24:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:00:20 2025 by rpki-client