Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1869BC5A45F811F096901E67C4F9AE02.roa
File:                     1869BC5A45F811F096901E67C4F9AE02.roa (raw, json)
Hash identifier:          2XaczRlU6vd3B3H2E2xaHWN2GJ/fSwfEK3nIC+Vj9HQ=
Subject key identifier:   25:74:07:5D:0A:66:42:01:EF:12:86:16:C7:38:5F:03:DF:13:72:36
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1E98
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1869BC5A45F811F096901E67C4F9AE02.roa
Signing time:             Tue 10 Jun 2025 12:40:31 +0000
ROA not before:           Tue 10 Jun 2025 12:40:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153901
IP address blocks:        165.99.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 15:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7832 (0x1e98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jun 10 12:40:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=684827bf-6aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:44:db:f6:4a:10:1b:a6:4b:13:78:e6:8d:c6:
                    71:71:58:05:35:21:87:22:59:87:03:27:fc:7f:5a:
                    05:08:3a:4c:8c:3d:27:b0:04:d2:18:6e:21:9c:bd:
                    53:dc:e0:38:eb:b9:63:e0:46:36:3b:ce:8c:d5:53:
                    9c:ea:04:4a:07:73:49:f4:98:16:98:2c:0c:aa:22:
                    15:38:33:5c:96:4d:2c:2d:61:01:7f:43:36:b6:2e:
                    d1:67:56:31:11:e7:85:ae:10:8a:57:df:be:17:0e:
                    39:48:72:43:19:29:52:83:9f:49:3d:1a:2c:f7:08:
                    e9:72:92:9f:ce:b2:fc:b0:96:30:78:4b:b9:ab:e6:
                    36:a1:e9:f7:34:01:74:35:1f:6d:ea:65:f5:35:84:
                    e3:21:bf:3f:03:59:31:ce:19:81:eb:af:53:98:de:
                    81:e9:47:c2:97:1f:4c:da:a0:97:a9:33:d8:8f:10:
                    4e:89:a8:93:01:66:21:d4:1f:4a:e5:2f:df:38:d1:
                    99:cc:de:f8:c1:3f:fb:b2:6a:98:b1:40:aa:59:76:
                    c8:48:63:70:35:0a:2e:50:5d:f6:a6:ac:b5:2f:3f:
                    38:82:d4:ca:bc:af:e2:09:76:3a:9f:8f:09:f5:4f:
                    dd:c6:4d:ff:bb:e8:f8:e1:c9:88:6c:af:d6:79:95:
                    d0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:74:07:5D:0A:66:42:01:EF:12:86:16:C7:38:5F:03:DF:13:72:36
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1869BC5A45F811F096901E67C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:4e:37:9b:fe:a0:8f:f6:10:a3:b3:52:e3:92:48:38:e6:a2:
         6d:cf:ed:05:03:5f:a7:60:93:8b:6f:b7:6a:25:cc:1c:4f:c6:
         95:05:06:f5:c3:26:ce:82:78:6d:0b:30:77:10:50:51:a1:6c:
         f4:a0:82:89:0a:5e:34:89:19:5d:3c:8f:b7:22:69:bb:f2:ec:
         d8:99:2c:a2:ca:c8:f4:ac:40:77:43:1a:4b:74:45:ed:df:03:
         3e:16:f4:9c:2d:0d:8b:d6:b5:54:37:b0:7c:8b:f0:c3:38:1c:
         e1:36:24:32:e5:60:17:df:35:70:2b:62:dc:2f:97:bb:2d:cc:
         b1:c4:af:08:c3:90:91:89:25:72:15:60:66:c8:14:34:0f:e6:
         d1:4e:e6:65:24:a9:9c:11:b1:30:6d:be:c1:62:93:39:9f:5b:
         8e:d7:7a:9f:29:ee:c8:84:28:63:3e:7c:ec:25:3d:f8:c4:f6:
         9c:58:9d:c8:3a:5a:f3:22:2c:aa:f0:1e:ae:57:c8:02:2a:fb:
         50:ad:a2:27:3d:78:97:80:29:87:75:05:a7:cc:a1:23:93:e3:
         80:be:d6:6e:f5:49:97:48:a2:9b:d7:84:3e:e9:60:c2:04:ce:
         ce:67:5e:d0:4f:72:39:35:f5:6e:34:71:3d:33:e7:c8:b1:00:
         cf:b3:9f:c0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICHpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNjEwMTI0MDMxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODQ4MjdiZi02YWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1UTb9koQG6ZLE3jmjcZxcVgFNSGHIlmHAyf8f1oFCDpMjD0nsATSGG4hnL1T
3OA467lj4EY2O86M1VOc6gRKB3NJ9JgWmCwMqiIVODNclk0sLWEBf0M2ti7RZ1Yx
EeeFrhCKV9++Fw45SHJDGSlSg59JPRos9wjpcpKfzrL8sJYweEu5q+Y2oen3NAF0
NR9t6mX1NYTjIb8/A1kxzhmB669TmN6B6UfClx9M2qCXqTPYjxBOiaiTAWYh1B9K
5S/fONGZzN74wT/7smqYsUCqWXbISGNwNQouUF32pqy1Lz84gtTKvK/iCXY6n48J
9U/dxk3/u+j44cmIbK/WeZXQywIDAQABo4IClTCCApEwHQYDVR0OBBYEFCV0B10K
ZkIB7xKGFsc4XwPfE3I2MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTg2OUJDNUE0
NUY4MTFGMDk2OTAxRTY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGlY04wDQYJKoZIhvcNAQELBQADggEBADlON5v+oI/2EKOz
UuOSSDjmom3P7QUDX6dgk4tvt2olzBxPxpUFBvXDJs6CeG0LMHcQUFGhbPSggokK
XjSJGV08j7ciabvy7NiZLKLKyPSsQHdDGkt0Re3fAz4W9JwtDYvWtVQ3sHyL8MM4
HOE2JDLlYBffNXArYtwvl7stzLHErwjDkJGJJXIVYGbIFDQP5tFO5mUkqZwRsTBt
vsFikzmfW47Xep8p7siEKGM+fOwlPfjE9pxYncg6WvMiLKrwHq5XyAIq+1Ctoic9
eJeAKYd1BafMoSOT44C+1m71SZdIopvXhD7pYMIEzs5nXtBPcjk19W40cT0z58ix
AM+zn8A=
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:45:39 2025 by rpki-client