Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/18731256533511F09145737CC4F9AE02.roa
File:                     18731256533511F09145737CC4F9AE02.roa (raw, json)
Hash identifier:          +3T3rab53pFK+2Rm4qZtQ/vQgpYA3Mpui/7cxBSSgz0=
Subject key identifier:   E6:C3:7F:72:62:7F:78:62:B0:24:3F:79:54:1E:C3:9D:0A:24:9E:73
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2C90
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/18731256533511F09145737CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:48:33 +0000
ROA not before:           Fri 27 Jun 2025 08:59:56 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135205
IP address blocks:        165.99.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11408 (0x2c90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jun 27 08:59:56 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c241-da68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:c3:17:7d:19:5c:ac:85:5d:d7:c0:97:d6:
                    34:cd:ba:eb:3d:88:ce:96:cc:91:af:75:5a:b7:4c:
                    ce:01:ac:81:58:8d:84:8f:fa:95:c3:11:ad:cc:7b:
                    cf:2c:93:7a:8b:c4:19:cb:a8:be:d4:01:98:fc:14:
                    6d:5a:cb:f0:6d:28:82:2e:38:6f:68:60:68:dd:8b:
                    e5:c3:63:87:cb:d3:6d:91:1c:87:33:48:bd:ba:84:
                    55:ad:3c:01:52:c4:b2:c6:26:ef:1b:2f:01:68:ab:
                    bf:83:e1:77:29:5a:d4:f4:ef:87:f5:2f:25:73:9c:
                    2a:33:eb:bf:29:92:b8:e9:41:5e:0e:4d:83:74:e8:
                    67:48:b6:ea:68:03:e8:c3:9c:09:d5:5f:ec:76:94:
                    3c:bf:82:25:9b:07:06:e9:7f:04:14:17:67:c1:7d:
                    c4:d3:f8:2a:7b:9d:ca:65:e5:dc:29:ec:cc:ad:d2:
                    0f:0f:dd:88:05:20:58:f4:ab:99:ce:29:fa:27:d1:
                    33:a5:87:8c:a4:88:65:3f:b9:f7:06:2a:7f:c6:53:
                    3b:32:4a:2d:7a:30:0e:60:29:51:6a:88:6c:a3:e4:
                    e5:26:7a:e2:8c:93:cf:0c:e6:52:b9:ac:b8:01:4c:
                    5c:59:5f:9f:ab:c6:39:4c:42:6a:44:80:ad:ac:2a:
                    5d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C3:7F:72:62:7F:78:62:B0:24:3F:79:54:1E:C3:9D:0A:24:9E:73
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/18731256533511F09145737CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:cf:94:0d:31:08:d3:14:6a:ee:45:11:ad:7f:ec:22:cc:f6:
         fc:5e:73:6c:56:9e:c9:ae:1f:3d:e0:af:54:10:13:c0:27:d5:
         2c:38:bf:6b:03:fc:cc:0a:b1:53:7e:5a:64:9c:d2:2a:a3:9c:
         3d:39:5e:e6:60:ff:08:3c:f9:3d:b9:31:f8:91:da:1d:a6:ae:
         51:01:b7:31:b4:23:76:17:4d:db:81:38:a4:07:1f:6b:f8:17:
         46:9c:4e:00:40:76:c7:67:73:4b:68:c7:96:07:a7:04:fe:e3:
         49:7f:75:3a:80:3c:0e:11:4e:88:28:a9:e3:45:d1:78:86:82:
         8e:91:92:60:fb:2d:d2:89:ae:96:8e:f3:26:47:75:8a:1e:ad:
         78:33:e1:12:09:e8:7a:e4:41:fc:06:8e:b1:4c:66:d5:5e:ea:
         04:29:df:aa:40:08:e0:be:0d:da:2b:e5:e4:dd:d8:bd:25:9c:
         e5:8c:db:5e:aa:79:bc:46:4d:55:8a:b6:4d:e6:aa:b6:16:44:
         a8:ca:dc:00:2a:38:92:55:82:ae:e0:44:8c:4f:bf:18:dc:99:
         69:aa:68:c6:ed:a0:07:68:87:25:63:22:ba:52:4c:00:f4:80:
         ca:9e:a2:61:84:7f:67:a3:85:4e:08:f7:db:2e:b2:57:1d:e1:
         d3:e5:9f:99
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNjI3MDg1OTU2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzI0MS1kYTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwNLDF30ZXKyFXdfAl9Y0zbrrPYjOlsyRr3Vat0zOAayBWI2Ej/qVwxGtzHvP
LJN6i8QZy6i+1AGY/BRtWsvwbSiCLjhvaGBo3Yvlw2OHy9NtkRyHM0i9uoRVrTwB
UsSyxibvGy8BaKu/g+F3KVrU9O+H9S8lc5wqM+u/KZK46UFeDk2DdOhnSLbqaAPo
w5wJ1V/sdpQ8v4IlmwcG6X8EFBdnwX3E0/gqe53KZeXcKezMrdIPD92IBSBY9KuZ
zin6J9EzpYeMpIhlP7n3Bip/xlM7MkotejAOYClRaohso+TlJnrijJPPDOZSuay4
AUxcWV+fq8Y5TEJqRICtrCpdvwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFObDf3Ji
f3hisCQ/eVQew50KJJ5zMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTg3MzEyNTY1
MzM1MTFGMDkxNDU3MzdDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQApWNGMA0GCSqGSIb3DQEBCwUAA4IBAQC/z5QNMQjTFGruRRGtf+wi
zPb8XnNsVp7Jrh894K9UEBPAJ9UsOL9rA/zMCrFTflpknNIqo5w9OV7mYP8IPPk9
uTH4kdodpq5RAbcxtCN2F03bgTikBx9r+BdGnE4AQHbHZ3NLaMeWB6cE/uNJf3U6
gDwOEU6IKKnjRdF4hoKOkZJg+y3Sia6WjvMmR3WKHq14M+ESCeh65EH8Bo6xTGbV
XuoEKd+qQAjgvg3aK+Xk3di9JZzljNteqnm8Rk1VirZN5qq2FkSoytwAKjiSVYKu
4ESMT78Y3JlpqmjG7aAHaIclYyK6UkwA9IDKnqJhhH9no4VOCPfbLrJXHeHT5Z+Z
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:50:03 2026 by rpki-client