Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4449D04067A811F0BD77015DC4F9AE02.roa
File:                     4449D04067A811F0BD77015DC4F9AE02.roa (raw, json)
Hash identifier:          Bkl4tnzyBwV11ugKNRCWgcNNuhU7/eCqoqswBcMWMJ8=
Subject key identifier:   F5:53:F1:C5:0A:33:F5:86:EE:77:DC:48:E5:FD:6C:42:0D:57:0A:AE
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1F20
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4449D04067A811F0BD77015DC4F9AE02.roa
Signing time:             Wed 23 Jul 2025 09:34:45 +0000
ROA not before:           Wed 23 Jul 2025 09:34:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151106
IP address blocks:        165.99.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7968 (0x1f20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul 23 09:34:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6880acb4-f9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:f6:3e:5f:e5:6f:52:44:58:43:4b:db:16:
                    07:4b:30:02:49:4c:97:e8:a5:c2:e0:b0:0d:7f:89:
                    dc:1c:61:f1:0a:28:eb:04:34:86:34:23:24:75:b5:
                    39:dc:02:72:88:1f:c3:3c:b1:85:76:8a:27:cb:8e:
                    0d:89:03:27:34:d0:05:5e:1d:c2:42:7c:ae:33:15:
                    43:f4:91:d8:e4:15:2c:d2:96:7e:d9:b2:53:fe:79:
                    61:1c:08:ed:70:1a:92:8c:2b:2d:c5:95:15:e3:26:
                    b7:14:b8:c1:72:c3:3b:fe:55:78:85:d7:7d:ae:4c:
                    42:25:07:e3:95:ad:31:b9:b0:f6:79:0c:13:49:b4:
                    4f:2b:44:a6:ac:f8:c2:3a:84:7b:6a:28:37:18:03:
                    81:ac:b6:69:46:8e:c8:38:d5:03:88:9c:63:f5:e1:
                    2e:ef:bf:8e:b5:fe:96:23:ea:b7:fd:e3:11:ea:36:
                    2c:a7:2a:76:e4:5e:40:c9:51:0a:df:01:ee:58:5e:
                    fb:31:19:02:45:d4:4b:b8:be:35:3b:1f:87:62:fb:
                    5e:89:fc:cf:fc:76:d4:6f:6b:68:20:c0:51:26:b4:
                    d3:0a:98:b2:9a:c8:71:92:f9:19:d9:74:66:0d:e0:
                    78:16:2b:0e:cb:5f:5f:ea:f1:01:8c:45:5c:09:bb:
                    5a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:53:F1:C5:0A:33:F5:86:EE:77:DC:48:E5:FD:6C:42:0D:57:0A:AE
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4449D04067A811F0BD77015DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:ca:7c:8d:15:39:c0:43:d2:ea:c8:2c:46:df:67:fd:42:b1:
         40:59:6b:30:70:70:ed:ae:60:72:9d:37:e6:be:54:bf:b1:71:
         e0:26:3d:91:fe:ec:cc:79:a4:36:1e:c6:1c:41:58:70:5c:a9:
         cb:73:82:dc:a3:14:e3:bf:ff:bc:dc:c5:1a:cd:e6:c6:c7:79:
         03:74:17:e7:de:20:f1:02:31:46:aa:d7:b7:3a:f6:0a:77:22:
         e1:a8:78:b0:2b:b0:cc:33:30:e8:48:30:c3:00:55:48:37:6f:
         9b:97:f6:50:d6:45:7e:e1:8c:ef:ef:a1:7c:ce:7b:a5:74:32:
         22:b5:7d:7a:19:51:0c:fd:82:72:ed:6c:d4:83:af:e2:ca:90:
         d8:f7:e8:e3:c2:b5:00:36:69:09:87:b1:48:b3:7a:a7:e1:44:
         38:1c:a2:be:52:48:d4:87:9a:78:36:30:f9:bd:94:65:af:57:
         f0:48:10:66:fa:14:e7:87:65:95:20:bc:e3:ae:4a:b0:f6:28:
         49:d2:6c:2e:c4:28:45:a6:72:c9:98:87:2d:a7:ee:65:a8:6c:
         f8:80:e7:a5:47:53:9d:a5:7c:a4:0d:db:44:83:e7:f0:a2:f0:
         88:e6:7e:be:ab:50:bf:a9:56:26:c3:fe:b5:73:06:e6:7c:79:
         d2:a6:bd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:53 2025 by rpki-client