Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/59E4C99A6DD511F0BF66171DC4F9AE02.roa
File:                     59E4C99A6DD511F0BF66171DC4F9AE02.roa (raw, json)
Hash identifier:          Qz19m1/99W2BaafKcDrYJ4U4INKrNR5TyQyx0giJgbc=
Subject key identifier:   10:1A:4F:6F:F5:67:EA:16:F9:9E:52:86:93:4B:14:8A:31:FD:BB:CF
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1F33
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/59E4C99A6DD511F0BF66171DC4F9AE02.roa
Signing time:             Thu 31 Jul 2025 06:12:35 +0000
ROA not before:           Thu 31 Jul 2025 06:12:35 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133294
IP address blocks:        165.99.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7987 (0x1f33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul 31 06:12:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=688b0953-b893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:b7:f6:b1:57:6f:f9:51:54:60:ad:16:84:
                    bf:14:d9:13:69:93:ce:cf:c6:45:f9:fb:76:18:26:
                    ae:f5:f6:1e:d8:32:81:fb:96:c0:f1:9c:9a:b2:ec:
                    f2:32:7e:0d:0d:a9:bc:d9:a1:18:90:7a:53:97:30:
                    86:a6:d6:49:cc:79:11:be:9d:99:1f:03:59:b6:4f:
                    d2:4b:3e:38:22:78:88:c4:24:51:84:d5:4c:32:c8:
                    03:60:8a:06:e6:62:13:cd:1f:18:93:65:9f:bc:8b:
                    61:31:4e:a5:70:e1:d8:4f:b3:96:05:a4:83:3e:2e:
                    cf:02:64:2e:a1:0c:3c:fd:ec:02:33:76:63:0e:21:
                    2e:ce:59:73:ef:76:a6:37:94:9b:d7:6a:f2:35:b5:
                    cd:45:1b:4f:f7:b5:00:43:95:a7:8a:2a:3a:36:2b:
                    37:08:29:54:9f:81:7b:0c:14:95:b5:81:f5:2c:c9:
                    49:64:4a:3d:a1:f4:ad:df:5d:43:f6:27:8f:9f:5c:
                    b9:ce:08:1d:d5:04:f0:79:d4:2b:86:16:3f:3f:01:
                    d9:f2:1e:0b:63:91:9f:24:ab:98:96:d2:f5:53:3d:
                    5a:31:b6:dc:55:37:bf:32:09:d9:63:3a:04:d4:72:
                    40:a3:67:f2:83:b8:7f:f4:f2:44:dc:e9:89:e1:f7:
                    6f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1A:4F:6F:F5:67:EA:16:F9:9E:52:86:93:4B:14:8A:31:FD:BB:CF
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/59E4C99A6DD511F0BF66171DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:f8:19:25:02:ae:e6:07:6b:c2:ba:34:5c:63:6b:b4:8c:e7:
         0b:a7:de:bb:1b:4d:f1:58:e2:06:87:96:d9:65:51:3f:14:66:
         4b:11:3d:e1:61:fb:3a:aa:66:4d:c9:a0:07:94:73:24:1d:75:
         fa:a0:84:69:a7:38:39:63:b4:a1:2b:cf:ae:9a:2e:93:22:e1:
         b7:3d:50:42:c0:6f:d3:d3:b9:47:72:a1:80:2f:1b:58:09:93:
         cf:41:3d:e2:63:97:9a:33:49:5d:01:1d:52:5c:d2:90:7e:4c:
         2a:99:68:68:15:ff:0e:c8:99:3b:75:39:ff:0f:6f:6e:00:42:
         ab:04:00:57:a8:08:32:94:5f:32:2f:da:fc:37:8a:79:8d:99:
         23:c3:ab:07:4b:40:df:7c:7d:c3:e9:cc:d5:88:d1:8f:ab:39:
         55:be:07:ab:b3:82:48:62:a6:4a:4f:74:9b:6f:8d:66:ad:2b:
         35:d2:42:99:b2:42:00:89:aa:4a:39:bb:b7:01:a0:ea:9e:87:
         74:fa:c3:4f:54:f7:3b:ee:a5:00:b5:ba:d3:10:59:1d:1f:98:
         6b:8e:2c:8a:f4:67:60:50:68:a1:1d:a7:97:4b:51:33:de:6f:
         46:01:b3:5c:81:83:b0:55:27:68:fe:ca:2e:52:40:20:22:66:
         a1:f9:fe:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:24:14 2025 by rpki-client