Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5FDB72224C2E11F0982AB330C4F9AE02.roa
File:                     5FDB72224C2E11F0982AB330C4F9AE02.roa (raw, json)
Hash identifier:          8HfwyFcVfoPVilzWbXmuhYEo7fBttX9c53R7PkTqJoQ=
Subject key identifier:   2B:61:5F:7E:D6:35:BD:66:8E:BD:A5:44:22:18:74:DF:BD:62:87:27
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1EB0
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5FDB72224C2E11F0982AB330C4F9AE02.roa
Signing time:             Wed 18 Jun 2025 10:24:11 +0000
ROA not before:           Wed 18 Jun 2025 10:24:11 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135744
IP address blocks:        165.99.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 07:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7856 (0x1eb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jun 18 10:24:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=685293cb-7896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:92:04:a8:d0:cb:9a:9a:13:ac:94:6d:72:15:
                    35:59:d2:79:80:86:65:21:a3:ce:6d:4f:75:30:94:
                    1f:af:f2:3b:a9:72:e1:79:99:cf:89:04:f5:9e:25:
                    3b:20:b9:12:b6:1e:cc:59:8e:09:a6:8e:dc:a9:16:
                    c8:1e:e8:0c:1c:2f:b5:81:85:d5:f6:a6:8e:b9:0c:
                    9a:16:57:3a:04:21:3b:e4:ff:02:66:2f:7d:e2:b4:
                    a0:1d:a1:75:3b:3c:1d:57:91:e4:e2:40:8e:9f:99:
                    e0:a9:76:88:6d:88:7b:91:31:b0:4a:39:1b:2d:f8:
                    94:33:ec:29:21:97:f4:f8:3c:4d:ee:6c:d1:ed:5e:
                    85:a2:41:89:32:42:2c:4b:c7:0d:73:47:2f:a2:58:
                    66:35:6f:e0:05:62:ac:96:95:fd:eb:53:50:5c:2a:
                    d1:37:ed:5e:b1:04:49:70:0b:8c:d7:86:1a:f7:9e:
                    39:cb:3d:1c:dd:3d:a1:f8:ad:82:6b:90:b1:82:a7:
                    6c:d2:81:88:c8:2d:d4:42:80:28:a1:a6:50:3f:4e:
                    8b:a5:77:59:e6:ec:db:20:26:c9:45:b7:45:80:5f:
                    dd:29:03:b1:47:ac:8e:10:1b:92:3c:d4:1c:0f:25:
                    39:56:63:3c:43:85:1c:c2:17:c6:b5:03:ea:d4:ce:
                    99:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:61:5F:7E:D6:35:BD:66:8E:BD:A5:44:22:18:74:DF:BD:62:87:27
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5FDB72224C2E11F0982AB330C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:61:c8:93:5e:d3:28:d9:6a:46:0b:fa:29:67:f2:27:fc:93:
         2f:7a:c9:53:b5:15:76:11:c2:79:df:f1:1d:52:4c:cd:19:2b:
         e7:ad:70:c0:ce:c9:db:4f:77:a1:21:04:dc:75:b2:eb:18:cf:
         98:7b:6e:7e:b3:57:16:04:8a:33:d4:8e:fa:93:e4:c5:a6:89:
         99:d8:1e:a3:a0:f5:dc:06:11:4a:7a:53:46:c2:60:56:17:6c:
         b1:bb:21:a1:27:3b:16:93:82:cc:41:25:80:8c:f4:71:33:01:
         0f:f4:3c:44:bd:6e:28:69:76:87:bd:c0:0b:7c:1d:54:1e:e2:
         81:74:c2:df:76:1b:bb:63:9e:7b:b6:a7:ec:43:e4:ab:b9:da:
         56:ad:6f:62:15:e2:b1:8a:6a:37:16:6a:e8:50:31:04:b1:ec:
         b3:8f:cd:c4:94:a2:73:a9:63:c7:c8:e8:d7:1a:7e:e9:c7:49:
         33:4e:8d:9c:26:3e:22:3f:08:13:46:9f:bf:a2:10:3c:00:60:
         77:b2:ee:0b:a5:ec:ea:81:78:c8:ad:a5:04:a1:e6:ef:1d:6b:
         24:85:86:6e:85:89:7f:d9:58:27:c4:cb:da:c0:bd:01:a3:3e:
         28:1a:c5:07:89:21:2c:91:f3:6f:ad:4a:ad:95:68:be:79:0c:
         30:77:43:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 05:26:42 2025 by rpki-client