Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7DCF05B292F311F09F26B616C4F9AE02.roa
File:                     7DCF05B292F311F09F26B616C4F9AE02.roa (raw, json)
Hash identifier:          tVUKQTMT242giEoVSf1wp19/AYgPPTVxaaI5WT3wJaI=
Subject key identifier:   8F:15:4C:4A:47:69:89:8A:50:98:34:B1:4F:10:0D:5F:08:52:B9:71
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2CBB
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7DCF05B292F311F09F26B616C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:49:34 +0000
ROA not before:           Tue 16 Sep 2025 11:51:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135232
IP address blocks:        165.99.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11451 (0x2cbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Sep 16 11:51:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c27e-5390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:74:47:bf:b8:1c:5c:57:86:ad:da:dc:35:e7:
                    62:85:98:07:4a:08:b2:c3:f4:94:4e:1a:68:29:59:
                    41:fe:89:66:ce:d5:17:30:10:3e:d3:e6:18:11:25:
                    86:53:8f:6f:bc:c6:ff:23:9e:50:ee:d0:70:3b:b1:
                    f3:4a:c2:71:ec:06:3c:8d:bc:95:51:e7:49:bb:0f:
                    93:83:7a:fc:5d:24:5a:1d:3f:67:52:09:91:4d:e5:
                    0f:73:59:73:18:2f:32:82:4e:08:e3:8b:f2:c8:9d:
                    30:4e:f8:c8:96:d7:0c:7c:bb:9d:72:18:cf:25:ed:
                    e7:2b:1c:32:0e:d0:60:99:55:b4:7f:c2:9b:1d:e5:
                    47:44:e1:43:6a:f6:69:19:2d:f9:d4:a8:d2:d0:a4:
                    b6:b6:96:3d:43:e5:82:46:9a:86:85:ed:fa:d3:31:
                    9a:a1:af:d5:36:12:43:2c:c7:4d:9c:9b:8b:c8:66:
                    1e:b2:b5:32:e8:33:d2:db:93:f5:64:ff:6d:ab:64:
                    7c:53:6c:40:92:49:f5:6f:9f:fc:1d:42:14:b9:96:
                    88:81:50:51:41:2a:51:2b:4c:a2:28:ef:c1:5c:3c:
                    72:46:00:41:ce:16:76:a9:56:51:cc:4d:2a:52:08:
                    87:af:de:11:d5:01:de:21:80:21:c8:d1:0a:32:df:
                    7f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:15:4C:4A:47:69:89:8A:50:98:34:B1:4F:10:0D:5F:08:52:B9:71
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7DCF05B292F311F09F26B616C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:08:b0:a8:a1:25:85:aa:ab:9e:9a:15:a9:6e:3f:38:ff:5b:
         4c:b3:3d:0d:47:4e:c4:2e:96:26:fc:b3:f5:6f:4c:f3:d8:9e:
         26:fd:8e:69:63:6c:c4:7a:f1:04:d4:5d:0b:9f:16:cf:25:66:
         4e:89:2a:4c:1f:16:99:55:ad:be:f6:fb:4a:3b:51:31:b3:52:
         d1:c5:11:cb:b5:2d:5d:a5:25:2a:11:eb:cd:c3:97:5c:a2:37:
         cd:33:df:28:90:b1:d4:36:9f:e8:ea:f8:0e:10:63:cc:2d:2e:
         ed:fe:cf:e0:53:d3:61:a8:ef:92:09:de:44:78:4a:d0:ab:3e:
         aa:68:fd:65:dc:03:81:10:e9:15:b7:0d:0c:7d:38:0d:c6:7f:
         fb:eb:8b:5e:27:62:bb:54:15:12:a0:f3:eb:23:4c:67:79:5c:
         34:3a:ed:c1:d1:fb:7a:3b:02:83:0d:e0:bd:23:2c:29:7b:3c:
         ce:c8:80:75:bf:ca:ec:40:52:3f:95:9f:2c:5a:64:5f:dd:65:
         59:95:44:e7:23:32:72:84:cd:96:70:7d:da:7f:08:b2:5f:71:
         e3:f4:47:9a:9e:d6:fa:fe:73:8c:27:a3:cc:33:50:bc:93:ba:
         24:da:24:82:1c:5b:80:49:87:22:24:ce:d0:26:0a:ab:2c:b8:
         80:49:d5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:46 2026 by rpki-client