Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/82EE7614C06A11F0BDD51339C4F9AE02.roa
File:                     82EE7614C06A11F0BDD51339C4F9AE02.roa (raw, json)
Hash identifier:          uUnnEIc+nkwAblxTuNL6OqvE6fswa2HaiY4T8qhy2IY=
Subject key identifier:   60:F6:31:F1:4D:58:2A:75:8B:DA:82:D4:9A:40:D0:87:76:5A:9F:AE
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2CCD
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/82EE7614C06A11F0BDD51339C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:49:58 +0000
ROA not before:           Thu 13 Nov 2025 08:26:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153927
IP address blocks:        165.99.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11469 (0x2ccd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Nov 13 08:26:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c295-6f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:73:64:8b:62:aa:a3:65:e5:e5:ba:f6:84:45:
                    9e:3b:65:cd:93:7a:87:5f:bd:e6:a1:f1:c1:0a:56:
                    3c:93:ff:74:a6:a0:52:fc:cc:70:53:5b:3d:87:63:
                    ef:06:87:04:11:1e:12:dd:43:fb:85:69:35:d1:b1:
                    03:22:bb:9d:c1:3c:a9:53:86:d1:f3:27:5b:c8:2b:
                    20:63:c4:0e:70:cd:50:5c:7a:a1:4f:ed:28:3a:9f:
                    e9:94:98:64:12:a2:1e:6c:f9:b6:2a:0a:bc:72:21:
                    54:87:47:fe:fb:74:e7:b8:57:d8:5d:4d:8c:51:d2:
                    01:b7:9f:6b:83:2f:f6:a5:61:0c:2b:53:cb:29:d7:
                    1a:a0:e7:8f:e1:5c:dc:04:40:9b:eb:ac:f0:c0:de:
                    2f:c3:53:6f:a9:86:f9:46:40:3f:b8:b5:23:45:58:
                    aa:92:9e:8c:54:5a:07:04:5a:c8:b2:66:71:40:78:
                    85:2f:ba:a7:8d:0c:e5:67:85:92:3f:2d:e8:e7:fc:
                    71:df:2c:62:8d:2d:e1:76:d8:fd:89:fc:64:9a:0a:
                    e8:bd:6e:ea:e1:5a:0c:05:1a:6e:fd:9a:c1:2d:d6:
                    ef:58:1b:db:c7:64:f0:b2:c5:09:f7:f3:8d:ba:d8:
                    e1:c7:16:d9:26:91:ee:f8:c8:db:98:b3:4f:e6:e8:
                    a9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F6:31:F1:4D:58:2A:75:8B:DA:82:D4:9A:40:D0:87:76:5A:9F:AE
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/82EE7614C06A11F0BDD51339C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:67:c6:27:41:bf:d6:9d:ec:8e:5d:3f:ba:9f:29:2a:d0:c7:
         15:ab:83:2a:8b:00:1e:45:8b:6f:bb:dc:f0:cd:51:b6:4f:39:
         29:8c:42:80:03:83:ab:df:b8:bf:f0:d8:de:4c:be:1c:1d:ef:
         45:9f:d8:35:42:ce:f5:31:a9:5b:92:aa:1b:99:e2:32:1f:b1:
         61:39:2a:de:e4:5b:53:4e:ca:80:e7:c3:5e:8e:d2:ef:7a:09:
         35:d7:36:11:22:65:65:d6:12:b8:3e:aa:17:9d:6b:cf:4c:2d:
         46:5c:a7:34:73:c5:bc:7c:b6:0d:78:e5:fc:64:f7:d2:ce:ed:
         77:e2:fe:e8:5a:7d:54:37:a8:10:1a:70:82:f4:41:49:f5:3e:
         de:77:6d:d1:e2:45:64:1a:b9:50:3d:cf:cd:cf:8e:84:7d:c2:
         8b:cd:49:38:6d:ce:71:55:05:96:f2:e1:e3:73:ed:8c:cc:77:
         01:a1:0b:54:77:e8:28:d1:29:70:0f:9b:99:ea:a2:89:25:78:
         75:c8:68:26:05:5e:49:3d:4a:84:0d:73:c4:10:a9:de:84:e7:
         16:36:f0:bd:74:8c:40:1a:4b:24:98:38:d0:c8:38:e0:e8:ac:
         3c:bb:9e:c3:e9:f8:f6:3c:2b:a1:3f:80:5e:10:5a:ba:04:3f:
         1c:ed:22:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:48:53 2026 by rpki-client