Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A6F8A47670F111F0865FF373C4F9AE02.roa
File:                     A6F8A47670F111F0865FF373C4F9AE02.roa (raw, json)
Hash identifier:          MjOsNlNHar7Zmml86zW/N3aNw2+7PYxp+ya3I/G32V8=
Subject key identifier:   00:76:99:0B:5A:4B:91:3D:82:5C:05:0D:40:88:9B:E7:C6:4B:F1:CD
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1F3A
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A6F8A47670F111F0865FF373C4F9AE02.roa
Signing time:             Mon 04 Aug 2025 05:12:44 +0000
ROA not before:           Mon 04 Aug 2025 05:12:44 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154052
IP address blocks:        165.101.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7994 (0x1f3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Aug  4 05:12:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6890414c-5e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:19:dc:9c:a6:ff:cd:b2:34:ec:4d:1b:da:a7:
                    f0:d2:35:41:05:e2:75:e1:12:70:60:b8:ae:e4:51:
                    21:6f:28:71:16:6a:e5:a0:45:ea:33:b4:77:34:c8:
                    c0:56:93:bb:fb:10:c2:43:0c:a1:c3:2d:8f:24:b5:
                    3b:87:8e:ae:eb:75:c0:7b:6c:b2:77:2c:28:5f:71:
                    ac:3c:45:6c:85:02:d1:2e:e2:fb:c7:cd:81:8f:78:
                    34:f1:9b:15:c3:5f:33:6f:7e:b7:c1:c5:e5:61:00:
                    50:ec:c8:8a:35:ca:d1:90:26:22:ac:13:64:84:22:
                    bf:4d:89:46:0a:0e:ea:36:d9:e3:02:d7:d6:74:35:
                    ec:1a:c5:4e:07:c1:f4:e8:bd:69:ae:94:d3:bb:06:
                    f9:72:29:b4:e8:9e:00:d8:e9:c4:7b:71:4f:cd:40:
                    21:71:bb:47:81:4f:48:c0:39:45:c3:fd:e5:3c:1a:
                    cf:44:c0:2b:9b:45:e5:cb:8e:fc:3e:d9:64:04:f0:
                    3a:9f:cc:e1:c0:02:ec:f2:b9:ac:d7:df:da:8d:e4:
                    1a:ce:98:5a:45:42:38:56:4c:13:8f:a9:d7:c5:aa:
                    1b:9d:f2:60:a4:fe:53:46:51:ea:b0:50:cf:8a:4d:
                    38:bc:c7:48:f2:df:b6:b5:d2:42:93:4a:1e:e8:5b:
                    8a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:76:99:0B:5A:4B:91:3D:82:5C:05:0D:40:88:9B:E7:C6:4B:F1:CD
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A6F8A47670F111F0865FF373C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:13:de:97:62:a5:42:f7:5f:bc:21:1b:5e:b2:76:ba:f5:45:
         30:39:f5:8d:ca:f8:5f:24:b2:3c:06:24:36:74:89:48:83:db:
         db:83:2c:d4:1d:f5:1e:2b:45:94:d5:10:6c:4e:79:96:d3:a8:
         5c:61:70:19:2e:b7:e7:6d:25:ee:42:ec:ba:ea:de:c0:3b:df:
         20:a2:65:e5:c6:86:63:52:16:b6:72:6e:6d:d9:0a:ba:41:e5:
         1b:1e:0f:a4:66:14:c1:42:fc:71:8c:e7:d4:f2:ae:02:99:9a:
         02:66:32:97:27:17:67:1d:b3:22:67:ba:0f:d5:a5:c2:00:3c:
         a1:c0:93:be:e2:c4:ec:08:4e:48:dc:54:e6:a8:81:be:7b:52:
         82:0b:c5:83:46:5b:85:19:33:30:77:25:d7:1a:87:7e:04:49:
         99:72:55:fc:d1:50:40:bb:60:c3:e6:42:f9:6c:ba:5a:9d:72:
         f7:87:12:8f:b7:3c:16:ba:41:c1:3d:02:5d:9d:8e:69:70:e5:
         51:5a:f4:a3:19:11:39:56:0d:e2:f8:00:8c:8c:45:0a:2a:5d:
         da:9b:c8:7b:c9:42:ab:f3:cb:70:fa:06:48:29:18:1f:65:de:
         b6:2a:ae:84:fd:d9:8b:40:0f:b4:10:f4:ac:d4:2e:d9:15:be:
         b9:ce:4e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:35:41 2025 by rpki-client