Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F6FE2A3E3C8711F080234E4DC4F9AE02.roa
File:                     F6FE2A3E3C8711F080234E4DC4F9AE02.roa (raw, json)
Hash identifier:          KQnJvJpiznEz0ySuUTDkkjCdrT7vkXK+9TFHsqOyZrc=
Subject key identifier:   81:1F:F2:06:E9:A9:BF:B4:0E:06:D9:D3:52:EC:69:33:27:98:16:7D
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1E75
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F6FE2A3E3C8711F080234E4DC4F9AE02.roa
Signing time:             Thu 29 May 2025 12:25:11 +0000
ROA not before:           Thu 29 May 2025 12:25:11 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134315
IP address blocks:        165.99.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 05:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7797 (0x1e75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 29 12:25:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68385227-cc64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c3:7f:37:c9:00:ff:ab:e8:84:b3:b4:dc:d8:
                    16:c8:99:39:25:d4:de:8d:af:45:a3:9d:3e:0e:d3:
                    49:50:d8:e9:0a:29:92:5b:36:19:43:31:69:9b:9a:
                    a9:78:92:9d:6d:30:48:18:bc:5f:3d:df:c2:4c:bb:
                    de:ce:a6:4b:b8:b3:06:bb:9e:6f:74:12:d3:cf:73:
                    68:24:9d:f1:5e:85:b5:24:63:c0:11:49:e0:34:a6:
                    ba:f0:80:a2:b5:30:a0:2c:41:48:56:2b:7c:44:06:
                    8e:60:e0:21:2f:a4:07:5c:df:7b:b6:44:05:c5:da:
                    ec:14:75:d0:76:a3:af:e3:57:96:4c:15:a7:39:e1:
                    d6:fc:48:d2:dd:e8:16:d0:69:4c:78:41:17:50:05:
                    79:3e:87:74:8a:a8:36:29:65:63:13:98:6f:97:84:
                    f0:9b:35:f6:f6:2d:26:06:c9:c3:ff:21:37:8b:13:
                    55:c5:fc:e1:c8:d2:da:43:da:34:ca:70:8c:5d:12:
                    3c:fc:d1:58:6a:14:bf:27:34:9a:27:03:2d:f0:28:
                    19:a7:85:05:af:24:1b:ca:4c:c5:94:22:de:a5:79:
                    77:0e:b0:99:56:db:f7:de:62:67:b9:96:3b:dc:eb:
                    ed:4a:43:09:c8:b7:bc:3c:78:e0:72:cb:69:12:80:
                    8d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1F:F2:06:E9:A9:BF:B4:0E:06:D9:D3:52:EC:69:33:27:98:16:7D
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F6FE2A3E3C8711F080234E4DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:94:28:91:3c:ea:77:8f:ab:ac:68:84:d8:8f:ec:b8:a7:7d:
         3a:58:03:46:d6:c6:eb:29:dc:07:54:2e:ac:c8:ac:74:32:9e:
         9f:3f:9b:16:ee:6f:0c:10:07:b7:3c:3a:1f:90:6e:ff:1b:d8:
         3b:9f:db:b9:6d:b5:90:6c:d7:db:0e:19:26:cb:10:58:cf:04:
         65:bb:44:0a:0d:d4:78:7e:9a:2e:91:73:21:6d:7e:04:c9:cd:
         d7:cb:1a:c0:04:f3:d0:82:d2:6a:af:54:f6:8a:7a:2a:bf:5a:
         2f:58:30:a2:b5:96:89:7c:7a:1f:a1:f0:ca:09:10:c6:4d:7f:
         1c:04:e9:ce:e1:78:34:6b:bd:27:53:e9:30:30:45:78:14:e5:
         fe:54:4c:cd:4b:11:a1:94:c8:d3:cc:71:cd:98:aa:5a:b8:37:
         5b:13:13:07:51:61:26:92:af:46:4a:b5:32:82:85:6a:f4:d6:
         6b:11:8d:5b:ea:0e:8b:f8:53:cd:93:d4:64:10:44:71:ab:ba:
         83:06:eb:17:2c:b3:8e:93:af:b7:64:90:98:4e:82:bf:18:23:
         14:85:a2:6b:43:df:7d:5c:03:84:d8:9a:4b:3a:16:04:86:b9:
         95:12:cc:af:f9:c7:6e:8b:cd:46:92:12:20:ed:43:cc:79:97:
         03:38:95:20
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICHnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTI5MTIyNTExWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODM4NTIyNy1jYzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6MN/N8kA/6vohLO03NgWyJk5JdTeja9Fo50+DtNJUNjpCimSWzYZQzFpm5qp
eJKdbTBIGLxfPd/CTLvezqZLuLMGu55vdBLTz3NoJJ3xXoW1JGPAEUngNKa68ICi
tTCgLEFIVit8RAaOYOAhL6QHXN97tkQFxdrsFHXQdqOv41eWTBWnOeHW/EjS3egW
0GlMeEEXUAV5Pod0iqg2KWVjE5hvl4TwmzX29i0mBsnD/yE3ixNVxfzhyNLaQ9o0
ynCMXRI8/NFYahS/JzSaJwMt8CgZp4UFryQbykzFlCLepXl3DrCZVtv33mJnuZY7
3OvtSkMJyLe8PHjgcstpEoCNFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIEf8gbp
qb+0DgbZ01LsaTMnmBZ9MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRjZGRTJBM0Uz
Qzg3MTFGMDgwMjM0RTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGlYy4wDQYJKoZIhvcNAQELBQADggEBAMyUKJE86nePq6xo
hNiP7LinfTpYA0bWxusp3AdULqzIrHQynp8/mxbubwwQB7c8Oh+Qbv8b2Duf27lt
tZBs19sOGSbLEFjPBGW7RAoN1Hh+mi6RcyFtfgTJzdfLGsAE89CC0mqvVPaKeiq/
Wi9YMKK1lol8eh+h8MoJEMZNfxwE6c7heDRrvSdT6TAwRXgU5f5UTM1LEaGUyNPM
cc2Yqlq4N1sTEwdRYSaSr0ZKtTKChWr01msRjVvqDov4U82T1GQQRHGruoMG6xcs
s46Tr7dkkJhOgr8YIxSFomtD331cA4TYmks6FgSGuZUSzK/5x26LzUaSEiDtQ8x5
lwM4lSA=
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:39:56 2025 by rpki-client