Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/C053613E38B311F08DB63209C4F9AE02.roa
File:                     C053613E38B311F08DB63209C4F9AE02.roa (raw, json)
Hash identifier:          XGziVhW7bV6WTpnAO5hHSMS6E/tbFN56AbeKUPYhFNI=
Subject key identifier:   FA:31:4B:14:DA:94:16:61:A5:AB:BC:AF:BD:CF:89:D2:C7:23:75:5C
Certificate issuer:       /CN=A918EF87/serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
Certificate serial:       90
Authority key identifier: 5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/C053613E38B311F08DB63209C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:06:43 +0000
ROA not before:           Sat 24 May 2025 15:28:33 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     132475
IP address blocks:        165.99.90.0/23 maxlen: 23
                          165.99.90.0/24 maxlen: 24
                          165.99.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl
                          rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:47:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EF87, serialNumber=5EC5FB334EE52B9009CB923C693BD20F0478A144
        Validity
            Not Before: May 24 15:28:33 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3e583-9a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:93:de:be:77:10:3e:1b:4e:a3:30:4e:63:78:
                    0c:20:38:5a:72:07:8a:36:e0:46:2a:c5:dd:be:1b:
                    3d:c6:ce:22:f9:fc:7c:62:14:b6:ec:28:6b:0f:00:
                    75:7b:65:fe:14:b8:da:d9:6c:29:d4:a5:e4:21:fe:
                    9d:1e:e3:cf:8e:7a:fd:45:69:2e:a7:7c:dc:96:85:
                    55:71:bb:92:be:e5:0e:b6:3b:f1:5a:04:93:06:79:
                    f8:5b:4b:c3:38:92:ee:8f:49:6a:b9:c0:73:d0:01:
                    4b:61:5e:6c:69:00:08:90:27:f1:b6:46:19:7a:c7:
                    ff:da:7d:4a:93:79:e7:a0:e4:84:20:80:c4:56:18:
                    74:8d:b3:02:e5:5a:f5:6a:16:79:5f:be:33:05:e4:
                    7f:a6:83:d8:9e:50:ea:89:66:12:65:02:af:82:52:
                    9b:54:00:10:57:ef:51:cd:2c:e0:a8:8d:eb:d3:e1:
                    fc:b4:88:0c:a5:ef:c5:fd:74:13:b0:c2:ee:ec:af:
                    ef:7b:f4:1b:19:dd:78:a3:aa:2a:a4:89:5c:17:87:
                    94:32:bf:f0:48:ef:dd:9f:84:bd:2f:e6:ff:a4:a7:
                    53:c0:78:b5:c8:94:47:63:5d:dd:2d:20:1e:77:99:
                    8d:8c:49:36:2d:d2:5c:52:00:67:ca:b5:78:22:83:
                    64:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:31:4B:14:DA:94:16:61:A5:AB:BC:AF:BD:CF:89:D2:C7:23:75:5C
            X509v3 Authority Key Identifier:
                keyid:5E:C5:FB:33:4E:E5:2B:90:09:CB:92:3C:69:3B:D2:0F:04:78:A1:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/XsX7M07lK5AJy5I8aTvSDwR4oUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XsX7M07lK5AJy5I8aTvSDwR4oUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3400802238B311F091418086C4F9AE02/C053613E38B311F08DB63209C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:d5:fd:cb:e3:cc:9d:8a:42:38:77:81:f1:6a:ed:cd:07:ef:
         06:38:86:0d:ad:58:36:f6:f1:0e:c9:4d:d0:a7:85:97:02:db:
         47:ff:09:87:31:f0:17:0c:73:eb:ac:69:ee:39:ca:78:ca:27:
         22:cd:5c:82:b6:ec:b3:a6:a5:a5:64:bf:01:87:d2:e4:e8:04:
         71:f5:e2:d0:26:c1:de:fc:f6:67:ec:51:e9:2b:83:72:e7:79:
         09:f6:56:8c:5e:19:a7:36:5f:69:16:f2:9d:84:79:8e:b6:c3:
         1f:c0:93:b8:aa:9f:f7:85:ca:63:18:6f:8f:03:5f:e4:ff:51:
         c2:6e:cb:ac:97:d3:f0:4a:9b:55:54:53:1a:d5:60:dd:9f:26:
         4b:8b:2f:d3:d4:a7:d6:ad:1a:72:a6:5e:60:2f:34:52:55:70:
         59:7a:b2:89:75:44:60:8e:6d:b6:f8:a8:a1:4b:8d:bc:68:45:
         d1:88:d0:c6:62:e5:72:ba:a5:ea:ad:7b:3b:2f:fa:5a:20:1e:
         68:c4:4a:72:31:c5:92:85:45:a5:df:be:79:ec:6c:62:78:58:
         07:16:94:ef:08:cd:e3:22:14:0c:e7:69:b0:d3:1a:34:3f:1f:
         21:b8:b6:32:3e:74:fa:c3:0f:33:d9:56:4d:12:cd:02:7d:98:
         28:b2:4d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:57 2026 by rpki-client