Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/38361A086DD311F08BB89272C4F9AE02.roa
File:                     38361A086DD311F08BB89272C4F9AE02.roa (raw, json)
Hash identifier:          jze8pXPb+Ih57A9PJ1kUit8+mteLPMOuLcigHYQRgfs=
Subject key identifier:   18:2A:C3:84:BC:F3:34:52:CD:12:71:8F:2C:A9:E0:D4:24:13:89:D1
Certificate issuer:       /CN=A91907D3/serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A
Certificate serial:       0D
Authority key identifier: D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/38361A086DD311F08BB89272C4F9AE02.roa
Signing time:             Thu 31 Jul 2025 05:57:20 +0000
ROA not before:           Thu 31 Jul 2025 05:57:20 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153861
IP address blocks:        165.99.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.crl
                          rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 08:52:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91907D3, serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A
        Validity
            Not Before: Jul 31 05:57:20 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=688b05bf-e4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e0:4d:41:28:8f:51:ce:19:e7:e4:c5:64:7e:
                    19:0d:c3:c7:6a:ed:30:8d:9b:07:7d:6b:dd:a3:6c:
                    95:1d:98:f6:e5:47:e1:3b:df:80:52:a9:3b:73:38:
                    f6:05:38:14:fd:7a:29:53:53:c5:a3:a2:58:2d:34:
                    34:ea:08:75:8a:6c:92:11:76:c6:90:ed:c5:63:48:
                    c6:38:d6:15:cf:56:1b:2a:a1:00:71:e3:fd:22:f3:
                    a1:52:e4:8a:d6:66:b5:08:df:ec:65:ca:60:e8:52:
                    21:4a:13:39:9c:98:f8:60:8f:ff:39:ec:7e:0a:a1:
                    a1:a8:a8:cd:2e:ca:33:fe:10:d5:6c:e5:f5:ac:65:
                    a2:bf:9e:14:0e:99:f2:91:de:96:32:49:38:2b:6e:
                    d6:f5:6e:96:dc:6f:c3:49:58:86:0d:4c:bc:a0:97:
                    d4:1f:c6:7f:a3:a7:db:bd:9b:41:a0:29:55:41:8e:
                    65:78:57:a1:da:ed:30:13:97:67:ff:d2:20:1b:a8:
                    e4:78:65:22:81:95:6f:99:3f:1f:ae:2e:a7:da:74:
                    f0:f3:9b:e1:2c:48:db:8e:ec:68:cc:97:49:90:c8:
                    46:e5:15:ab:d8:f5:c9:89:44:02:6c:f5:6d:8b:19:
                    37:58:45:90:b0:4e:a2:02:90:f7:f3:b6:fa:b3:ac:
                    30:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2A:C3:84:BC:F3:34:52:CD:12:71:8F:2C:A9:E0:D4:24:13:89:D1
            X509v3 Authority Key Identifier:
                keyid:D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/38361A086DD311F08BB89272C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:e2:12:87:5a:7c:cd:35:8e:71:d6:fe:56:77:a8:08:bb:7c:
         16:89:c6:dd:cd:8d:4d:e6:a1:27:56:0e:be:9a:f1:03:b3:cd:
         fa:ee:7d:ce:17:a2:f1:33:91:79:b1:6b:10:6c:45:94:f3:8f:
         d2:f8:e3:07:5b:02:23:7e:f9:cb:07:29:87:c2:2b:e5:d5:99:
         59:1e:c3:98:e6:9d:80:72:93:5d:5f:98:78:6d:16:98:d7:4b:
         c8:78:82:5f:2d:2e:df:1c:3d:b7:3e:13:c9:18:df:c3:20:37:
         b9:be:6d:d9:4a:e2:7d:ef:73:32:45:ae:94:8a:4e:89:de:54:
         3e:23:e4:e1:d9:ae:33:ba:c4:1d:1d:2d:9f:74:7b:07:1b:11:
         53:34:f2:45:d6:53:00:99:88:ff:fe:4e:52:bc:59:3e:d8:f1:
         7d:82:29:1d:3a:15:8b:41:0c:85:62:1d:06:a8:20:43:ed:ee:
         35:f0:5e:4e:dd:13:4f:64:5c:ab:b2:be:50:92:18:e3:5b:00:
         1f:33:b8:cd:8c:b4:fe:7c:9d:9e:a4:04:73:ab:8f:6a:13:a9:
         09:50:d6:c1:e2:b3:be:23:f2:e7:3d:f3:59:d6:fe:b2:b8:ef:
         c6:69:e3:00:6c:9d:85:87:29:3c:1d:f6:da:db:53:27:e1:0b:
         c6:60:48:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 23:06:34 2025 by rpki-client