Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/E811884091F511F0AF44B33CC4F9AE02.roa
File:                     E811884091F511F0AF44B33CC4F9AE02.roa (raw, json)
Hash identifier:          B8mE+BnGcSCfetwEpKMi2JnuLvodcbXJyjm1nAZFbgM=
Subject key identifier:   42:CA:27:6B:74:81:6F:BC:D2:92:12:A6:3F:50:8E:75:E1:D5:2B:D6
Certificate issuer:       /CN=A9131C4B/serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752
Certificate serial:       02
Authority key identifier: A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/E811884091F511F0AF44B33CC4F9AE02.roa
Signing time:             Mon 15 Sep 2025 05:36:20 +0000
ROA not before:           Mon 15 Sep 2025 05:36:20 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     153929
IP address blocks:        165.99.176.0/24 maxlen: 24
                          165.99.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl
                          rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 07:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131C4B, serialNumber=A8E1930CBB728CBE8D9EA3A2F640F5398463C752
        Validity
            Not Before: Sep 15 05:36:20 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68c7a5d3-efc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:01:26:ea:43:1d:72:68:e6:c1:4b:67:bc:3c:
                    85:34:e0:81:f9:dd:64:fc:29:d5:1a:e7:d4:bb:91:
                    1e:0f:f3:7a:cb:b5:15:b4:3f:91:1f:d6:dc:f5:d2:
                    03:2a:51:a9:b1:b7:ea:e5:27:6a:12:2e:42:4d:65:
                    b4:22:f2:f6:4a:78:55:e4:38:54:46:84:f9:ea:00:
                    c1:38:34:7c:ec:cb:7d:27:d5:33:e0:cb:84:00:9a:
                    fb:64:75:02:29:cd:be:01:ec:78:b0:af:20:c2:95:
                    ce:74:5c:86:81:e4:c6:77:84:47:0a:71:37:b5:ab:
                    5f:75:2c:0e:4e:2d:b8:b5:b0:20:7c:75:de:7d:6a:
                    8f:2a:36:59:fa:b8:3d:2b:97:57:f7:e1:f8:21:e4:
                    f6:ef:72:5e:37:ed:8b:b4:5c:17:42:70:1b:b8:15:
                    76:92:e1:95:10:54:b0:5b:3a:a0:44:9f:b0:fd:e6:
                    0d:6c:4d:2d:a9:1b:74:43:f6:8a:54:f4:f0:31:d2:
                    07:e0:ec:68:8c:a3:35:87:00:45:3d:75:2a:d0:af:
                    37:38:95:fc:8c:fe:de:58:4b:a4:13:09:aa:71:ec:
                    a8:70:c5:5e:85:2b:34:1b:42:a4:10:56:fe:68:10:
                    6a:85:99:f9:ae:37:c0:95:64:21:c0:03:b9:34:ce:
                    b8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CA:27:6B:74:81:6F:BC:D2:92:12:A6:3F:50:8E:75:E1:D5:2B:D6
            X509v3 Authority Key Identifier:
                keyid:A8:E1:93:0C:BB:72:8C:BE:8D:9E:A3:A2:F6:40:F5:39:84:63:C7:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/qOGTDLtyjL6NnqOi9kD1OYRjx1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qOGTDLtyjL6NnqOi9kD1OYRjx1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/09C6C37A91F511F08834EB1AC4F9AE02/E811884091F511F0AF44B33CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:12:99:6c:be:43:20:82:b7:6b:4e:0e:27:26:33:50:68:ca:
         b9:15:e9:36:7e:8f:b5:31:a0:f6:12:af:1f:de:77:19:31:71:
         ed:5c:df:8b:1f:43:60:a7:48:fd:b5:ec:06:87:55:72:4a:fd:
         04:cc:e9:e9:4d:af:73:e5:65:66:ac:49:52:d9:d3:7b:eb:88:
         26:98:ac:de:78:af:0e:c9:26:b4:89:63:71:03:58:ef:dd:4b:
         e8:6b:ea:89:2b:e9:e3:01:37:ef:23:99:33:86:f5:d4:f7:c9:
         f4:f7:5a:bb:90:1b:50:4a:0f:0a:57:5b:e1:cf:32:5d:26:01:
         a5:ab:07:8c:98:15:ed:e9:5b:0b:81:c9:e6:1c:d1:64:a3:ea:
         d3:dc:3f:3f:f2:74:a7:0a:a6:57:c3:6c:c5:16:f4:0b:12:0e:
         a2:db:50:a7:6a:0b:60:01:1b:31:d4:0a:78:92:66:db:3e:da:
         06:0c:22:d1:f7:46:f2:b5:51:ae:e6:22:29:fb:5b:9b:13:a2:
         ed:f3:1b:05:e5:23:4a:b9:bd:d8:0a:70:d1:fd:13:c3:c3:a2:
         f1:58:ce:4b:f9:31:21:a6:38:5d:2a:8f:b7:bd:06:af:9e:93:
         7e:f1:e1:9f:76:51:90:bd:13:c6:97:24:9c:6d:24:84:a2:e0:
         9e:9e:cb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:58:38 2025 by rpki-client