Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/C7142BC6654E11F0903B1F31C4F9AE02.roa
File:                     C7142BC6654E11F0903B1F31C4F9AE02.roa (raw, json)
Hash identifier:          N2WAIBH8ZMkrMk9CktT8AtzaLV74cC0YpuQq3dTGOmI=
Subject key identifier:   CE:16:87:C4:E5:05:57:35:6F:F1:43:A5:A7:B3:A7:58:94:6E:54:CB
Certificate issuer:       /CN=A91410C5/serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53
Certificate serial:       39
Authority key identifier: 57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/C7142BC6654E11F0903B1F31C4F9AE02.roa
Signing time:             Fri 26 Sep 2025 20:18:24 +0000
ROA not before:           Fri 26 Sep 2025 20:18:24 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     133551
IP address blocks:        165.99.254.0/24 maxlen: 24
                          165.99.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.crl
                          rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 11:14:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91410C5, serialNumber=578849C9B94A355A7620A9747973D21BBEDA3F53
        Validity
            Not Before: Sep 26 20:18:24 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68d6f510-c10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3d:58:8e:7e:e0:91:13:cf:60:1d:39:3d:8a:
                    50:fc:93:f7:6f:23:d1:f0:1e:21:a0:26:20:db:0f:
                    db:df:1b:05:42:98:c5:f8:0e:01:9e:41:ba:32:94:
                    56:0d:b9:22:d6:a2:9d:a5:0f:2a:10:05:43:64:58:
                    4b:be:b3:bd:c8:bf:cc:90:aa:eb:54:23:ee:ac:11:
                    05:66:74:5a:94:74:19:49:c8:2d:41:23:ed:26:1a:
                    98:e0:4b:1d:66:f2:0a:e6:f7:c7:53:88:98:08:a6:
                    51:7c:5c:12:d5:01:a9:3b:76:ab:ed:4e:99:53:a1:
                    a3:ac:0d:67:b1:46:8c:1d:1d:9c:0a:12:3e:ec:16:
                    99:51:3e:10:28:86:30:00:5a:2c:01:34:d9:3f:c6:
                    64:e4:8b:14:24:91:33:8d:76:85:8d:d1:6c:42:26:
                    62:6a:c4:85:12:6e:fc:05:91:5c:94:ae:fe:fd:dc:
                    5e:91:ac:02:5d:87:d9:2d:f4:19:7b:73:a9:fe:93:
                    dd:fd:a5:8f:85:e6:19:10:d8:98:93:1b:57:ea:20:
                    4c:fb:f6:e4:4b:ac:c5:38:84:b9:da:15:e6:a3:16:
                    71:75:70:0f:9c:a2:84:39:a5:da:a9:5e:9e:d3:4a:
                    28:41:f1:51:8c:38:fc:7f:cf:bc:0e:fd:f3:cc:97:
                    af:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:16:87:C4:E5:05:57:35:6F:F1:43:A5:A7:B3:A7:58:94:6E:54:CB
            X509v3 Authority Key Identifier:
                keyid:57:88:49:C9:B9:4A:35:5A:76:20:A9:74:79:73:D2:1B:BE:DA:3F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/V4hJyblKNVp2IKl0eXPSG77aP1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V4hJyblKNVp2IKl0eXPSG77aP1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410C5/D109EBD0572E11F095F7FE48C4F9AE02/C7142BC6654E11F0903B1F31C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:8e:4e:b2:b6:ea:ef:14:cb:ad:f3:8f:68:27:fe:3f:d1:58:
         c2:56:0c:18:d3:17:6c:c4:5b:06:ce:e9:fc:28:51:0d:ae:ef:
         e0:6c:5e:0d:d7:86:51:75:81:b2:e5:da:7e:64:58:50:7c:bf:
         76:8a:18:90:02:ad:24:67:b4:bb:b6:bb:ea:5d:f6:b9:0a:11:
         7e:f8:47:ed:e4:36:1d:a1:4a:89:8b:bf:3d:8d:1a:dd:cc:e9:
         f3:fc:f5:05:3e:84:9d:d4:82:26:80:62:ed:09:10:69:09:c2:
         d0:63:c4:8a:7c:8d:e5:e7:1b:2b:2f:87:28:9d:f1:1d:7c:21:
         f9:1e:e4:74:c1:25:45:c7:46:83:7e:72:8e:fb:3a:b3:b6:87:
         9a:5a:cb:4d:0a:36:85:fa:ac:53:c5:7b:8b:62:50:df:61:d1:
         4f:a4:8d:0e:15:2d:89:23:02:29:7b:3b:47:c2:43:3b:c5:b4:
         5e:f4:fd:56:4c:2b:61:49:46:bf:d2:2e:1f:33:0a:b1:13:67:
         e2:d7:d9:b7:88:e3:d1:1d:76:fa:3c:02:ee:24:fd:06:0b:aa:
         4b:7b:45:44:62:3e:19:29:35:26:f6:19:27:ca:e9:83:65:f4:
         4b:96:94:7d:a0:60:4a:49:17:dc:06:65:13:59:65:96:79:f2:
         ff:dc:57:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:14:28 2025 by rpki-client