Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/583C86380BB211ED8F05E427C4F9AE02.roa
File:                     583C86380BB211ED8F05E427C4F9AE02.roa (raw, json)
Hash identifier:          z0+u6Iw9nBsWkBxEBsOze7XPIpbGqUrpaAbGEfXztn0=
Subject key identifier:   69:09:69:F1:1E:7A:08:EF:72:EE:7E:37:F7:39:4C:55:DB:E4:6A:C4
Certificate issuer:       /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial:       3503
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/583C86380BB211ED8F05E427C4F9AE02.roa
Signing time:             Fri 04 Jul 2025 14:50:21 +0000
ROA not before:           Fri 04 Jul 2025 14:50:20 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     396982
IP address blocks:        165.213.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 14:22:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13571 (0x3503)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
        Validity
            Not Before: Jul  4 14:50:20 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6867ea2c-fd17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3b:9f:a0:5d:e2:81:c6:45:16:6d:46:17:b8:
                    63:3f:a9:af:03:c1:2a:d7:e4:1d:90:01:05:6a:25:
                    b2:47:9b:d3:d2:4f:30:7f:22:e5:08:69:96:64:2d:
                    73:63:69:b7:fe:9e:46:6c:c8:32:1c:e3:13:0f:76:
                    4d:69:58:8d:9d:16:f4:ee:fb:ef:66:f0:54:d7:35:
                    02:c6:2e:25:d5:ce:75:67:e0:83:3e:a9:29:0d:f5:
                    0d:85:57:51:26:41:37:fe:a2:ab:ec:66:89:b9:24:
                    29:95:16:f4:1a:1e:99:36:16:23:7f:34:ee:96:7f:
                    7b:10:a7:82:81:c8:0d:75:cd:5e:c6:27:f8:97:cb:
                    75:a5:58:4b:46:1d:c2:b1:98:1c:ec:94:85:4a:58:
                    98:c0:f1:f7:51:c8:05:e1:02:6f:2b:56:58:2c:4e:
                    4d:37:da:89:30:ec:fc:6b:45:09:4a:40:bf:36:c2:
                    c0:42:40:d2:38:6c:3e:89:2f:c3:d6:a7:e8:8f:87:
                    33:15:13:60:36:fc:c6:fb:df:d7:22:1f:19:97:58:
                    53:37:aa:52:cf:df:5a:7d:88:00:61:a6:dc:b3:8e:
                    23:6f:6c:1b:e6:4a:a6:e8:35:1f:de:e4:f6:85:89:
                    e3:06:35:6a:b5:0c:33:e1:14:c2:3c:02:8d:99:fe:
                    5e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:09:69:F1:1E:7A:08:EF:72:EE:7E:37:F7:39:4C:55:DB:E4:6A:C4
            X509v3 Authority Key Identifier:
                keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/583C86380BB211ED8F05E427C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.213.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:cc:26:4e:30:cb:62:ea:16:a5:f1:9c:85:f2:1d:3f:d1:3b:
         03:4e:5e:47:cd:c9:df:d4:5d:c7:aa:09:e7:7e:f2:2a:c7:98:
         f6:74:8c:75:51:c9:83:10:90:2d:38:f4:ac:89:f4:54:97:ef:
         eb:0d:46:aa:5d:c3:cf:a8:d8:bb:ef:0d:a5:b7:40:52:f9:a1:
         d6:48:48:1d:0b:b3:fa:b9:c5:79:76:ae:81:50:49:d8:76:eb:
         3f:07:22:4d:2d:4a:45:b5:8c:01:17:05:f8:82:9d:0d:e8:aa:
         8a:3a:dc:f5:40:0b:21:37:9d:91:bd:ce:c5:5c:a1:b4:5f:2d:
         70:00:ab:05:80:03:3a:37:98:74:cc:36:df:ea:87:d8:ce:8e:
         d3:0c:72:65:a7:b0:cf:45:e0:80:a7:f0:42:8e:8f:3c:34:1f:
         41:97:4a:55:c8:bd:46:0f:f0:cf:d9:fa:1d:50:63:ef:ed:55:
         cf:f2:6e:6d:14:eb:d6:f2:c2:93:32:29:be:fa:86:ef:25:8f:
         ef:34:dd:06:6e:71:24:22:50:04:42:91:1c:71:7e:2f:99:2c:
         46:6f:f2:b1:72:b7:1a:93:22:fc:be:83:48:1c:fe:06:50:7a:
         aa:b5:f0:df:e1:c3:a0:d5:8a:ed:67:51:a8:4a:18:25:93:6e:
         5a:2e:ab:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:05:28 2025 by rpki-client