Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/583C86380BB211ED8F05E427C4F9AE02.roa
File:                     583C86380BB211ED8F05E427C4F9AE02.roa (raw, json)
Hash identifier:          zOvHuNJfy1g+VIIU05MR/IwrnELnixR7jdUcwFZKVV0=
Subject key identifier:   C7:37:16:B9:91:90:65:7D:5C:BE:DE:78:3B:51:A0:0E:BB:FB:D4:CA
Certificate issuer:       /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial:       3633
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/583C86380BB211ED8F05E427C4F9AE02.roa
Signing time:             Thu 06 Aug 2026 15:10:50 +0000
ROA not before:           Thu 06 Aug 2026 15:10:50 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     396982
IP address blocks:        165.213.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 14:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13875 (0x3633)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
        Validity
            Not Before: Aug  6 15:10:50 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a74a3fa-4d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1b:9d:1c:1a:b7:00:a7:35:1d:e4:70:ff:31:
                    e8:59:84:07:08:fd:71:26:e8:1f:b1:de:5a:ab:a6:
                    14:90:26:e2:fa:bc:3e:41:67:7d:12:2e:36:f1:ae:
                    5f:5f:89:f4:17:fc:5b:18:93:b5:73:72:88:05:83:
                    06:28:36:ea:65:ae:4d:89:b4:e4:2b:5a:9d:74:09:
                    de:76:99:8d:af:42:68:db:e6:96:d0:6b:02:96:97:
                    22:99:31:9d:2e:7d:d2:1b:69:ae:b7:3b:10:90:e5:
                    4d:c2:1f:c9:78:93:a5:28:c6:ed:26:35:24:bc:3b:
                    d1:8f:55:05:fe:82:31:50:ec:8e:40:1c:7c:2c:f7:
                    c7:38:68:b2:eb:33:8d:3d:76:41:df:dc:a4:6e:12:
                    ee:85:87:11:01:08:a2:4b:8d:34:94:42:8b:2d:93:
                    f2:15:f9:bb:89:2a:04:ca:ef:09:40:b0:9e:21:e6:
                    2c:63:84:7d:ec:5f:06:9e:83:01:31:0f:ad:d0:ca:
                    4e:3d:b8:c5:4f:fb:ab:de:d4:c8:d6:d4:9c:0f:61:
                    0f:18:b2:4b:1c:67:14:7c:a5:ab:a3:48:dd:5f:84:
                    12:16:69:4e:bb:4f:6a:98:e0:d5:75:c5:e5:e5:e1:
                    3c:37:24:13:e8:ca:a3:09:66:a8:ce:9a:99:69:96:
                    97:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:37:16:B9:91:90:65:7D:5C:BE:DE:78:3B:51:A0:0E:BB:FB:D4:CA
            X509v3 Authority Key Identifier:
                keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/583C86380BB211ED8F05E427C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.213.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:d2:39:cf:05:4e:74:a3:28:31:cb:bc:0e:ce:63:a0:07:18:
         ea:e8:53:63:e2:83:10:46:2c:88:aa:1f:c4:53:63:26:9f:84:
         58:4d:e5:35:86:db:71:e3:d2:80:98:24:c9:88:de:a1:5a:85:
         1a:e1:d6:7e:02:c4:81:16:8e:8f:72:29:af:1e:88:8d:3e:58:
         03:0d:90:72:0b:24:ec:3c:06:47:5f:40:27:1a:dd:bd:29:3b:
         a1:d9:73:a3:2d:34:45:8a:04:97:0d:f8:9b:2e:3f:68:9f:ff:
         9e:0e:a1:3f:ce:08:8d:15:c0:19:12:17:cd:70:8c:ea:6b:35:
         8a:a7:ab:2c:43:0b:13:d8:18:16:6c:9a:7d:19:6c:ee:68:0e:
         8a:0d:d6:e7:f9:dd:42:ef:1f:f7:78:87:4e:3f:e5:53:fe:f7:
         49:35:aa:83:37:b3:b3:ec:1d:d6:3a:54:9e:1e:c1:97:6c:0b:
         3b:a7:0f:05:d6:64:1d:af:d6:38:3e:19:2d:7e:47:a7:0a:b4:
         88:95:53:ce:74:53:50:4b:af:b5:a7:94:f3:e4:d8:e1:e3:c2:
         d2:5d:8a:e2:df:a2:51:34:1c:81:d7:9e:ca:cc:91:ee:13:57:
         32:2e:36:c2:04:cb:10:24:60:75:f3:81:d8:2b:53:ef:0b:8e:
         b4:19:c2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:55:46 2026 by rpki-client