Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/554EE88487D911F08B837C49C4F9AE02.roa
File:                     554EE88487D911F08B837C49C4F9AE02.roa (raw, json)
Hash identifier:          mrqENyuiKG5xVgDdo7UrrcMh5yOfyP2Su4rVIqkeeYw=
Subject key identifier:   CC:62:00:E8:7A:E2:50:71:B8:2E:9C:5A:D6:BC:E3:D1:CE:35:9D:19
Certificate issuer:       /CN=A9169E54/serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F
Certificate serial:       28
Authority key identifier: EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/554EE88487D911F08B837C49C4F9AE02.roa
Signing time:             Tue 02 Sep 2025 08:46:36 +0000
ROA not before:           Tue 02 Sep 2025 08:46:36 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     58768
IP address blocks:        165.101.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl
                          rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 08:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169E54, serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F
        Validity
            Not Before: Sep  2 08:46:36 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68b6aeeb-ac59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3e:a9:ec:87:6b:75:6f:1e:53:57:b7:98:11:
                    31:51:95:9b:16:40:ac:2f:e0:84:8c:f5:7c:a7:d3:
                    85:bc:35:68:5f:b8:7e:35:fb:50:f6:04:2d:7c:85:
                    a1:26:d8:b2:32:79:b1:20:35:87:c3:3f:24:fb:83:
                    5d:a3:c1:84:72:82:fe:d5:64:10:c9:1e:76:51:0d:
                    01:ac:47:91:7b:c7:f8:69:d8:0b:c6:16:5d:aa:cb:
                    4a:b4:36:26:15:1b:62:b2:70:cb:d6:01:6a:3e:f7:
                    62:16:98:05:57:3d:15:2f:ad:f1:0d:50:d9:bc:1b:
                    9c:17:fd:0a:11:2d:59:af:1e:d4:44:26:e8:96:10:
                    32:46:1b:f3:0f:cc:65:58:dc:b7:76:a0:ac:10:3e:
                    2f:10:7d:1c:bc:b2:03:07:10:cd:ef:7d:90:fd:83:
                    6e:13:96:e7:9e:98:ee:a3:59:a0:c2:68:41:f8:93:
                    5b:74:27:fe:b5:f4:27:96:74:03:4d:2c:98:96:11:
                    20:55:4c:29:a0:12:f1:60:2b:1e:e5:9c:29:45:79:
                    3c:34:26:ec:73:c6:8f:cb:73:c0:f2:9e:3d:c1:64:
                    a6:07:d4:a4:75:0f:c0:94:a1:d0:ce:d2:73:35:66:
                    c3:68:2c:7d:99:b8:19:74:22:d5:58:ef:c4:b1:e8:
                    5a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:62:00:E8:7A:E2:50:71:B8:2E:9C:5A:D6:BC:E3:D1:CE:35:9D:19
            X509v3 Authority Key Identifier:
                keyid:EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/554EE88487D911F08B837C49C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:2d:a7:44:9c:05:c3:4d:80:c9:24:3f:a9:30:49:a8:6c:c9:
         23:f1:62:77:ea:69:f0:da:91:0c:36:8e:8a:4f:1c:a7:dc:e1:
         85:04:13:7d:ca:ce:d5:2d:9a:e9:71:59:80:9c:81:ef:6d:9d:
         89:96:46:8b:31:4b:e6:81:89:d5:43:d5:47:d8:f2:1d:94:9f:
         cb:07:9c:ec:bd:e2:42:b8:1f:7c:77:53:74:eb:a2:b6:12:10:
         bc:c4:ec:83:c6:d8:10:27:90:49:6c:7d:a8:c1:a4:b1:f1:3b:
         6f:ee:54:32:aa:0f:f1:aa:65:eb:b6:23:dd:8e:cb:f8:f2:69:
         04:2c:b7:9d:1a:b0:bb:fc:97:1e:d7:a1:44:85:c4:92:0f:7f:
         06:bc:6a:ce:b4:2e:52:e1:5a:dd:36:d3:47:7c:94:a3:c6:ab:
         3d:ff:66:35:8f:d5:ce:70:e0:3c:7c:01:3b:7e:9b:62:3f:fd:
         32:0d:bf:54:82:f8:66:5a:93:e7:28:e6:a9:7c:c1:67:cc:9d:
         09:e2:9c:8f:1b:47:70:52:af:43:84:61:ca:47:fb:09:83:69:
         66:a3:97:ea:4f:32:bb:4f:85:70:a1:6f:b6:31:6f:2e:3e:89:
         56:bc:6d:6f:e2:2d:77:af:aa:31:78:1a:f2:6f:71:23:0a:b1:
         28:61:8b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 22:54:42 2025 by rpki-client