Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/780B9CF8867811F0AA0D2534C4F9AE02.roa
File:                     780B9CF8867811F0AA0D2534C4F9AE02.roa (raw, json)
Hash identifier:          X3bLg+wYV1t3tD4gl+ObUUyr463NoOxUyC03tZzeKjA=
Subject key identifier:   FF:AA:B8:6D:70:C6:37:F2:CD:AB:76:1B:C8:DB:DD:3B:28:D2:E2:53
Certificate issuer:       /CN=A916DFDD/serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA
Certificate serial:       2C
Authority key identifier: 12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/780B9CF8867811F0AA0D2534C4F9AE02.roa
Signing time:             Sun 31 Aug 2025 14:40:42 +0000
ROA not before:           Sun 31 Aug 2025 14:40:42 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     141030
IP address blocks:        165.101.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl
                          rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 08:13:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DFDD, serialNumber=1259BF2CE2E16EDE4BB6559130418155614BA3EA
        Validity
            Not Before: Aug 31 14:40:42 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68b45ee9-036f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:93:15:f2:d0:44:4e:84:50:ea:97:a5:5f:21:
                    9f:98:8f:f2:8d:d9:12:e6:54:bf:45:ae:12:0d:b6:
                    88:07:df:c8:d9:df:9e:d3:c1:08:67:9e:bf:7f:e7:
                    5d:fb:b6:85:76:b2:73:26:d3:62:6e:07:cb:98:7f:
                    71:c4:30:6f:e8:f7:91:ec:c0:a2:ae:3b:93:eb:63:
                    41:38:0f:68:52:54:53:f2:fd:18:0e:50:60:1f:55:
                    77:2a:bb:ff:51:af:f5:ee:a4:94:bb:14:fa:da:7a:
                    de:a7:71:b0:a0:f3:87:c4:e2:8f:6e:01:52:18:a7:
                    ce:f0:9c:8f:c6:fc:aa:d6:cf:ea:c4:ea:1b:2d:ec:
                    9c:e7:d0:ef:6e:f0:7c:dd:29:6c:5c:df:2d:dd:4c:
                    48:3f:06:4c:08:23:13:cd:86:4d:5e:08:c8:64:ef:
                    b4:0f:6f:94:e2:8a:20:fd:9c:98:88:24:30:f4:2b:
                    c6:7f:aa:06:04:ac:9d:79:c5:4f:d4:6a:15:cc:90:
                    d1:f5:1e:2c:0f:ac:14:69:7e:05:9c:6d:63:8f:a9:
                    d0:29:80:2b:c8:e9:2a:47:88:6b:2c:b3:9d:59:b1:
                    23:4c:9b:a9:4e:4c:bd:86:7c:ee:b4:97:29:b1:21:
                    ab:4c:29:84:ce:88:ba:27:74:ec:73:e7:c3:e5:95:
                    59:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AA:B8:6D:70:C6:37:F2:CD:AB:76:1B:C8:DB:DD:3B:28:D2:E2:53
            X509v3 Authority Key Identifier:
                keyid:12:59:BF:2C:E2:E1:6E:DE:4B:B6:55:91:30:41:81:55:61:4B:A3:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/Elm_LOLhbt5LtlWRMEGBVWFLo-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Elm_LOLhbt5LtlWRMEGBVWFLo-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DFDD/97EE0AC04A9011F0B288AC59C4F9AE02/780B9CF8867811F0AA0D2534C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:e4:f9:ec:6b:13:9a:ea:a2:b7:8b:9a:97:43:ac:6a:79:77:
         6a:5d:54:6a:b6:d4:b1:22:8a:06:ea:b9:bf:ad:96:45:e8:d5:
         93:09:4a:d1:78:1f:ef:98:aa:aa:3c:ba:5a:a6:18:f0:8f:54:
         12:70:b7:7c:09:44:26:48:51:c6:69:63:b4:9c:27:b9:e6:86:
         94:69:5a:3a:a0:66:82:2a:65:b3:8e:ed:14:b3:6b:6a:01:5c:
         2b:27:12:df:d3:53:bd:9c:9b:cd:49:92:9b:ea:d8:19:a0:eb:
         b8:04:16:00:ea:91:22:1c:73:cc:aa:cf:03:aa:a9:e8:0b:78:
         03:29:36:f1:e7:d4:e9:fa:d4:c1:03:6c:19:54:c0:5f:72:d2:
         d9:b3:c9:a9:9e:e3:27:f2:d4:6a:22:91:ae:a5:02:8d:d0:f3:
         9b:c6:00:a2:56:a0:fa:74:93:f0:a3:10:fb:c7:6a:ad:e9:36:
         6d:49:ca:c4:2c:15:91:99:5f:7b:74:51:20:a0:49:19:4e:17:
         2a:a2:a4:7b:56:8d:05:b7:25:02:35:5b:00:44:43:fa:67:ca:
         b3:aa:07:53:d2:af:64:ae:b5:70:f3:f9:9c:18:0c:11:26:ae:
         2d:39:58:f1:e4:02:c8:fc:aa:c5:ce:61:7d:c5:e8:bb:6d:97:
         d4:6b:16:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 00:32:33 2025 by rpki-client