Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0D83164E481711F08F365D0FC4F9AE02.roa
File:                     0D83164E481711F08F365D0FC4F9AE02.roa (raw, json)
Hash identifier:          IhBZJuUP5Lq9HgvPuBzOVuf1CIn2gfvGV5uRH80RXPs=
Subject key identifier:   26:9F:AD:CE:E2:32:0C:81:0D:F0:00:3A:26:4E:15:61:84:44:97:2B
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       30D6
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0D83164E481711F08F365D0FC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:17:27 +0000
ROA not before:           Mon 06 Jul 2026 16:17:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137159
IP address blocks:        165.99.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12502 (0x30d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:17:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd517-e2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:96:e8:03:cc:2e:e9:d7:93:c2:6f:67:2a:34:
                    da:ec:43:d6:3c:4a:bf:42:e4:ea:d2:9d:85:07:79:
                    db:e7:a1:5d:83:eb:8a:d3:35:a5:c2:c5:1c:71:5a:
                    62:fc:e0:25:58:8e:ae:c4:46:8d:8e:88:24:e3:32:
                    4a:c2:0a:e5:5b:5f:7c:d1:f3:7b:6a:35:c7:e9:d1:
                    ea:19:f2:4e:82:7c:77:b9:33:bf:5a:f0:e1:34:1a:
                    af:f1:b2:d2:6e:3f:06:f3:64:7e:55:ba:38:b4:8a:
                    69:3a:8c:2d:04:cf:03:54:01:f4:81:33:e9:b2:fb:
                    b3:06:ab:82:75:2b:ee:e0:2c:37:24:0e:65:0f:03:
                    ad:75:99:34:7e:92:fa:82:b0:97:6d:45:da:f6:db:
                    8a:cd:6b:8f:b6:ec:0e:79:21:72:47:ef:7d:34:0d:
                    e2:b1:c5:de:d8:24:b5:0d:35:fd:49:6c:79:9b:5b:
                    9d:c9:fc:7e:44:45:e4:56:bb:21:93:7d:41:2e:c6:
                    c4:c6:da:fb:5e:d3:b5:dd:51:a9:54:40:4b:e8:88:
                    ce:4f:b3:14:53:d5:47:02:70:fc:8f:57:f5:7a:77:
                    ab:f6:c5:2a:7d:ab:09:69:13:53:0c:7a:eb:c6:55:
                    12:96:5b:54:65:23:4d:e8:79:12:77:68:04:f4:e8:
                    0a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:9F:AD:CE:E2:32:0C:81:0D:F0:00:3A:26:4E:15:61:84:44:97:2B
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0D83164E481711F08F365D0FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:5c:c7:a0:90:eb:e1:fd:c9:d0:39:2f:5e:9a:bf:05:e1:12:
         50:c6:0a:84:46:de:bb:db:de:c5:01:c8:22:d1:5f:0c:6c:ac:
         ca:cf:6f:24:c3:cf:dc:63:11:55:f0:85:5c:6c:06:04:30:f0:
         55:a2:22:37:70:be:82:19:e6:66:d4:1d:13:73:29:cb:e9:23:
         5a:40:19:42:28:cb:8e:26:4b:9c:55:80:8e:59:b7:67:ad:6c:
         1d:e9:89:f0:c8:4e:6c:f0:f2:a0:98:ef:e2:2c:d8:4a:ab:95:
         91:45:43:39:f0:0f:c0:68:a9:81:16:0f:4d:00:c9:35:5b:d0:
         c1:04:13:9a:80:78:e8:4e:81:88:25:c3:bd:35:c8:c0:6b:84:
         29:b2:6f:7e:fb:a7:cd:46:be:5e:a3:00:21:39:63:8f:7d:58:
         64:6b:9e:9a:41:ba:a0:1a:87:1c:21:b3:ae:fd:69:0c:a4:a2:
         44:9b:a9:dd:7b:5b:8c:dc:cc:0d:57:c0:17:e7:db:fb:6f:7f:
         2f:a0:eb:f3:95:f2:89:a0:2e:81:13:f8:24:89:e0:2a:f5:66:
         f3:5a:43:15:4d:2e:af:7f:e4:78:91:09:dd:92:bf:56:41:e3:
         bd:28:ef:b9:87:81:e4:77:b4:ff:71:c5:bd:f5:e8:40:45:43:
         22:25:e6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:35 2026 by rpki-client