Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1C089672407811F089B24D29C4F9AE02.roa
File:                     1C089672407811F089B24D29C4F9AE02.roa (raw, json)
Hash identifier:          pydyc7i/dmjmZ+giyfcnHnMj6shYKdmK+zQgJv4R6W4=
Subject key identifier:   09:E7:BC:17:8F:D7:18:A7:B1:90:4E:55:38:0D:4B:96:23:94:36:45
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2FB8
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1C089672407811F089B24D29C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:28:16 +0000
ROA not before:           Sun 31 May 2026 16:28:16 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153931
IP address blocks:        165.99.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12216 (0x2fb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:28:16 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c61a0-b47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8c:ca:67:0c:71:34:30:b8:cc:65:09:18:48:
                    32:da:1b:a8:6d:b6:a2:26:a9:6a:86:c9:71:25:9b:
                    f1:7a:bb:90:89:5b:53:2c:49:3c:df:d6:d1:1d:e5:
                    cf:3e:cd:1e:28:97:0b:a8:ed:1b:70:17:81:3c:0c:
                    2a:5c:e1:62:36:d4:fe:16:4b:47:7a:64:86:04:b9:
                    52:dd:cd:ee:66:3d:0b:28:81:c6:47:82:24:77:35:
                    e7:47:43:a4:52:92:fd:8b:22:10:9d:79:25:0c:ef:
                    d4:ac:6e:43:97:fa:84:56:85:f8:f8:98:31:43:fc:
                    35:16:55:8d:80:11:10:24:5c:ee:ae:97:a5:f3:07:
                    89:e4:fc:38:14:a3:52:63:66:0e:26:ba:d8:18:6f:
                    f3:ac:96:d0:0f:21:27:ef:e2:59:7f:0b:bd:a4:9a:
                    14:9d:c8:d3:f4:94:f5:ff:1b:02:36:3b:80:0e:a4:
                    c2:cb:53:7c:39:86:c1:d5:fc:1f:89:2b:d2:e1:6c:
                    3c:1d:1d:35:7d:6c:50:97:21:f4:c2:f6:69:01:a6:
                    8a:48:1c:e1:1d:b9:cd:79:a8:0c:80:63:d5:f0:0c:
                    b8:5a:2d:9d:18:72:d4:db:6c:d3:dd:74:c0:7b:47:
                    cc:7e:48:af:de:cf:b1:97:32:7a:60:73:b6:6e:e8:
                    03:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E7:BC:17:8F:D7:18:A7:B1:90:4E:55:38:0D:4B:96:23:94:36:45
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1C089672407811F089B24D29C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:7d:0f:23:e2:8c:49:89:f2:71:3f:84:09:9a:d6:1d:81:b3:
         6c:c5:37:38:f1:df:5f:ef:06:fc:10:99:40:ce:12:3a:95:d9:
         52:65:f5:80:51:67:92:58:80:ba:d4:8d:c4:de:c1:b3:04:5f:
         25:fe:ce:c5:7e:7f:d0:1b:58:8b:de:8f:6d:b8:89:14:eb:b9:
         63:2b:09:3c:7e:c6:23:b9:87:23:3d:af:e6:74:b1:63:b4:4c:
         b3:da:eb:c2:6f:23:23:91:bd:06:9a:f0:81:3a:40:70:ca:54:
         40:8c:a2:af:2b:df:d0:d4:13:e6:82:aa:a8:f6:82:28:3d:2e:
         05:ed:8b:fe:89:84:7e:2c:db:f0:da:23:e1:11:1b:b3:3e:9a:
         3e:07:b1:8b:71:50:4c:f8:01:d1:89:9e:63:bf:e5:a4:4c:a1:
         20:d5:4c:3d:84:37:17:d6:7d:f2:ab:ae:fc:db:4f:8e:86:a1:
         35:03:92:63:0c:72:99:cd:70:b7:65:8c:3d:5f:fb:df:f2:11:
         9d:7b:42:aa:c9:91:fc:02:4f:ca:84:85:a1:d1:4b:7e:1b:2f:
         12:e7:51:46:a8:24:47:77:1b:dd:21:9a:ed:eb:ef:5b:15:ca:
         e8:ff:2f:a5:c1:a9:fe:bc:3e:5c:1a:f7:4e:d4:ed:f9:1e:34:
         81:03:8d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:23 2026 by rpki-client