Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/23536D2A45CE11F098A7B377C4F9AE02.roa
File:                     23536D2A45CE11F098A7B377C4F9AE02.roa (raw, json)
Hash identifier:          tx5ah7rL4xTjL5wkz2TEY0MwH/0vVxqwaRzWcDhatTs=
Subject key identifier:   55:30:20:3C:11:0B:70:33:CC:A2:B3:5E:6D:07:2B:3A:16:43:F6:D0
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2E78
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/23536D2A45CE11F098A7B377C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:18:10 +0000
ROA not before:           Sun 31 May 2026 16:18:10 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     133592
IP address blocks:        165.99.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11896 (0x2e78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:18:10 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c5f42-7d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c3:be:95:ef:03:7e:01:80:84:da:15:1d:92:
                    1c:d3:1a:c6:bd:7b:f0:16:6a:50:21:fc:6d:76:4a:
                    31:9c:67:51:34:1d:17:95:37:eb:b4:2e:6d:a4:24:
                    fc:50:16:09:46:c6:ec:74:02:17:f1:b6:d2:a7:99:
                    50:75:81:f4:ff:5c:12:6b:1c:88:55:22:07:ed:5c:
                    46:cc:b8:a9:c8:60:69:72:df:3b:23:4f:aa:64:fe:
                    7c:dd:08:f8:70:71:12:09:73:20:14:a0:50:ab:d1:
                    71:f7:22:99:55:57:7e:23:51:f5:5b:cd:42:2f:65:
                    8d:83:1c:27:c4:61:88:1e:31:25:86:0b:a4:4c:76:
                    91:f5:af:70:5b:ac:dc:ec:da:71:df:42:ce:cf:1c:
                    1e:0d:6c:3d:c1:62:86:bb:45:ec:7c:96:eb:86:45:
                    54:72:61:c9:12:ec:83:05:94:f8:ba:dd:40:5a:5b:
                    68:27:76:23:69:f2:2c:4f:cd:10:ed:53:12:30:9f:
                    1a:5c:30:af:e0:85:56:67:09:23:14:a0:55:39:af:
                    26:95:47:8c:5d:67:c3:0d:cf:03:dd:b3:f9:a3:83:
                    b3:a5:5a:85:92:10:40:d8:93:80:69:c9:38:6f:16:
                    14:24:0a:7e:53:d8:2c:50:e2:36:9e:12:20:7c:de:
                    2f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:30:20:3C:11:0B:70:33:CC:A2:B3:5E:6D:07:2B:3A:16:43:F6:D0
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/23536D2A45CE11F098A7B377C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:5d:e3:23:8b:46:64:c6:30:e1:12:b2:d4:14:95:c5:30:98:
         41:bc:68:bf:a7:2b:7e:1e:89:9c:df:49:c7:b1:85:f9:db:9f:
         20:ac:02:d5:7a:19:c0:aa:49:cf:3d:56:5b:80:86:ab:ba:f5:
         ea:82:bd:90:f8:19:cc:f2:85:20:65:bd:ea:66:88:d9:a0:89:
         b1:75:57:9a:e1:af:19:68:ad:a1:7c:6a:1d:85:58:6f:b6:60:
         29:a8:53:3c:44:45:59:45:39:3f:5b:8e:1f:9a:1d:2f:3d:0b:
         f0:51:ed:a7:80:f1:f1:2f:2c:3e:4b:95:d2:cf:6a:19:f4:2a:
         77:82:b5:dc:3e:1b:9c:c4:3f:28:fa:4a:6b:8f:73:a4:ee:c4:
         30:45:78:5a:2d:c2:ee:51:a9:a4:37:09:4f:24:77:7e:da:2a:
         be:0c:a4:de:b4:3f:fc:92:69:7e:8c:c6:e2:f9:e3:24:c3:7c:
         76:17:ff:18:83:09:e7:d1:24:62:54:4d:8c:e8:1b:df:4b:52:
         3b:64:3b:0b:f4:23:aa:79:a6:f5:d6:e8:d0:03:06:bc:a4:36:
         dc:52:9a:9d:b6:33:7d:a8:a8:d5:af:b8:74:18:58:71:b1:61:
         e6:ff:bd:27:31:86:bf:00:c9:60:f4:2b:f7:e8:ad:d4:8a:a1:
         e8:86:58:2b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNTMxMTYxODEwWhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNWY0Mi03ZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmcO+le8DfgGAhNoVHZIc0xrGvXvwFmpQIfxtdkoxnGdRNB0XlTfrtC5tpCT8
UBYJRsbsdAIX8bbSp5lQdYH0/1wSaxyIVSIH7VxGzLipyGBpct87I0+qZP583Qj4
cHESCXMgFKBQq9Fx9yKZVVd+I1H1W81CL2WNgxwnxGGIHjElhgukTHaR9a9wW6zc
7Npx30LOzxweDWw9wWKGu0XsfJbrhkVUcmHJEuyDBZT4ut1AWltoJ3YjafIsT80Q
7VMSMJ8aXDCv4IVWZwkjFKBVOa8mlUeMXWfDDc8D3bP5o4OzpVqFkhBA2JOAack4
bxYUJAp+U9gsUOI2nhIgfN4v1QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFUwIDwR
C3AzzKKzXm0HKzoWQ/bQMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjM1MzZEMkE0
NUNFMTFGMDk4QTdCMzc3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWOuMA0GCSqGSIb3DQEBCwUAA4IBAQB5XeMji0ZkxjDhErLUFJXF
MJhBvGi/pyt+Homc30nHsYX5258grALVehnAqknPPVZbgIaruvXqgr2Q+BnM8oUg
Zb3qZojZoImxdVea4a8ZaK2hfGodhVhvtmApqFM8REVZRTk/W44fmh0vPQvwUe2n
gPHxLyw+S5XSz2oZ9Cp3grXcPhucxD8o+kprj3Ok7sQwRXhaLcLuUamkNwlPJHd+
2iq+DKTetD/8kml+jMbi+eMkw3x2F/8Ygwnn0SRiVE2M6BvfS1I7ZDsL9COqeab1
1ujQAwa8pDbcUpqdtjN9qKjVr7h0GFhxsWHm/70nMYa/AMlg9Cv36K3UiqHohlgr
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:05 2026 by rpki-client