Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/529C31F82BDD11F085C9B049C4F9AE02.roa
File:                     529C31F82BDD11F085C9B049C4F9AE02.roa (raw, json)
Hash identifier:          j4lF/Ug/UxYkjYcC9YLrZbPc2aXEPlm7lvGtvDCOIZ0=
Subject key identifier:   24:59:14:CC:D7:A9:B9:06:BB:E1:93:90:98:D1:D1:91:C5:F8:D0:18
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       30A4
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/529C31F82BDD11F085C9B049C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:15:46 +0000
ROA not before:           Mon 06 Jul 2026 16:15:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133697
IP address blocks:        165.99.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12452 (0x30a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:15:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd4b2-dab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:02:90:22:66:00:de:d7:8a:2f:a6:f9:8d:10:
                    37:c5:60:71:cc:ed:ee:a0:fa:59:92:db:89:f2:87:
                    47:91:45:42:11:cd:d3:2a:01:50:b4:c4:19:e7:dd:
                    84:ab:f5:22:c1:5f:ae:b0:c3:92:45:7c:f9:38:8d:
                    2b:86:b3:22:05:82:8a:13:e3:09:d8:4f:58:1b:e7:
                    32:94:a0:14:b5:de:ce:12:42:03:c0:55:34:75:4c:
                    bb:78:89:25:61:98:6c:13:73:0c:70:d0:21:ec:9a:
                    f0:d8:81:cf:59:7b:9d:bb:fe:8c:9a:b9:fe:c1:f1:
                    53:b2:26:ed:53:97:ef:1b:33:9b:14:ed:2e:e0:29:
                    1f:43:df:5c:f6:59:f3:5c:d9:48:ab:92:b0:6f:48:
                    bd:83:7c:8f:5d:1c:5c:f2:73:d1:f5:e4:03:90:68:
                    0f:89:64:5c:70:57:4f:5a:40:5b:7b:ac:39:71:35:
                    b3:ac:d9:35:d0:dd:e6:7c:27:1d:f2:58:65:f5:0e:
                    1c:a5:74:22:d7:28:6e:06:dd:9e:9d:8c:9a:11:0d:
                    a9:cd:72:51:8c:51:b1:32:a5:b5:84:0b:95:0d:24:
                    2e:f3:b7:1f:5b:2e:b5:c3:7d:b2:6e:03:ff:c2:29:
                    ff:a6:d0:3b:20:cf:b0:b7:ac:93:d7:de:66:eb:61:
                    da:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:59:14:CC:D7:A9:B9:06:BB:E1:93:90:98:D1:D1:91:C5:F8:D0:18
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/529C31F82BDD11F085C9B049C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:1d:a5:8d:e0:1b:0f:b9:ae:04:23:83:2b:8f:5b:df:07:f4:
         b1:ed:2c:9e:19:e9:5e:6d:f1:a8:57:7a:07:31:a9:19:8c:99:
         78:6e:b8:c1:7c:f3:47:24:63:f5:99:8f:56:08:c6:89:2b:20:
         21:a5:6b:a0:09:21:a0:7b:4e:a5:4b:ac:bc:48:f5:32:d8:e9:
         ab:4d:ec:eb:52:f8:9f:cf:fd:f2:ce:71:a3:53:d8:76:10:6a:
         f9:9e:76:50:7f:ff:3c:99:1e:c5:18:2c:71:89:e8:96:fe:14:
         1a:c9:58:e6:92:63:94:45:dc:71:97:04:ca:14:9f:28:ad:12:
         5f:35:ff:c9:64:5a:62:8f:34:1c:50:20:08:a4:1e:ae:37:d1:
         9c:7a:4b:25:85:47:6f:05:bd:fa:c6:ec:c9:22:cc:fd:c3:88:
         6f:05:4b:f1:0a:ed:64:a0:3a:06:7b:42:10:42:4f:d8:58:97:
         c3:7a:bc:7b:dc:7a:dc:bc:d7:52:87:d9:bd:31:b9:67:79:de:
         d2:35:c5:79:49:f9:61:ab:45:12:0a:37:93:7f:43:92:87:07:
         33:ee:e6:c1:fb:8a:57:5c:25:95:40:f0:77:95:6d:d5:02:16:
         25:8c:bd:84:71:fa:1f:a2:99:72:14:4b:ae:e1:4b:34:f9:41:
         37:15:aa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:33 2026 by rpki-client