Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/54B9FEC63A2D11F0B1B15214C4F9AE02.roa
File:                     54B9FEC63A2D11F0B1B15214C4F9AE02.roa (raw, json)
Hash identifier:          4d1rRNwhvNGNNDKIdn7B8H4LAaj6gzTIcJj1gLgpE2E=
Subject key identifier:   1D:59:19:7D:A6:A0:F3:1C:7F:D9:9B:0D:41:B8:C6:CD:1B:5D:E1:CB
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2FB2
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/54B9FEC63A2D11F0B1B15214C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:28:05 +0000
ROA not before:           Sun 31 May 2026 16:28:05 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153905
IP address blocks:        165.99.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12210 (0x2fb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:28:05 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6195-d844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c1:6d:53:22:b7:89:5a:cb:4e:b2:5a:91:12:
                    ac:ba:11:26:71:e7:43:6f:1b:f9:a1:40:9b:28:24:
                    81:f0:7a:41:4d:a9:44:81:e7:50:ef:3b:6f:3f:9b:
                    a1:53:85:86:b5:78:d8:67:b8:ec:af:a0:50:99:b6:
                    5e:9a:3f:aa:db:3f:4a:a3:2b:46:76:59:8a:dc:48:
                    cb:ef:5b:0d:ca:27:d2:f9:12:d5:9b:31:da:12:fb:
                    47:83:b9:38:7b:f5:d7:05:38:8d:4e:6e:03:05:70:
                    37:92:d2:e9:74:2b:94:9a:70:68:df:63:b8:fc:7b:
                    07:c5:38:d6:c2:61:4c:67:d8:04:70:67:e8:e9:ed:
                    27:bd:6d:70:b0:a4:e3:06:78:22:c5:4e:eb:73:c6:
                    77:0b:7f:35:41:41:49:95:01:71:e4:db:99:e2:af:
                    86:48:19:fd:e2:fe:a9:59:d8:75:85:57:48:c3:32:
                    4f:b3:0e:d4:22:14:fd:f7:02:04:ca:70:d1:e1:a5:
                    fd:ec:14:dd:03:41:4e:88:51:17:81:b3:b0:26:fe:
                    52:af:7e:32:2a:bb:89:b6:bb:87:86:fc:f6:de:4e:
                    cc:4f:81:ca:f0:5c:14:31:52:14:7a:1c:48:d3:26:
                    2a:74:bc:99:c1:73:e4:b1:94:50:79:50:e4:1b:3c:
                    55:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:59:19:7D:A6:A0:F3:1C:7F:D9:9B:0D:41:B8:C6:CD:1B:5D:E1:CB
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/54B9FEC63A2D11F0B1B15214C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:0f:a9:d6:b0:29:65:00:37:98:bd:05:65:8e:7c:15:8b:da:
         08:36:e0:b8:a6:f0:b8:93:80:13:c2:71:5b:26:fe:4e:c9:ee:
         ec:06:0e:26:da:93:2d:14:3a:1a:44:6f:21:0a:bb:e0:60:d2:
         23:76:bc:91:2f:c1:3a:2a:f9:df:ed:33:e8:f6:69:fe:b6:39:
         ca:a2:0a:9f:b5:62:fa:5b:bd:77:ab:86:bb:08:4c:db:d0:b5:
         6f:fe:58:50:69:a7:93:b8:e1:7d:ad:1a:e3:2a:93:1e:b7:ca:
         90:e2:76:b6:d0:fc:a4:d8:60:71:b1:91:a8:cb:5a:8a:ce:36:
         8c:47:c5:81:05:6d:94:d0:59:09:76:93:81:db:94:1d:ae:1d:
         4e:64:b4:da:e3:23:b9:c8:75:0e:fe:e8:9e:c8:75:05:ed:d1:
         7a:fc:84:79:7f:3c:78:98:4e:17:95:72:84:28:39:d7:ae:9d:
         fa:67:9c:0d:c5:65:08:0f:f5:74:0b:3c:5e:df:bd:06:ed:1a:
         12:b1:e1:c2:99:26:4a:8e:5b:1b:e6:19:a7:77:2b:4c:53:81:
         23:b2:17:b8:2e:39:be:d5:b6:50:33:61:f8:80:4c:ff:4a:65:
         61:5e:11:68:b2:3e:4f:fe:4e:17:97:64:d4:2a:ce:14:64:3b:
         1b:41:d9:cc
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICL7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNTMxMTYyODA1WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNjE5NS1kODQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxcFtUyK3iVrLTrJakRKsuhEmcedDbxv5oUCbKCSB8HpBTalEgedQ7ztvP5uh
U4WGtXjYZ7jsr6BQmbZemj+q2z9KoytGdlmK3EjL71sNyifS+RLVmzHaEvtHg7k4
e/XXBTiNTm4DBXA3ktLpdCuUmnBo32O4/HsHxTjWwmFMZ9gEcGfo6e0nvW1wsKTj
BngixU7rc8Z3C381QUFJlQFx5NuZ4q+GSBn94v6pWdh1hVdIwzJPsw7UIhT99wIE
ynDR4aX97BTdA0FOiFEXgbOwJv5Sr34yKruJtruHhvz23k7MT4HK8FwUMVIUehxI
0yYqdLyZwXPksZRQeVDkGzxVRwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB1ZGX2m
oPMcf9mbDUG4xs0bXeHLMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTRCOUZFQzYz
QTJEMTFGMEIxQjE1MjE0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWNuMA0GCSqGSIb3DQEBCwUAA4IBAQBFD6nWsCllADeYvQVljnwV
i9oINuC4pvC4k4ATwnFbJv5Oye7sBg4m2pMtFDoaRG8hCrvgYNIjdryRL8E6Kvnf
7TPo9mn+tjnKogqftWL6W713q4a7CEzb0LVv/lhQaaeTuOF9rRrjKpMet8qQ4na2
0Pyk2GBxsZGoy1qKzjaMR8WBBW2U0FkJdpOB25Qdrh1OZLTa4yO5yHUO/uieyHUF
7dF6/IR5fzx4mE4XlXKEKDnXrp36Z5wNxWUID/V0Czxe370G7RoSseHCmSZKjlsb
5hmndytMU4Ejshe4Ljm+1bZQM2H4gEz/SmVhXhFosj5P/k4Xl2TUKs4UZDsbQdnM
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:55 2026 by rpki-client