Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/58DDC3643ACF11F086129074C4F9AE02.roa
File:                     58DDC3643ACF11F086129074C4F9AE02.roa (raw, json)
Hash identifier:          LhN9qnktJkiE/mSdAvHU2sU7a/8KR2OghHoWATkVonU=
Subject key identifier:   02:B3:A6:17:E7:1A:D8:2D:5B:D2:E5:F6:92:C5:AA:C0:A5:BD:F6:9C
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2FB3
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/58DDC3643ACF11F086129074C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:28:07 +0000
ROA not before:           Sun 31 May 2026 16:28:07 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153914
IP address blocks:        165.99.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12211 (0x2fb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:28:07 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6197-9c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:60:dd:44:a3:44:d7:d0:55:be:80:50:d5:
                    ce:9f:b7:51:36:85:22:6a:2d:06:9a:1b:e9:a2:ea:
                    97:d5:b1:94:73:83:f7:60:b4:a0:a3:10:1d:e0:b1:
                    5e:35:3a:b4:5a:19:c5:da:49:0d:8e:54:66:82:e0:
                    b1:a9:34:78:37:70:77:e2:75:46:a6:4f:03:27:6a:
                    5c:1d:8a:c6:74:40:ff:84:c8:04:51:ce:61:89:91:
                    10:5a:11:b9:d5:76:d9:cf:ed:99:0d:31:41:e8:94:
                    e5:92:49:e8:46:c2:8c:70:12:a6:68:1f:99:5d:2d:
                    aa:90:24:51:64:c7:6f:1f:26:d6:a3:ad:48:d2:e3:
                    3e:36:a5:12:25:bf:a2:b8:c8:f9:5f:f8:48:06:31:
                    68:fc:75:d9:f2:09:4e:41:a8:e3:4e:f3:57:3a:30:
                    17:9f:97:79:eb:ff:87:15:f5:ae:73:7e:49:64:65:
                    1c:1c:3f:f6:51:71:55:10:de:29:2d:f5:90:04:4d:
                    a5:8e:8f:5c:2f:be:ac:d8:75:53:96:11:7f:6a:fc:
                    f5:54:58:a8:93:74:33:3f:51:4e:32:56:76:c8:48:
                    d2:1d:a9:e9:74:cd:83:2a:c5:e7:d9:19:cc:1c:5b:
                    ae:a7:d6:1a:e2:2b:91:65:2b:10:f0:ff:82:84:73:
                    2a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B3:A6:17:E7:1A:D8:2D:5B:D2:E5:F6:92:C5:AA:C0:A5:BD:F6:9C
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/58DDC3643ACF11F086129074C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:3e:8c:c5:dd:4f:c3:a1:36:c7:9e:56:1b:7c:c3:42:c9:a6:
         2e:fc:51:a6:e0:10:c3:63:d6:bf:c8:75:f4:05:58:a6:a8:71:
         f0:7c:52:2e:66:df:e2:c8:ad:80:6a:39:25:8e:60:e9:d7:ad:
         a2:0b:59:41:06:fa:66:5d:f6:40:73:aa:ec:26:12:df:c8:0a:
         d0:3d:f7:ee:f3:d4:52:bd:94:89:5c:ca:21:b4:f5:c2:6d:4a:
         93:12:83:47:8d:42:57:b5:7f:e7:16:dd:7b:e8:dd:fe:d2:47:
         7f:f2:50:ed:dd:a3:b4:07:dd:be:1e:c6:88:52:9e:e4:01:98:
         83:9f:d8:f5:17:ce:45:4c:53:aa:db:1d:82:bd:9b:dd:ff:b6:
         be:2e:f4:db:b7:3c:9c:d4:5f:19:d6:55:ba:eb:ad:02:53:cb:
         f8:59:2e:db:ff:22:cb:cc:24:eb:b7:aa:ac:fa:33:21:83:b1:
         7d:2e:76:91:c8:ab:be:ec:83:c0:45:0e:e8:91:d5:e6:c6:d3:
         f3:9a:57:5e:f2:73:47:42:df:06:34:19:9f:e6:86:73:2c:ee:
         48:71:c4:69:53:09:c5:2f:2e:84:b8:11:84:4d:b3:57:db:ba:
         57:ed:77:0c:02:59:71:d1:5c:00:97:7d:f2:9a:eb:fa:49:26:
         49:25:f8:93
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICL7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNTMxMTYyODA3WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNjE5Ny05YzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtOZg3USjRNfQVb6AUNXOn7dRNoUiai0GmhvpouqX1bGUc4P3YLSgoxAd4LFe
NTq0WhnF2kkNjlRmguCxqTR4N3B34nVGpk8DJ2pcHYrGdED/hMgEUc5hiZEQWhG5
1XbZz+2ZDTFB6JTlkknoRsKMcBKmaB+ZXS2qkCRRZMdvHybWo61I0uM+NqUSJb+i
uMj5X/hIBjFo/HXZ8glOQajjTvNXOjAXn5d56/+HFfWuc35JZGUcHD/2UXFVEN4p
LfWQBE2ljo9cL76s2HVTlhF/avz1VFiok3QzP1FOMlZ2yEjSHanpdM2DKsXn2RnM
HFuup9Ya4iuRZSsQ8P+ChHMq7QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAKzphfn
GtgtW9Ll9pLFqsClvfacMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNThEREMzNjQz
QUNGMTFGMDg2MTI5MDc0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWOAMA0GCSqGSIb3DQEBCwUAA4IBAQCyPozF3U/DoTbHnlYbfMNC
yaYu/FGm4BDDY9a/yHX0BVimqHHwfFIuZt/iyK2AajkljmDp162iC1lBBvpmXfZA
c6rsJhLfyArQPffu89RSvZSJXMohtPXCbUqTEoNHjUJXtX/nFt176N3+0kd/8lDt
3aO0B92+HsaIUp7kAZiDn9j1F85FTFOq2x2CvZvd/7a+LvTbtzyc1F8Z1lW6660C
U8v4WS7b/yLLzCTrt6qs+jMhg7F9LnaRyKu+7IPARQ7okdXmxtPzmlde8nNHQt8G
NBmf5oZzLO5IccRpUwnFLy6EuBGETbNX27pX7XcMAllx0VwAl33ymuv6SSZJJfiT
-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:06 2026 by rpki-client