Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/82EE7614C06A11F0BDD51339C4F9AE02.roa
File:                     82EE7614C06A11F0BDD51339C4F9AE02.roa (raw, json)
Hash identifier:          o3HIzgXZCURRTsoHJqRO186rFzd4moJWS7/qcXnYQGE=
Subject key identifier:   A8:51:76:74:F7:A9:B1:40:24:0F:5B:50:82:2B:95:5C:07:28:DA:B6
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2FB7
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/82EE7614C06A11F0BDD51339C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:28:14 +0000
ROA not before:           Sun 31 May 2026 16:28:14 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153927
IP address blocks:        165.99.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12215 (0x2fb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:28:14 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c619e-14da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8e:27:64:b3:02:7a:d7:63:db:5d:49:a5:77:
                    39:8e:64:45:9e:c1:db:3d:68:21:fb:66:d0:42:46:
                    f5:c3:4d:cf:8e:34:f6:a6:68:68:c8:26:06:02:ed:
                    bb:d5:4a:43:c9:f2:07:51:17:d9:b2:c3:61:e1:44:
                    74:97:cb:ab:fe:bd:a0:42:20:b1:64:68:f1:bf:8d:
                    de:d0:63:f9:cc:8f:09:ff:9f:73:a6:31:fe:2a:cb:
                    22:c9:c4:50:2f:c7:85:22:93:65:d2:49:d4:2a:6d:
                    a9:ce:15:43:94:0b:df:39:e0:fc:66:6e:e2:a9:a5:
                    3b:78:3c:66:9d:4d:9b:b5:04:10:25:36:f1:f6:7a:
                    a9:14:7d:ae:d3:6f:ff:fc:c1:de:36:bb:3b:33:a1:
                    8e:48:5d:78:16:0c:c2:54:10:c6:c4:02:ca:2e:42:
                    85:df:0a:fd:98:29:b5:0c:37:59:5a:eb:67:f9:84:
                    92:29:57:e7:9e:14:cc:2e:7d:e5:a6:73:bd:42:06:
                    51:f2:a6:c1:bd:6a:7f:df:82:f6:dd:f2:e7:66:13:
                    f0:62:37:a0:d9:ce:c2:bd:52:0c:54:c2:ff:5b:f0:
                    cf:30:34:16:fd:46:95:d6:f4:ae:a3:b7:90:fb:e8:
                    fe:c1:f5:e1:fc:d1:6f:e7:43:a2:60:f5:9a:c8:b6:
                    32:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:51:76:74:F7:A9:B1:40:24:0F:5B:50:82:2B:95:5C:07:28:DA:B6
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/82EE7614C06A11F0BDD51339C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:b8:49:7b:69:6b:f3:3d:9b:7a:5b:da:6b:b3:48:16:9b:16:
         e4:e7:34:6f:ec:3b:27:33:fc:ec:00:68:d0:59:a2:69:c0:7e:
         5c:fb:4c:74:a7:db:ab:a1:88:6c:f0:fb:7e:50:b5:50:b4:29:
         c2:a9:c4:13:14:76:49:c1:6e:e9:89:8b:3a:0d:c7:12:c2:8e:
         1b:88:d0:53:8c:3e:a9:9d:df:34:a8:4b:a9:00:63:dc:50:2a:
         45:88:15:0f:db:68:db:96:ae:52:c1:5e:c4:cd:59:b5:e8:76:
         0a:20:f6:78:eb:06:fd:96:fb:f1:88:09:04:93:40:68:b0:ae:
         7b:c2:1e:39:15:a0:ea:51:b9:81:9c:84:4d:4f:96:bd:67:57:
         fb:48:45:f4:98:bd:9f:d0:e9:1f:be:72:7b:c4:75:3f:b7:b9:
         16:32:b3:5d:a8:47:ef:ba:b3:1e:9e:d4:55:31:72:d9:c9:38:
         67:fd:fc:4d:b4:b2:89:24:93:02:03:c2:f7:6c:ea:44:25:28:
         d2:87:e7:e4:cf:92:fc:af:60:22:17:48:74:6e:42:62:dd:d9:
         06:35:6e:ee:4a:b5:44:e1:4d:af:4f:2a:ef:6c:9e:62:92:4e:
         da:76:41:68:12:52:a6:9d:6a:fb:55:ff:c7:06:fa:ca:89:e6:
         bb:84:83:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:24:01 2026 by rpki-client