Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/39044E9E58B311F084F3982DC4F9AE02.roa
File:                     39044E9E58B311F084F3982DC4F9AE02.roa (raw, json)
Hash identifier:          Ia+Jmu8TncD8IiScdaf8hIm9nx7VvvKZ6Drg9K1HDyo=
Subject key identifier:   40:71:A9:E4:A7:FC:B0:F2:AF:B1:2D:90:8A:6A:8E:0F:12:B5:00:DE
Certificate issuer:       /CN=A91B3455/serialNumber=D63B86E3CFC95563EFE7CAF0751D9840264ADA56
Certificate serial:       02
Authority key identifier: D6:3B:86:E3:CF:C9:55:63:EF:E7:CA:F0:75:1D:98:40:26:4A:DA:56
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/39044E9E58B311F084F3982DC4F9AE02.roa
Signing time:             Fri 04 Jul 2025 08:45:23 +0000
ROA not before:           Fri 04 Jul 2025 08:45:23 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     13821
IP address blocks:        165.101.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.crl
                          rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 08:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3455, serialNumber=D63B86E3CFC95563EFE7CAF0751D9840264ADA56
        Validity
            Not Before: Jul  4 08:45:23 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=686794a2-c819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c8:db:9a:d1:bc:37:aa:8d:f4:ae:22:aa:ee:
                    64:db:bb:74:5c:f6:40:2c:60:5d:46:e1:99:8e:64:
                    88:f0:68:8e:77:18:95:ae:3e:9d:ff:cf:94:e6:51:
                    f7:b2:2e:de:60:15:8e:2a:db:42:17:00:75:f5:72:
                    60:18:37:26:07:6c:b3:0e:59:02:00:2e:3a:22:96:
                    f6:f6:d5:d5:e8:e3:be:03:56:5e:9e:d6:37:02:e8:
                    c7:a7:30:98:55:ab:57:42:1e:c1:bf:52:23:f3:f1:
                    b0:fb:b6:04:7b:99:81:63:8d:62:01:1d:b5:25:0e:
                    01:e2:cc:05:b9:9d:62:48:c5:ac:f6:15:3d:4b:a3:
                    4e:f3:d7:b5:ce:e7:50:3a:56:72:20:e6:bf:a2:ba:
                    e2:80:15:57:56:05:91:a0:72:f7:78:8b:90:6d:e1:
                    7c:03:25:03:f0:db:ce:e0:96:fb:36:a5:1d:ac:c3:
                    df:20:11:38:e3:02:d7:17:61:b4:97:f4:44:6d:d2:
                    06:54:46:24:b2:ad:6b:f6:4c:ad:32:17:2f:01:7e:
                    d7:71:c2:4a:c3:27:23:25:15:3f:92:8c:64:b2:e6:
                    73:98:28:80:5b:4a:66:5c:d8:ce:7a:19:d3:90:e8:
                    18:6c:7d:66:82:5d:1a:5b:a0:4e:4b:97:8e:5b:7f:
                    c9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:71:A9:E4:A7:FC:B0:F2:AF:B1:2D:90:8A:6A:8E:0F:12:B5:00:DE
            X509v3 Authority Key Identifier:
                keyid:D6:3B:86:E3:CF:C9:55:63:EF:E7:CA:F0:75:1D:98:40:26:4A:DA:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/1juG48_JVWPv58rwdR2YQCZK2lY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1juG48_JVWPv58rwdR2YQCZK2lY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3455/A1684B3A58B211F099EE752CC4F9AE02/39044E9E58B311F084F3982DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:10:9b:a7:8c:98:3e:a6:19:db:ea:e7:e0:3e:fd:ea:d1:11:
         3e:cd:58:ee:2e:3e:da:8b:ae:ea:1e:70:54:3f:c8:34:8c:03:
         66:bb:45:3c:d6:5c:b9:2d:dd:f1:6e:f1:45:cf:ad:f5:a7:51:
         6d:aa:11:6a:26:0c:19:56:98:49:8b:97:1f:5b:54:81:cc:a2:
         fe:25:fd:53:d4:fb:a8:8d:c5:85:c8:82:b7:f8:52:dd:5e:be:
         10:1b:04:b3:f9:e1:13:08:e3:85:cb:4a:f5:a8:44:be:ff:7b:
         ea:08:ec:0a:d5:e0:0f:93:36:53:0e:7d:7f:6b:a5:97:49:62:
         6b:20:6b:0b:76:2e:fb:ad:4b:e0:e2:78:b0:55:55:fb:41:59:
         d9:94:46:d2:a7:e1:76:73:71:84:17:74:ff:e0:78:66:92:a1:
         e2:19:6d:56:62:89:4d:c7:3d:c5:b5:9f:5f:82:42:80:df:0e:
         a5:4d:13:84:57:40:af:70:db:e0:3d:d3:cc:1c:c5:a9:3f:1d:
         66:50:45:9c:ad:54:e6:ac:e9:42:71:84:85:01:98:80:10:31:
         91:61:02:d8:ff:e8:96:1e:af:64:68:94:9c:27:6c:c2:5c:44:
         9a:88:91:f1:8f:46:bd:fc:5d:7c:f5:f7:2b:95:cc:60:6c:92:
         65:07:0f:6a
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
MzQ1NTExMC8GA1UEBRMoRDYzQjg2RTNDRkM5NTU2M0VGRTdDQUYwNzUxRDk4NDAy
NjRBREE1NjAeFw0yNTA3MDQwODQ1MjNaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4Njc5NGEyLWM4MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3yNua0bw3qo30riKq7mTbu3Rc9kAsYF1G4ZmOZIjwaI53GJWuPp3/z5TmUfey
Lt5gFY4q20IXAHX1cmAYNyYHbLMOWQIALjoilvb21dXo474DVl6e1jcC6MenMJhV
q1dCHsG/UiPz8bD7tgR7mYFjjWIBHbUlDgHizAW5nWJIxaz2FT1Lo07z17XO51A6
VnIg5r+iuuKAFVdWBZGgcvd4i5Bt4XwDJQPw287glvs2pR2sw98gETjjAtcXYbSX
9ERt0gZURiSyrWv2TK0yFy8BftdxwkrDJyMlFT+SjGSy5nOYKIBbSmZc2M56GdOQ
6BhsfWaCXRpboE5Ll45bf8mPAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUQHGp5Kf8
sPKvsS2QimqODxK1AN4wHwYDVR0jBBgwFoAU1juG48/JVWPv58rwdR2YQCZK2lYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIzNDU1L0ExNjg0QjNBNThC
MjExRjA5OUVFNzUyQ0M0RjlBRTAyLzFqdUc0OF9KVldQdjU4cndkUjJZUUNaSzJs
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvMWp1RzQ4X0pWV1B2NThyd2RSMllRQ1pLMmxZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MzQ1NS9BMTY4NEIzQTU4QjIxMUYwOTlFRTc1MkNDNEY5QUUwMi8zOTA0NEU5RTU4
QjMxMUYwODRGMzk4MkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAKVlVTANBgkqhkiG9w0BAQsFAAOCAQEAsxCbp4yYPqYZ2+rn
4D796tERPs1Y7i4+2ouu6h5wVD/INIwDZrtFPNZcuS3d8W7xRc+t9adRbaoRaiYM
GVaYSYuXH1tUgcyi/iX9U9T7qI3FhciCt/hS3V6+EBsEs/nhEwjjhctK9ahEvv97
6gjsCtXgD5M2Uw59f2ull0liayBrC3Yu+61L4OJ4sFVV+0FZ2ZRG0qfhdnNxhBd0
/+B4ZpKh4hltVmKJTcc9xbWfX4JCgN8OpU0ThFdAr3Db4D3TzBzFqT8dZlBFnK1U
5qzpQnGEhQGYgBAxkWEC2P/olh6vZGiUnCdswlxEmoiR8Y9GvfxdfPX3K5XMYGyS
ZQcPag==
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:02:07 2025 by rpki-client