Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/5F18EB127A7E11EF932E0B3EC4F9AE02.roa
File:                     5F18EB127A7E11EF932E0B3EC4F9AE02.roa (raw, json)
Hash identifier:          VWRRCd4nJbWD0TRBP58eY5MdXn/pUrD+aCnAKKgYqGE=
Subject key identifier:   6B:80:68:CF:81:F8:C9:B0:06:60:B0:58:98:78:C4:0B:25:8B:15:8D
Certificate issuer:       /CN=A9140436/serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
Certificate serial:       D8
Authority key identifier: 42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/5F18EB127A7E11EF932E0B3EC4F9AE02.roa
Signing time:             Fri 31 Oct 2025 05:49:42 +0000
ROA not before:           Fri 31 Oct 2025 05:49:42 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     137097
IP address blocks:        160.187.66.0/24 maxlen: 24
                          160.187.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl
                          rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 05:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140436, serialNumber=42C2CBA47FAD389FD18B61CAE22472D61E0EA896
        Validity
            Not Before: Oct 31 05:49:42 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69044df6-4400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:74:f6:66:f0:86:f7:64:bb:db:03:d9:29:bb:
                    a7:16:48:58:82:cb:cf:db:f4:9e:61:85:b1:e0:4a:
                    d2:6e:31:32:08:d5:43:d9:25:28:08:a7:49:c1:c6:
                    f2:02:39:81:65:b8:11:38:00:70:c5:1d:6e:1e:e1:
                    15:b9:c7:fe:32:a9:93:76:0b:46:03:d9:8a:7d:50:
                    f3:3b:54:1d:5f:0d:6c:50:e0:00:30:23:c0:41:e6:
                    d5:53:b8:09:5b:2a:83:32:d5:52:6c:86:3a:8e:4b:
                    56:97:31:6e:8b:01:19:e9:65:7b:ae:2f:c5:eb:bb:
                    e5:e5:0b:1a:b4:1e:c0:b2:f0:18:c7:e2:c1:d9:9a:
                    d1:23:dc:4b:3b:75:a7:b1:80:0d:c7:31:f6:8a:38:
                    33:a9:5e:2e:9a:c4:d2:25:61:ab:8c:e9:ee:c7:2d:
                    2e:96:85:71:4f:7b:19:ac:28:7f:ff:1e:f9:d3:ed:
                    6e:ff:b6:26:81:d8:9c:f6:7f:70:c0:37:b8:06:81:
                    70:5e:c9:83:0f:45:76:58:c0:dc:18:6f:70:cb:08:
                    a8:67:6c:2f:d3:21:c7:7a:8a:c7:14:8b:e3:e5:4e:
                    32:c7:3e:33:8d:bd:5e:a4:2e:32:25:f0:3d:dd:a8:
                    e8:7c:2b:c9:72:0f:12:58:5e:8f:ed:93:f8:5d:ad:
                    ae:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:80:68:CF:81:F8:C9:B0:06:60:B0:58:98:78:C4:0B:25:8B:15:8D
            X509v3 Authority Key Identifier:
                keyid:42:C2:CB:A4:7F:AD:38:9F:D1:8B:61:CA:E2:24:72:D6:1E:0E:A8:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QsLLpH-tOJ_Ri2HK4iRy1h4OqJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140436/1561BEDE765711EF8BFC7A11C4F9AE02/5F18EB127A7E11EF932E0B3EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:20:ab:fa:98:69:33:00:d6:e6:53:fb:76:bd:0e:21:08:ff:
         63:75:32:8c:4a:30:38:00:1c:39:a8:58:63:ad:75:6e:2f:59:
         2f:4c:b5:f8:68:9b:59:c2:1b:75:27:9a:f0:a6:e0:e1:f9:87:
         23:94:c1:af:4a:a9:6b:7c:85:b1:1f:48:20:b7:66:22:29:60:
         f9:e5:2f:8c:38:9e:2b:80:b6:6f:2d:09:c4:01:cd:90:ca:da:
         d4:54:34:48:31:41:74:f1:af:93:1f:c5:d4:4e:26:e2:3c:6e:
         b2:6a:c9:91:2e:2b:eb:b3:ea:38:83:c9:69:d6:6f:00:9e:cd:
         40:71:5b:db:26:15:ee:2d:52:2e:ff:b2:82:83:c8:93:34:95:
         d4:f3:4a:98:40:2a:4a:8e:30:60:a9:c3:ef:21:f1:43:f8:b9:
         2c:98:88:fa:63:eb:55:88:b1:bf:0f:9d:dd:75:fa:03:38:d4:
         23:6f:6b:a1:10:47:2e:d5:70:27:2d:47:4e:69:b2:84:41:fe:
         27:73:56:7b:d9:46:10:ec:c6:d7:5a:00:19:6e:84:32:c8:59:
         87:8d:81:64:2a:c0:46:fd:91:fa:77:91:a7:b5:7b:c4:83:a0:
         0b:f8:a0:c7:e4:9b:ab:77:48:fe:de:46:2b:80:60:36:d1:29:
         a7:8a:7e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:10:35 2025 by rpki-client