Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/59FE5CAE624811F0BB5AEE59C4F9AE02.roa
File:                     59FE5CAE624811F0BB5AEE59C4F9AE02.roa (raw, json)
Hash identifier:          /BO7MOv6a+eIAb796aVsjc+9xJ9r/nsjgcF5LLCvMTU=
Subject key identifier:   D6:B3:CC:76:85:CE:17:4F:36:AF:58:17:8C:86:C0:09:11:FC:AA:1E
Certificate issuer:       /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Certificate serial:       90
Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/59FE5CAE624811F0BB5AEE59C4F9AE02.roa
Signing time:             Sun 20 Jul 2025 15:52:39 +0000
ROA not before:           Sun 20 Jul 2025 15:52:39 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     151133
IP address blocks:        160.191.184.0/23 maxlen: 23
                          160.191.184.0/24 maxlen: 24
                          160.191.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl
                          rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916069A, serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
        Validity
            Not Before: Jul 20 15:52:39 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=687d10c6-0252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:62:ab:25:74:ca:62:b9:dd:d4:a7:d0:e2:75:
                    29:c2:1a:92:17:a1:2b:7f:87:16:67:d9:ab:5a:6a:
                    4a:8f:82:41:99:82:a8:04:22:ac:77:33:fb:8c:af:
                    a2:57:a3:9d:c8:24:c9:e8:e4:b2:bc:e8:28:63:98:
                    14:03:dd:57:76:d2:67:15:f8:81:36:69:0f:51:aa:
                    ec:10:b4:c1:f4:5c:63:a9:bc:e0:43:0d:50:ec:e4:
                    60:dc:e6:06:9f:36:c7:eb:90:68:16:e2:47:aa:5d:
                    6c:11:67:50:58:5b:d3:ff:8d:d1:23:e6:a6:7c:11:
                    4c:1a:19:58:8a:e8:ed:90:b7:79:24:40:51:5f:4f:
                    05:df:54:9c:f7:c8:c9:66:04:40:c5:d9:de:0d:14:
                    a5:cb:db:9a:c9:48:67:a0:d8:2d:d7:ce:e4:b6:53:
                    13:af:6f:64:c2:03:29:7b:44:0d:a0:45:8e:44:49:
                    9b:71:34:a7:d0:67:fc:ed:91:69:69:1b:e3:9c:3e:
                    cc:4a:90:8d:07:73:d2:6f:29:a2:e8:42:35:c1:49:
                    95:e6:a5:83:7a:03:e8:30:f4:1b:14:4a:38:b3:75:
                    a6:75:f7:d2:d2:9b:7e:11:aa:30:d1:c4:16:7e:6b:
                    63:e0:1a:0f:05:84:1b:29:65:a1:99:be:47:ae:98:
                    2f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B3:CC:76:85:CE:17:4F:36:AF:58:17:8C:86:C0:09:11:FC:AA:1E
            X509v3 Authority Key Identifier:
                keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/59FE5CAE624811F0BB5AEE59C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:a9:86:bd:d4:d2:b3:5a:d3:0b:27:17:22:a6:92:a7:99:3a:
         c1:1b:93:9c:5d:d4:b0:5b:13:5f:7c:3d:07:32:c1:28:97:4a:
         64:be:5c:55:0d:44:8c:52:0a:73:67:2b:02:11:8d:71:e4:90:
         e7:45:89:75:50:f0:5c:82:8f:26:14:ba:67:44:86:27:26:7f:
         33:df:75:31:f3:bd:77:ad:c8:5a:43:ae:78:79:66:e0:08:7b:
         0e:c6:1b:f6:41:83:44:ad:e8:5b:5a:5d:ae:dc:de:6a:db:0e:
         33:be:80:94:6b:e8:fc:f3:bd:97:d7:5a:86:1d:01:1e:1c:e4:
         a8:52:a6:79:bb:e9:ce:72:c2:10:39:b2:30:3a:92:50:cc:3b:
         b4:b4:d7:3d:15:32:df:df:c7:bd:f2:43:8d:97:93:a2:2a:f9:
         ba:d0:ab:2b:3d:59:9a:46:bf:b5:1d:28:49:7e:ec:3a:41:0c:
         9a:2d:3a:70:89:e6:49:79:a5:02:0a:1f:18:1f:a0:21:03:7b:
         e5:62:0e:3b:c9:bf:81:eb:7c:04:21:17:c0:ef:02:86:79:ca:
         23:01:4e:cd:95:46:f7:a3:52:b3:ac:2d:7b:45:a6:89:9e:25:
         65:dc:81:b0:89:b5:6e:bc:73:ae:fb:e0:64:84:2b:f7:b4:e8:
         48:22:fc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:28:28 2025 by rpki-client