Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/82A8B328B3A811F0AAE0F97FC4F9AE02.roa
File:                     82A8B328B3A811F0AAE0F97FC4F9AE02.roa (raw, json)
Hash identifier:          U0IWYvGmRx3I3mxIWZIgHUwav5iOqJcH3J0tZ5o3tQ8=
Subject key identifier:   6C:07:4B:55:B8:F4:D8:3F:D4:46:51:D1:3B:2D:3E:94:DE:03:81:8B
Certificate issuer:       /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Certificate serial:       C8
Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/82A8B328B3A811F0AAE0F97FC4F9AE02.roa
Signing time:             Tue 28 Oct 2025 02:47:57 +0000
ROA not before:           Tue 28 Oct 2025 02:47:57 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     151133
IP address blocks:        160.191.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl
                          rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 06:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916069A, serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
        Validity
            Not Before: Oct 28 02:47:57 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=69002edd-a450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:39:4a:f3:ab:f7:ec:99:cd:59:49:ae:97:14:
                    38:cf:e6:a1:78:23:34:c1:24:24:e0:99:35:2b:6a:
                    c5:e3:46:d9:44:2e:3a:69:bc:79:a5:b4:e1:56:b2:
                    fb:8e:bc:40:e1:73:ca:db:15:e6:c0:cb:95:79:08:
                    31:84:36:43:3e:89:19:c2:bf:0e:18:c9:10:6e:01:
                    bb:ea:3c:31:e2:ba:c4:eb:46:f7:5b:a9:28:24:ee:
                    1f:05:89:11:15:35:17:e9:07:49:c7:b6:08:de:46:
                    c6:8c:19:89:43:62:b4:f9:d0:00:32:8b:42:13:f9:
                    fa:0f:f8:56:43:a0:5a:59:60:04:a3:30:5a:bc:30:
                    a3:f8:b4:49:3a:3c:17:24:3a:1f:eb:84:f5:cc:2e:
                    a6:9d:76:9e:20:4b:a7:bf:7f:c5:65:c9:14:fa:79:
                    f5:a3:98:12:de:74:20:01:b9:8e:09:ad:d0:7e:47:
                    4d:51:7f:6f:b1:79:f8:1d:51:3b:5d:a8:76:ea:a7:
                    80:dd:eb:3c:34:15:9a:e6:3b:11:f9:a1:9c:67:b6:
                    c1:52:97:cf:1a:d3:53:24:3f:02:82:0a:f0:ef:6b:
                    e5:4e:9c:0c:9c:73:9b:b9:15:68:94:c1:59:75:a2:
                    27:97:89:c6:d3:7c:71:38:13:93:b9:63:b1:b5:b4:
                    5e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:07:4B:55:B8:F4:D8:3F:D4:46:51:D1:3B:2D:3E:94:DE:03:81:8B
            X509v3 Authority Key Identifier:
                keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/82A8B328B3A811F0AAE0F97FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:af:c5:b2:91:5a:f5:9b:f1:87:b0:6f:4d:47:44:4c:97:d2:
         a7:b6:bc:c6:92:b4:dd:be:c6:ed:23:5c:eb:d3:d5:87:fb:5f:
         0d:d9:68:a1:3d:e8:58:24:48:0c:9f:da:c4:2e:c4:cb:3d:d2:
         9f:04:a3:d2:1b:7d:0e:ea:55:47:ab:25:ee:75:df:10:e3:3d:
         40:75:8b:a0:fd:66:c6:07:6d:ec:49:ce:16:d5:2f:78:47:a6:
         73:3c:7f:ee:2f:78:f4:ee:cb:0e:92:93:e5:14:75:7f:66:7b:
         fb:a8:32:b1:aa:05:86:ef:0b:ce:3b:10:a0:06:b6:95:b8:49:
         29:0e:6e:e8:74:af:b4:48:44:45:de:c9:3c:a2:eb:7a:23:52:
         7c:18:b9:11:0b:e5:d0:3d:15:3b:e2:06:d8:cc:71:16:9c:8c:
         fb:be:8b:7b:0c:3c:99:fd:67:6b:43:4e:bc:d8:32:18:d7:c3:
         33:6f:8f:0e:d9:45:7f:67:0b:87:8b:d1:32:6b:37:a5:61:dc:
         68:c9:13:1d:24:e0:d9:72:78:75:50:17:e5:d3:35:49:a8:26:
         5b:d8:dd:61:bd:1c:36:d7:2d:61:3d:e2:eb:47:3f:45:59:81:
         d9:0a:65:60:ae:00:c7:0c:cb:c8:a2:06:a9:4b:0b:ed:7f:3b:
         d3:3c:e5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:47:58 2025 by rpki-client