Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/F7981812F38811EFAC05053AC4F9AE02.roa
File:                     F7981812F38811EFAC05053AC4F9AE02.roa (raw, json)
Hash identifier:          D/9SKPwUI+9VjDA2s/SYyY7F96WxlOAy4mRC6PjrPZo=
Subject key identifier:   F4:A0:56:78:31:D3:A1:70:A2:15:D3:86:EF:BD:AB:4D:E1:78:11:1C
Certificate issuer:       /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
Certificate serial:       DC
Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/F7981812F38811EFAC05053AC4F9AE02.roa
Signing time:             Mon 03 Nov 2025 05:51:13 +0000
ROA not before:           Mon 03 Nov 2025 05:51:13 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     151368
IP address blocks:        160.187.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl
                          rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 05:51:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809
        Validity
            Not Before: Nov  3 05:51:13 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690842d1-80fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cf:14:0f:2c:18:af:58:0e:b8:e1:84:8d:d6:
                    a0:b1:eb:29:c0:7b:b4:d5:fc:1a:3c:4c:7a:f8:3f:
                    b5:b1:ef:6c:c5:9e:e8:7a:8c:4e:4f:07:a7:c3:96:
                    bf:71:ca:b2:29:19:4b:07:7c:56:8c:67:df:db:13:
                    69:b2:39:34:30:94:64:d5:d0:05:c0:0e:89:26:80:
                    bd:93:99:27:b2:c8:a6:76:7b:3f:29:a1:e7:67:0e:
                    0f:e2:53:6e:4b:34:eb:ec:7a:68:25:08:3b:01:52:
                    22:e4:19:e6:3b:14:97:9f:d9:40:6e:46:61:ec:5f:
                    23:4f:61:bf:a4:e6:bc:69:c4:0b:fd:4b:ad:cc:22:
                    6b:6d:ba:8b:ab:47:6f:04:39:b2:db:f2:c8:40:f6:
                    c7:fe:3e:bc:cc:b5:67:23:2b:1b:16:95:4f:2f:e8:
                    b5:95:c1:58:69:86:76:e8:26:03:dc:63:e3:2d:a8:
                    9d:5b:9b:c9:0c:61:c6:db:ba:12:35:50:63:5e:22:
                    0e:51:4a:17:ed:90:fa:cc:f5:7e:01:60:e2:f4:fc:
                    61:fa:33:e5:99:04:16:91:c4:00:50:53:97:69:43:
                    e4:9b:5d:b2:77:54:d0:17:c9:a0:75:48:43:8b:ff:
                    cc:f4:ae:71:37:ae:e4:71:b1:e0:03:68:a8:9d:40:
                    fa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A0:56:78:31:D3:A1:70:A2:15:D3:86:EF:BD:AB:4D:E1:78:11:1C
            X509v3 Authority Key Identifier:
                keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/F7981812F38811EFAC05053AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:3c:f4:5a:90:31:c4:0a:fd:95:11:16:b0:e6:f7:4f:ab:7b:
         d1:c0:02:fb:22:53:6e:0f:0c:34:ab:08:65:02:c2:da:4d:ef:
         5f:11:99:84:b5:e2:06:e2:ab:6f:b1:e9:ac:ec:b7:48:61:be:
         fc:04:bc:1d:61:15:dc:ce:81:da:0e:9e:a7:62:57:05:33:bc:
         99:57:95:a6:23:aa:74:d5:74:d5:ac:8e:7c:b3:3c:b6:dd:16:
         f5:62:3c:03:bc:e8:8b:01:6e:43:95:37:45:4f:64:50:df:d0:
         93:7d:91:00:e2:9a:92:2a:c0:2e:39:bf:a1:d9:8c:19:75:3f:
         d4:1f:1a:3e:62:8f:3f:76:77:f1:c8:20:cc:23:f5:2c:16:de:
         3b:5a:ce:e2:3e:ae:75:7a:04:0b:d9:bb:60:e1:ce:da:13:2c:
         62:fe:11:56:9a:f8:cc:49:66:c0:be:a7:cf:da:5c:81:33:12:
         77:d5:60:46:7e:71:43:96:36:a7:69:ed:56:ce:1c:18:cb:93:
         0f:f4:55:40:c1:e1:4d:8c:15:bf:27:91:15:d6:24:df:b3:0b:
         53:52:b0:d1:d8:de:b4:e4:92:46:62:8f:af:ed:3d:dd:80:79:
         e8:4a:10:b2:bb:60:68:14:74:0e:a3:f3:22:f2:33:d7:45:53:
         8a:16:7e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:38:00 2025 by rpki-client