Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/1C839F861BA111EA8BDD6114C4F9AE02.roa
File:                     1C839F861BA111EA8BDD6114C4F9AE02.roa (raw, json)
Hash identifier:          QOShMQ6mMEZRjJ5JESydTLr4xwZz//rE2YbhLSt51RI=
Subject key identifier:   8F:D5:3D:2A:54:A3:1B:04:FF:73:37:98:96:41:D9:30:CF:B7:A6:81
Certificate issuer:       /CN=A916A983/serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C
Certificate serial:       12A7
Authority key identifier: B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/1C839F861BA111EA8BDD6114C4F9AE02.roa
Signing time:             Wed 06 Aug 2025 17:26:39 +0000
ROA not before:           Wed 06 Aug 2025 17:26:39 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     135887
IP address blocks:        141.168.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl
                          rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4775 (0x12a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983, serialNumber=B4A96AADEEDC7BEDD57D62FC9A49EA0B3FF6F50C
        Validity
            Not Before: Aug  6 17:26:39 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6893904e-390e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:91:08:62:1f:08:26:49:62:d1:c3:33:58:a4:
                    d9:3a:f8:bc:66:51:77:54:97:d6:49:28:ea:0f:3c:
                    07:f2:a2:c9:95:32:88:f9:55:10:75:ca:16:39:d1:
                    42:39:20:bb:e2:fc:64:bf:df:8f:7e:b7:34:22:fc:
                    e1:2d:50:f4:24:27:ef:c7:1c:ff:26:bf:74:58:f0:
                    37:d7:06:25:48:5a:35:3f:67:4b:f4:62:5c:ee:2f:
                    7a:d7:77:0e:65:d5:fa:9d:63:fa:3f:0b:fc:bc:fd:
                    47:7c:21:b8:86:79:77:07:a9:40:4c:4a:41:fb:f3:
                    2e:7c:ac:22:83:3a:5e:8a:06:09:39:ea:e8:1c:7b:
                    1f:f5:6d:11:72:5a:9b:57:2c:26:1b:dd:4e:e0:19:
                    40:98:a0:c1:d3:27:83:40:80:78:a3:9c:46:0b:25:
                    64:a1:74:5b:22:de:47:d2:b3:02:2f:c6:45:2f:e8:
                    c4:22:9a:84:39:95:60:ef:62:7e:9b:ed:24:35:f8:
                    61:dd:a5:90:ea:e0:4a:dc:66:2f:f9:07:ba:c4:d4:
                    32:23:20:42:4c:da:3e:da:fc:a6:09:8a:1a:4e:18:
                    1f:46:0b:54:61:5c:35:0c:0e:c4:36:03:87:54:d3:
                    29:7c:41:d6:dc:02:5a:b4:25:ab:a6:51:a3:00:2c:
                    49:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D5:3D:2A:54:A3:1B:04:FF:73:37:98:96:41:D9:30:CF:B7:A6:81
            X509v3 Authority Key Identifier:
                keyid:B4:A9:6A:AD:EE:DC:7B:ED:D5:7D:62:FC:9A:49:EA:0B:3F:F6:F5:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/tKlqre7ce-3VfWL8mknqCz_29Qw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tKlqre7ce-3VfWL8mknqCz_29Qw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/28B1B61CCD0F11E89D9FF165C4F9AE02/1C839F861BA111EA8BDD6114C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.168.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         40:64:d2:e5:92:b2:1e:75:7b:28:9c:bf:1f:7e:71:19:9a:92:
         47:12:c3:90:1b:23:71:03:b3:b5:53:a6:3f:e1:11:38:59:e9:
         cd:d9:c5:12:60:ca:cd:47:ae:84:4a:a8:12:00:b0:4a:ff:20:
         20:f1:32:76:56:1c:62:e8:cb:e9:f1:9f:b1:8e:41:9e:05:84:
         64:ff:5a:41:c2:f5:c1:fa:f1:e8:d9:f4:a7:02:92:82:84:4c:
         48:45:b0:95:54:35:2f:7f:1c:c1:43:ea:42:a8:a4:4e:f4:d6:
         88:c8:5e:d1:31:50:69:df:27:2a:55:ad:c7:4a:d8:ad:01:54:
         9c:0a:68:a9:37:52:09:08:d5:48:1f:aa:2c:16:2d:c8:b5:d3:
         24:72:68:06:2b:e3:4e:75:d7:a9:dd:c5:dc:43:35:f2:89:19:
         ac:32:5d:da:5f:55:d7:54:8f:a1:6b:10:34:f5:97:50:cc:48:
         4f:7f:0e:eb:d7:0d:44:ce:30:e9:a0:b4:f9:75:47:9b:e4:da:
         0c:b4:f5:51:ff:f2:af:55:0c:39:c9:ce:c6:4f:ec:03:9f:4e:
         40:b1:9d:da:46:11:69:79:f0:99:33:45:33:ea:c1:83:25:4d:
         90:ec:c8:5a:77:72:4a:0e:68:3a:74:50:1e:b1:19:f0:48:02:
         97:9f:71:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:27:05 2025 by rpki-client