Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/2117AE6E37AF11EF844EC638C4F9AE02.roa
File:                     2117AE6E37AF11EF844EC638C4F9AE02.roa (raw, json)
Hash identifier:          vmrZgLw19B5ritq7z4vG50pAGmXRwXJvrAIY9L3sz/4=
Subject key identifier:   92:02:2A:8C:CF:B3:69:FC:13:A0:FD:78:46:F5:FF:2D:58:51:F6:8C
Certificate issuer:       /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7
Certificate serial:       CE
Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/2117AE6E37AF11EF844EC638C4F9AE02.roa
Signing time:             Thu 31 Jul 2025 06:12:10 +0000
ROA not before:           Thu 31 Jul 2025 06:12:10 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     153047
IP address blocks:        160.25.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl
                          rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B95A, serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7
        Validity
            Not Before: Jul 31 06:12:10 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688b093a-258c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:ab:6f:5a:46:e9:6d:9b:91:e4:08:97:2c:
                    d8:d0:44:f5:79:f8:73:20:7d:4b:4d:e9:9d:b8:d3:
                    17:85:1c:9e:83:39:7d:6a:29:1b:6e:7d:1d:c9:72:
                    d8:3e:04:49:57:8e:88:9c:90:8b:8d:6d:fd:cf:30:
                    d1:07:0f:f7:ce:c2:db:f8:94:12:7c:4f:0b:80:04:
                    7b:37:8c:c0:0f:4b:38:bd:69:94:19:4d:f1:89:59:
                    9f:28:ce:c4:f3:a7:85:67:e0:b4:66:c9:d9:e1:11:
                    d9:51:3b:d1:89:da:8a:b6:b1:0f:b9:60:4d:b2:38:
                    80:bc:d2:91:2a:69:25:86:48:e0:ed:49:2c:ab:a5:
                    2b:cc:50:57:0a:41:25:66:77:2b:f5:7b:22:10:1d:
                    ba:42:81:23:53:2f:e2:59:1c:5f:c7:ab:78:84:18:
                    12:97:ec:ec:7e:0e:d0:f6:b4:c0:88:fd:f3:bb:b8:
                    34:91:69:92:af:12:03:4a:b9:92:af:45:2c:3a:27:
                    8c:c6:77:b2:0f:7a:e4:a6:c6:57:3c:47:74:2d:f9:
                    30:ff:96:89:01:eb:17:40:aa:42:d5:cd:42:dc:e0:
                    b9:fa:4c:24:66:f8:e9:44:7a:7d:8a:2d:1c:e4:78:
                    44:a4:b9:33:55:a8:c1:e3:3f:66:f3:22:74:e0:84:
                    ec:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:02:2A:8C:CF:B3:69:FC:13:A0:FD:78:46:F5:FF:2D:58:51:F6:8C
            X509v3 Authority Key Identifier:
                keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/2117AE6E37AF11EF844EC638C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:6f:d6:1a:84:3e:5c:8f:81:90:0c:38:9f:6d:4a:66:e5:ae:
         8e:f6:b0:c8:7e:d0:0f:44:ca:40:6d:e3:b3:77:76:63:05:12:
         80:19:51:ba:28:c0:13:08:6b:56:72:66:8e:f8:62:7b:aa:88:
         a3:8d:7a:6f:1c:3d:e7:58:26:2e:06:34:07:39:34:8e:4c:98:
         f1:52:77:03:86:4a:30:00:23:8d:3a:e8:4a:fc:ad:4c:d6:e1:
         05:5b:22:e9:ad:3e:62:2d:7b:c3:2f:5f:7c:4d:96:78:57:67:
         14:5b:74:cd:11:75:1d:8f:76:cd:89:a1:96:b8:27:2a:4c:44:
         58:ab:62:60:8b:86:9a:40:34:bc:f9:7a:17:81:08:0c:eb:bf:
         6d:32:f7:5a:2a:3b:7b:ee:af:0d:7f:26:63:fe:9f:cd:4e:72:
         a4:e5:90:64:72:de:14:d4:2c:45:68:9a:e3:63:52:a1:14:46:
         00:4f:bb:42:88:4e:7a:b2:bd:6a:e0:4a:dd:ea:ea:97:a4:cf:
         c2:a5:78:09:d4:43:c0:34:53:b8:6d:33:38:f2:6c:d4:e9:cd:
         0c:10:25:ae:34:a9:30:07:9f:4e:52:dc:56:a0:2b:73:bb:af:
         67:2e:fa:f2:25:84:57:2f:1b:4a:97:0c:dc:ad:2d:12:54:5a:
         da:95:e0:8a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI5NUExMTAvBgNVBAUTKEYyNEM0NDMyMTBGNzQxQ0JFNTlEMDE0RUJBNkVFOTcy
QjVDRERBRTcwHhcNMjUwNzMxMDYxMjEwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODhiMDkzYS0yNThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuRqrb1pG6W2bkeQIlyzY0ET1efhzIH1LTemduNMXhRyegzl9aikbbn0dyXLY
PgRJV46InJCLjW39zzDRBw/3zsLb+JQSfE8LgAR7N4zAD0s4vWmUGU3xiVmfKM7E
86eFZ+C0ZsnZ4RHZUTvRidqKtrEPuWBNsjiAvNKRKmklhkjg7Uksq6UrzFBXCkEl
Zncr9XsiEB26QoEjUy/iWRxfx6t4hBgSl+zsfg7Q9rTAiP3zu7g0kWmSrxIDSrmS
r0UsOieMxneyD3rkpsZXPEd0Lfkw/5aJAesXQKpC1c1C3OC5+kwkZvjpRHp9ii0c
5HhEpLkzVajB4z9m8yJ04ITs1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFJICKozP
s2n8E6D9eEb1/y1YUfaMMB8GA1UdIwQYMBaAFPJMRDIQ90HL5Z0BTrpu6XK1zdrn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk1QS81MTJDNzA1RTM3
QUUxMUVGOEE0NThFMzdDNEY5QUUwMi84a3hFTWhEM1FjdmxuUUZPdW03cGNyWE4y
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzhreEVNaEQzUWN2bG5RRk91bTdwY3JYTjJ1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkI5NUEvNTEyQzcwNUUzN0FFMTFFRjhBNDU4RTM3QzRGOUFFMDIvMjExN0FFNkUz
N0FGMTFFRjg0NEVDNjM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACgGSswDQYJKoZIhvcNAQELBQADggEBAGxv1hqEPlyPgZAM
OJ9tSmblro72sMh+0A9EykBt47N3dmMFEoAZUboowBMIa1ZyZo74YnuqiKONem8c
PedYJi4GNAc5NI5MmPFSdwOGSjAAI4066Er8rUzW4QVbIumtPmIte8MvX3xNlnhX
ZxRbdM0RdR2Pds2JoZa4JypMRFirYmCLhppANLz5eheBCAzrv20y91oqO3vurw1/
JmP+n81OcqTlkGRy3hTULEVomuNjUqEURgBPu0KITnqyvWrgSt3q6pekz8KleAnU
Q8A0U7htMzjybNTpzQwQJa40qTAHn05S3FagK3O7r2cu+vIlhFcvG0qXDNytLRJU
WtqV4Io=
-----END CERTIFICATE-----
Generated at Wed Aug 13 08:24:42 2025 by rpki-client