Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/AB138380985F11EEBA5D186DC4F9AE02.roa
File:                     AB138380985F11EEBA5D186DC4F9AE02.roa (raw, json)
Hash identifier:          AHx+rcesmSJ02RarPyYkZVOe2l/xINiEbEhHNsgsus8=
Subject key identifier:   90:48:AE:79:19:C9:0A:9F:E0:9E:25:36:8E:DB:A0:5E:FC:A5:90:E1
Certificate issuer:       /CN=A916BCDF/serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A
Certificate serial:       0C63
Authority key identifier: 48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/AB138380985F11EEBA5D186DC4F9AE02.roa
Signing time:             Sun 02 Nov 2025 17:35:29 +0000
ROA not before:           Sun 02 Nov 2025 17:35:29 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     20473
IP address blocks:        141.164.32.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl
                          rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 17:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3171 (0xc63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BCDF, serialNumber=4852E8726C1448A1040CCFA043B8314AAE4C4E9A
        Validity
            Not Before: Nov  2 17:35:29 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69079660-bd69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:3a:b9:26:35:4a:32:c1:c3:b9:2c:b1:23:
                    2e:61:59:27:89:ab:8e:9f:ec:8e:5d:f2:5e:f2:8b:
                    e0:52:5e:12:4f:04:08:df:a2:d4:ba:d6:b7:27:68:
                    af:d2:a0:b7:15:2b:ca:2f:d1:65:f1:92:6e:2a:77:
                    59:e1:3b:c1:7a:d2:bd:5f:0a:84:3c:01:dc:67:fb:
                    79:61:ca:33:28:49:a4:13:b4:8e:9d:f6:0f:aa:20:
                    00:86:90:1f:83:0d:88:f6:45:b7:8c:5a:06:90:4b:
                    f0:a9:12:e1:29:21:f8:60:13:b7:b8:94:2b:44:bb:
                    32:5b:bb:9b:eb:c6:1b:81:8c:7c:5b:f9:77:cd:80:
                    42:aa:e2:75:17:86:cf:d0:f8:c9:d5:c5:ea:47:ff:
                    ef:c5:05:92:ec:32:58:fe:07:fe:f3:6c:08:25:ea:
                    2e:c0:50:4c:d7:a0:7d:42:44:3a:83:2f:1c:c3:34:
                    d2:82:f8:15:40:b1:cf:a3:4c:df:4f:21:2a:b0:9f:
                    89:ea:ab:72:b2:ee:a4:ef:5b:24:f6:95:ee:11:1c:
                    df:47:10:ee:52:59:4e:a5:dd:49:0a:d1:c9:62:8e:
                    fd:77:86:e8:f1:5e:28:96:78:5f:b7:dc:82:09:d2:
                    a9:24:20:81:28:b0:43:71:ff:6b:58:80:56:7c:68:
                    c3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:48:AE:79:19:C9:0A:9F:E0:9E:25:36:8E:DB:A0:5E:FC:A5:90:E1
            X509v3 Authority Key Identifier:
                keyid:48:52:E8:72:6C:14:48:A1:04:0C:CF:A0:43:B8:31:4A:AE:4C:4E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/SFLocmwUSKEEDM-gQ7gxSq5MTpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SFLocmwUSKEEDM-gQ7gxSq5MTpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/C1CB2DF210D811EA9BD1A55DC4F9AE02/AB138380985F11EEBA5D186DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.164.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         31:61:9f:39:ff:2c:d3:0b:c0:fc:90:0a:56:ab:c6:14:2f:f9:
         53:2f:90:56:a2:86:36:6a:64:c4:7e:7e:75:e9:84:4f:d0:17:
         58:7f:6c:67:37:18:bf:51:a5:f3:78:d0:33:08:44:ca:8f:8f:
         72:e3:89:30:2f:17:8e:e0:1a:2c:91:cf:00:98:c5:b5:e5:3a:
         c3:2a:a9:7d:89:d8:94:b7:11:86:6e:8d:72:e7:02:4e:7f:99:
         93:d1:36:04:07:fa:31:d2:e8:c7:bb:a2:bc:f5:fc:a5:2d:14:
         76:90:3f:9f:03:e9:6f:30:6e:25:6b:f1:32:b4:54:85:63:6b:
         f8:42:d5:6e:de:f6:10:1f:3e:6e:52:2f:e3:3d:83:63:c5:ea:
         17:39:b9:d7:90:07:55:00:34:0e:df:15:a7:39:a4:5a:6e:66:
         a1:fa:98:c0:fb:4f:82:9c:4d:50:2e:7b:a5:7c:84:c2:7e:89:
         f2:65:2b:aa:4a:e4:49:2d:81:5e:d1:14:b7:cf:dc:19:e2:01:
         7c:8c:7a:95:e8:1b:d8:93:70:62:80:61:13:47:ef:f0:aa:69:
         fd:81:ca:10:94:a9:46:89:33:73:fe:fd:70:26:7f:b8:3e:79:
         43:3b:8c:3c:8f:b4:35:b7:dc:b1:f4:ef:b3:de:6b:9e:85:6e:
         d5:37:50:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:02:04 2025 by rpki-client