Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/A17BA30CA6D111F08493B238C4F9AE02.roa
File:                     A17BA30CA6D111F08493B238C4F9AE02.roa (raw, json)
Hash identifier:          R6Wh09KVezBOlWQFZnxiJwo0eP+rAmGW4XX5Y3hH8zo=
Subject key identifier:   F8:AA:3D:A6:31:E9:50:C3:51:CD:96:E9:DD:52:AE:54:D0:32:AE:28
Certificate issuer:       /CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
Certificate serial:       0190
Authority key identifier: BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/A17BA30CA6D111F08493B238C4F9AE02.roa
Signing time:             Sat 01 Nov 2025 22:32:32 +0000
ROA not before:           Sat 01 Nov 2025 22:32:32 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     152322
IP address blocks:        157.10.134.0/24 maxlen: 24
                          157.10.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 04:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B39, serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
        Validity
            Not Before: Nov  1 22:32:32 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69068a80-6029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:38:1a:aa:e3:9b:44:8d:3e:6c:a3:b6:4f:4b:
                    d5:ae:83:26:eb:80:32:40:62:cb:cd:3f:e4:47:cf:
                    25:2f:93:fb:1a:cb:28:79:47:dc:24:37:10:6d:3e:
                    60:0d:45:04:de:35:89:d8:6c:27:16:5c:bd:86:d4:
                    16:47:2c:37:d9:cf:db:26:0d:2b:ba:5a:5f:17:f8:
                    fa:43:c6:5e:b9:ac:10:05:98:79:47:76:2f:2c:df:
                    90:47:52:c4:42:4d:9f:5e:b7:1b:38:ee:0d:39:9c:
                    c3:52:a4:1d:68:71:2b:a9:fb:8f:b0:02:f2:f6:7d:
                    7f:f6:15:7b:b3:64:cb:b2:7c:58:15:93:21:24:ba:
                    12:47:65:31:53:20:52:77:07:5c:04:5f:44:6e:f9:
                    b7:4e:98:24:6d:01:5e:2e:2b:8f:ae:19:f9:d2:f4:
                    a6:5e:cd:3e:00:0f:af:6a:a6:b8:6d:58:da:42:d3:
                    e8:c9:92:25:b9:50:49:2a:38:1d:2d:63:c0:01:f7:
                    0d:62:f6:4b:89:af:76:ff:49:59:d1:5c:d7:82:06:
                    76:48:d7:69:00:fb:e9:7c:9a:01:61:77:0b:ba:e9:
                    81:16:2f:a4:a7:95:fb:87:c7:10:77:ca:39:cb:af:
                    9c:dd:20:80:c8:12:80:2c:2e:93:48:6e:99:7c:61:
                    1b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AA:3D:A6:31:E9:50:C3:51:CD:96:E9:DD:52:AE:54:D0:32:AE:28
            X509v3 Authority Key Identifier:
                keyid:BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/A17BA30CA6D111F08493B238C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:fb:80:11:61:38:c7:97:24:4a:33:2a:af:14:03:08:ba:5b:
         d9:cc:11:64:8a:5c:80:3d:fb:e0:72:78:9e:16:b2:60:6b:72:
         a5:99:8d:38:99:8f:dd:7b:a0:07:02:3e:99:28:b3:70:a0:93:
         92:25:23:87:60:ef:5e:7e:e6:f3:0d:b5:2a:67:b4:ca:81:47:
         0a:62:3b:fd:17:4e:7b:bb:d2:28:ae:8c:bc:9e:a7:49:57:b8:
         ef:24:34:7d:c4:cd:8a:fa:86:aa:b2:81:a3:0b:35:a4:89:90:
         1f:ec:73:01:ae:32:8e:51:00:54:96:dc:28:db:28:ae:f7:6c:
         68:24:c8:95:b6:b4:46:5d:24:d9:93:cc:2e:8f:dc:26:9e:72:
         cd:6b:93:bb:47:b9:c1:82:71:7a:56:48:ba:d1:cc:61:71:e6:
         27:5d:26:23:2b:18:19:b0:85:4a:64:80:4f:e5:d8:e8:05:ea:
         88:49:78:98:d3:f7:4c:69:98:1c:03:85:2b:76:82:5b:92:2f:
         2e:af:6f:e5:d7:be:40:fa:7b:0c:25:6e:99:8e:89:d7:b7:82:
         db:ef:48:b1:8b:37:4a:c9:20:84:7b:e7:f4:b8:d5:6a:ac:ed:
         62:e3:09:54:4f:59:5f:89:37:3a:37:eb:0f:1c:43:d8:48:be:
         4d:9e:a9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:15:56 2025 by rpki-client