Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C4A5964644EB11F088B1CD7BC4F9AE02.roa
File:                     C4A5964644EB11F088B1CD7BC4F9AE02.roa (raw, json)
Hash identifier:          zyvp7u+LKMIZQvqxJmZTxODOMdr1k5cmPBNyP8x6HJY=
Subject key identifier:   C8:D6:3C:BE:2B:B7:5B:50:30:B6:17:01:63:C5:0B:81:19:81:BA:22
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       05F7
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C4A5964644EB11F088B1CD7BC4F9AE02.roa
Signing time:             Mon 09 Jun 2025 04:39:46 +0000
ROA not before:           Mon 09 Jun 2025 04:39:46 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     152934
IP address blocks:        160.22.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Jun 2025 14:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1527 (0x5f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Jun  9 04:39:46 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=68466591-69c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:07:e0:d2:24:8e:36:02:0d:2a:1a:84:2e:15:
                    fc:41:61:9d:cb:5c:3f:46:e0:cc:5d:84:b9:c2:ef:
                    c1:07:3a:64:52:bf:3f:06:b6:64:11:c5:2f:de:13:
                    91:31:48:96:de:46:40:4d:75:36:82:82:be:80:43:
                    55:33:a6:36:df:d8:e0:0e:c6:3b:ea:09:f3:a4:43:
                    8c:a4:7a:f6:f3:75:6f:a0:4d:a4:a0:ac:02:a3:92:
                    1a:c8:00:9a:0d:85:cc:b8:a1:bb:b0:b3:5c:d5:4e:
                    66:1a:6a:ea:65:85:73:b4:01:ec:a7:b8:58:3e:4e:
                    93:8e:4e:b2:43:ec:04:8b:bd:b6:27:8b:0f:60:e1:
                    80:d4:92:45:aa:86:14:29:ee:f4:34:2a:f6:cc:1d:
                    5f:94:69:65:36:33:e0:1a:9c:ab:ac:f1:c4:61:10:
                    92:17:95:ce:fe:80:34:d3:e6:20:06:66:f8:1b:fa:
                    a6:9e:fe:3d:85:b3:96:5b:4f:62:6b:c3:b1:4d:09:
                    80:93:1f:34:1d:45:2d:40:5a:9b:32:79:bf:f8:c3:
                    2d:3c:5c:b1:38:12:b6:8b:f9:00:12:55:ca:9b:c1:
                    ac:f4:f7:9c:be:ac:4d:75:b8:39:6d:b1:91:13:58:
                    23:e3:b3:10:6b:13:ab:d3:67:61:51:16:9b:74:00:
                    dd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D6:3C:BE:2B:B7:5B:50:30:B6:17:01:63:C5:0B:81:19:81:BA:22
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C4A5964644EB11F088B1CD7BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:1b:c6:04:5c:46:08:99:9a:a8:04:52:7c:a9:27:f6:28:b0:
         97:d3:a9:c0:d0:68:2e:43:e7:7b:6d:08:cd:d6:e8:6e:79:ae:
         66:74:ab:94:c5:67:9e:94:e4:dc:bd:1f:9b:0e:c9:be:a8:26:
         6d:0b:c7:cf:44:f5:71:6d:bc:44:e0:79:66:a5:c3:c7:d7:81:
         1f:8f:14:da:79:e8:10:e5:a8:3b:ce:56:53:e4:2a:62:b3:4b:
         ed:56:46:41:25:30:64:44:ab:d1:1e:38:28:4a:01:fc:de:96:
         8e:78:02:27:30:3b:e5:00:4b:a6:a6:78:5b:5b:39:91:7f:5a:
         10:66:76:f0:3a:07:a0:08:85:ca:57:65:c7:9a:13:63:4a:09:
         8c:40:01:e9:c4:22:2c:03:ad:6b:69:dd:08:d0:44:f4:e6:53:
         fe:d3:d5:af:b2:7b:95:98:52:6f:2a:cd:a1:40:8c:05:f9:49:
         02:d9:fe:d5:1e:a1:67:f5:02:e0:4b:39:56:ec:91:29:14:5f:
         78:13:f1:97:1f:72:c1:3b:21:f2:ca:a0:f6:69:4d:2f:c3:54:
         66:63:f6:1b:d1:6d:ba:48:6e:94:93:08:96:d2:de:d2:99:10:
         ad:da:ed:31:50:5e:25:75:e6:d3:6b:bf:3f:db:5f:f3:57:cd:
         c8:77:99:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 04:25:31 2025 by rpki-client