Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/DA8D1C7EA72311EFBCEB047EC4F9AE02.roa
File:                     DA8D1C7EA72311EFBCEB047EC4F9AE02.roa (raw, json)
Hash identifier:          v8ohmUSHk0fnin1T0AiYUETFghcnt5SEXbq5Yrmd+XU=
Subject key identifier:   C4:E3:41:4A:B8:E9:31:D5:06:68:EB:9C:54:61:A3:7B:C9:DB:51:E5
Certificate issuer:       /CN=A91CD40B/serialNumber=3574790D8DF82B3B551E3B702571BAF55A9E9961
Certificate serial:       E4
Authority key identifier: 35:74:79:0D:8D:F8:2B:3B:55:1E:3B:70:25:71:BA:F5:5A:9E:99:61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/DA8D1C7EA72311EFBCEB047EC4F9AE02.roa
Signing time:             Sat 25 Oct 2025 09:49:54 +0000
ROA not before:           Sat 25 Oct 2025 09:49:54 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     153358
IP address blocks:        160.187.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.crl
                          rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 05:55:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD40B, serialNumber=3574790D8DF82B3B551E3B702571BAF55A9E9961
        Validity
            Not Before: Oct 25 09:49:54 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68fc9d41-5027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1e:cb:b4:dc:22:6d:40:2b:b8:63:e9:2b:fd:
                    dd:6d:2b:5e:d1:61:fe:8f:73:9e:07:13:1d:11:51:
                    30:b2:88:4f:f9:a9:82:61:a8:1d:a3:50:18:5b:a4:
                    29:58:90:05:c6:22:88:0f:a8:c2:91:0c:e2:44:e3:
                    68:cc:6f:f3:fc:c7:9a:e1:03:f5:28:4f:26:66:b6:
                    e2:aa:aa:13:e6:9c:13:2c:2f:6a:ed:0c:e0:00:dd:
                    17:c4:05:b7:41:3d:f7:f9:75:72:fb:9e:95:50:28:
                    5e:19:28:dc:7e:79:f3:a1:0e:70:38:fc:47:98:87:
                    8d:c2:ce:37:f6:72:5d:08:3a:3e:1f:33:2a:0c:47:
                    e3:1b:a4:0d:9c:48:94:16:5c:16:36:de:18:41:ae:
                    00:e0:dd:1d:9f:9f:7a:98:c9:63:22:63:46:ad:1b:
                    7a:e3:63:a8:36:67:61:f4:c0:4e:4c:2d:ba:e4:e6:
                    78:66:16:8f:bc:86:28:11:6c:d5:85:26:72:be:78:
                    e6:5a:87:8e:54:dc:e8:11:b3:2f:19:3a:42:a5:fd:
                    83:f2:e1:ea:2e:d3:09:06:88:a5:a1:73:12:5c:01:
                    ca:a7:8a:61:d1:e3:e1:99:2c:fc:cf:72:b6:5a:36:
                    1e:b0:e3:34:4b:ab:f7:a4:81:81:65:06:13:96:fc:
                    27:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E3:41:4A:B8:E9:31:D5:06:68:EB:9C:54:61:A3:7B:C9:DB:51:E5
            X509v3 Authority Key Identifier:
                keyid:35:74:79:0D:8D:F8:2B:3B:55:1E:3B:70:25:71:BA:F5:5A:9E:99:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/NXR5DY34KztVHjtwJXG69VqemWE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NXR5DY34KztVHjtwJXG69VqemWE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD40B/6B5D2A7C855B11EFB0576D40C4F9AE02/DA8D1C7EA72311EFBCEB047EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e0:15:4c:1b:c3:4d:14:b0:b3:f3:e0:4a:2b:6a:f3:2d:fe:71:
         c9:1c:7e:82:7d:ad:df:01:19:30:68:fc:9b:6c:17:c2:d1:0a:
         a1:0f:45:c8:cf:b8:ef:b3:70:1b:f6:90:90:3e:6b:bf:81:e5:
         cb:14:89:1a:84:a5:0e:b2:cb:7c:fc:61:99:75:02:16:e6:93:
         9e:9f:32:e7:e4:d3:d3:7a:d1:29:c0:77:58:9a:d7:22:3f:aa:
         c1:41:02:12:68:34:e3:38:52:03:08:58:68:96:40:98:56:26:
         ed:7c:8f:69:1d:9d:00:08:75:db:9d:37:8c:2e:ed:57:12:df:
         0d:e7:ba:3e:85:d1:25:fe:47:48:55:28:43:e9:58:82:47:aa:
         7a:80:04:12:bf:00:a4:6e:3c:1c:52:cb:25:f9:0c:f3:06:58:
         56:b7:ac:14:fa:53:d9:77:46:ba:0e:e7:b7:0f:57:aa:c6:ed:
         c8:c0:46:ac:37:fd:05:f1:bf:b5:57:a2:fd:b3:ea:90:03:99:
         06:81:29:2b:33:c4:0f:bc:c3:cc:28:94:7a:b0:c3:d9:f2:fd:
         79:2c:54:3b:0a:c8:37:d5:2d:28:62:44:87:21:10:6d:db:b8:
         7c:c3:a1:06:0e:42:bb:91:3f:13:42:91:49:26:7c:d3:7d:48:
         c5:19:b9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:48:40 2025 by rpki-client