Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/FF233C70E62111EFACA87766C4F9AE02.roa
File:                     FF233C70E62111EFACA87766C4F9AE02.roa (raw, json)
Hash identifier:          0dsUVKxnnglNpZZhhpBErhWI1oXUDVFF4BUubObFWiM=
Subject key identifier:   13:31:E9:BC:F6:28:25:61:A5:DB:DB:3D:6A:61:5C:70:CF:1E:FF:DE
Certificate issuer:       /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32
Certificate serial:       0114
Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/FF233C70E62111EFACA87766C4F9AE02.roa
Signing time:             Fri 01 Aug 2025 07:11:53 +0000
ROA not before:           Fri 01 Aug 2025 07:11:53 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     214189
IP address blocks:        160.22.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl
                          rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32
        Validity
            Not Before: Aug  1 07:11:53 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=688c68b9-3e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:67:79:72:6f:0e:5c:91:36:7e:10:5a:38:6c:
                    94:62:a4:16:4e:e9:de:1a:24:02:7d:ef:a8:98:ed:
                    c4:40:ca:60:a2:b8:88:b1:6c:86:88:ee:ae:1c:5e:
                    21:40:72:6a:e6:c0:a7:2c:45:b1:48:e2:d0:d2:fb:
                    b9:cc:9f:38:82:c7:22:91:64:85:6c:b5:64:23:18:
                    8c:92:da:6f:1d:0a:6d:35:f1:e9:0c:9b:45:6a:51:
                    ca:50:1a:a1:8b:33:2f:82:2e:0b:81:13:46:1d:5f:
                    8b:cb:7a:fe:41:d5:43:8a:4b:3c:ba:2e:0d:51:de:
                    14:df:32:8f:3f:96:81:68:2a:16:58:69:e3:ef:5c:
                    ab:46:cd:be:fe:0b:97:f3:d0:b5:e2:3c:4c:00:d7:
                    6f:33:89:7c:52:a7:5e:c6:c0:86:13:b4:73:2d:72:
                    89:6a:9c:49:06:c7:4d:27:4d:f2:c5:5a:e9:10:eb:
                    0c:57:cf:39:a5:60:97:b3:46:43:08:9a:68:51:36:
                    95:fc:d8:75:72:fd:14:a0:2f:ca:41:0e:9d:bc:a8:
                    3f:4c:03:84:02:55:95:20:67:2c:f3:30:63:1a:ab:
                    83:83:23:09:6f:8f:95:03:e2:87:cc:2d:19:dd:c8:
                    65:0a:5a:d2:95:fa:59:26:3e:6e:8a:09:70:05:91:
                    af:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:31:E9:BC:F6:28:25:61:A5:DB:DB:3D:6A:61:5C:70:CF:1E:FF:DE
            X509v3 Authority Key Identifier:
                keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/FF233C70E62111EFACA87766C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:5a:9f:dc:a8:db:9b:e4:74:6b:07:d1:df:e4:65:e1:2d:f8:
         51:46:e7:41:ea:08:bf:f4:7e:dc:db:36:b0:1e:d7:37:63:76:
         0a:1c:67:5e:3d:d6:70:f8:66:16:10:27:97:51:c8:fa:e2:ff:
         0d:5a:fc:70:e2:e5:42:cf:3c:66:a6:8a:d7:8e:11:39:20:32:
         be:e3:15:3e:2c:6a:86:e8:1f:9b:a4:ae:f6:28:32:33:30:c2:
         ce:9f:ce:4f:d6:21:4f:9a:b4:5e:ca:a7:ea:a6:ba:b8:68:81:
         ea:ee:23:cd:35:d0:8b:85:30:89:5f:75:69:4c:43:fb:6a:b1:
         d2:f0:51:f0:f0:67:95:04:f1:ce:33:33:10:6e:d8:70:81:e2:
         32:21:84:f2:76:df:28:36:9a:a8:8a:ab:31:a1:bb:a7:e6:ee:
         97:91:97:33:e2:6f:c3:df:f0:82:34:61:94:f0:3a:76:7d:63:
         e2:df:b7:20:d1:a2:9c:4d:a7:51:48:f2:f6:57:98:e6:c6:8a:
         66:77:80:68:ee:ba:b0:5f:b1:7a:86:95:16:4f:b8:d4:18:40:
         76:13:db:59:83:48:4f:4f:0a:42:5a:67:a2:ba:04:54:b3:e9:
         c3:fe:e9:5d:9a:69:83:43:04:db:a8:e2:e0:d6:90:5f:7a:3a:
         54:51:94:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:34:22 2025 by rpki-client