Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/B23569E2756511EFB018F20DC4F9AE02.roa
File:                     B23569E2756511EFB018F20DC4F9AE02.roa (raw, json)
Hash identifier:          gjYfNXF3GpcKnZuP/+eurz+VLiW4skkCjGj8XhdhHuU=
Subject key identifier:   4F:48:66:FE:C5:62:82:47:C1:44:14:41:39:0B:72:BA:72:02:2F:D6
Certificate issuer:       /CN=A91D44BE/serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD
Certificate serial:       B4
Authority key identifier: 95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/B23569E2756511EFB018F20DC4F9AE02.roa
Signing time:             Thu 31 Jul 2025 06:43:33 +0000
ROA not before:           Thu 31 Jul 2025 06:43:33 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138166
IP address blocks:        160.30.212.0/24 maxlen: 24
                          160.30.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl
                          rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D44BE, serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD
        Validity
            Not Before: Jul 31 06:43:33 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=688b1094-7dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b4:ef:f8:ba:38:08:66:4d:d0:d2:91:41:4a:
                    1d:22:11:7b:01:1c:b5:a9:11:10:89:0b:b0:62:95:
                    d8:bf:ac:b6:74:2d:e8:f3:d3:a4:b0:8b:6a:53:a4:
                    69:4d:1e:de:e5:94:a0:44:e4:1b:72:c6:b2:18:be:
                    d9:78:25:e1:47:28:94:cc:52:f7:52:6c:7b:79:05:
                    25:89:b2:24:f8:ba:48:f3:03:b0:b9:fd:d5:c0:d6:
                    09:5e:2b:22:60:7a:65:12:94:55:c7:0c:50:25:2f:
                    d8:f8:84:be:94:10:5e:dd:09:6e:89:8d:58:c0:3d:
                    b8:d0:17:3f:d6:d4:17:65:98:2c:ef:d8:46:a3:85:
                    73:de:c7:d3:c4:40:22:82:8a:56:27:91:e2:9d:ed:
                    12:1d:5a:a1:50:a9:f8:d4:dd:20:24:15:15:9a:92:
                    ab:87:4e:5b:96:aa:02:ec:89:77:8c:b4:43:cf:23:
                    5c:ad:6f:4e:9f:61:af:a2:d7:ac:8f:16:d8:1e:cd:
                    cd:0c:57:a7:47:7f:35:28:9c:d3:0f:16:fb:b7:3b:
                    0d:41:e4:4d:c4:49:bb:cb:fb:1b:17:32:54:24:64:
                    49:0e:bf:85:1b:54:9a:5c:8d:09:51:57:46:7e:9b:
                    c8:80:c0:31:d8:b8:69:6d:fd:17:63:dd:e7:8b:b0:
                    5c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:48:66:FE:C5:62:82:47:C1:44:14:41:39:0B:72:BA:72:02:2F:D6
            X509v3 Authority Key Identifier:
                keyid:95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/B23569E2756511EFB018F20DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:6e:74:9e:f3:e1:28:63:11:9d:ff:15:ff:f8:35:4c:84:8b:
         06:e7:d7:f2:c3:ff:c5:43:b3:61:34:2b:76:af:5e:1c:a2:7f:
         ae:9e:7d:29:34:3e:39:1c:32:73:2c:7b:b2:d7:12:d9:0b:54:
         ec:3b:e4:73:34:4b:43:cd:67:36:6a:68:0e:84:2f:db:9d:d0:
         f7:9c:91:e4:6b:7b:5a:6a:44:48:22:3a:df:ff:b0:bb:7b:10:
         3c:ea:a9:5c:f9:b8:50:0b:e9:f3:3e:86:20:55:e4:ce:e2:88:
         f1:bd:db:32:83:d9:82:7e:42:f2:54:05:3e:2a:46:35:cf:ff:
         3b:cf:b6:30:d0:d3:16:b7:35:7c:66:1f:3d:aa:56:54:0d:a1:
         22:8f:4a:df:93:8f:fc:7b:ad:29:f6:7d:bd:52:c8:1f:02:68:
         97:fc:28:9f:57:37:ca:f0:8e:ac:a6:1c:92:c3:38:18:7f:c4:
         e2:c7:75:c4:6b:94:5e:a2:e1:b9:bf:af:1f:15:be:3e:af:b9:
         29:6d:b3:6d:f6:ef:4e:95:08:c7:c2:d0:b2:a2:cc:48:2c:f8:
         2f:7b:6a:84:23:e1:d9:3b:25:e3:18:7e:17:ca:01:a1:a3:a9:
         dd:1c:cb:3f:68:f1:0f:c4:8a:84:b0:d2:5e:96:04:a5:7a:e1:
         c9:81:80:ba
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ0QkUxMTAvBgNVBAUTKDk1RjA5RDVFNUI4QkNENkY0QjRENjlCNUM5MzZDOTEy
Rjc3RDJDRkQwHhcNMjUwNzMxMDY0MzMzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODhiMTA5NC03ZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtrTv+Lo4CGZN0NKRQUodIhF7ARy1qREQiQuwYpXYv6y2dC3o89OksItqU6Rp
TR7e5ZSgROQbcsayGL7ZeCXhRyiUzFL3Umx7eQUlibIk+LpI8wOwuf3VwNYJXisi
YHplEpRVxwxQJS/Y+IS+lBBe3QluiY1YwD240Bc/1tQXZZgs79hGo4Vz3sfTxEAi
gopWJ5Hine0SHVqhUKn41N0gJBUVmpKrh05blqoC7Il3jLRDzyNcrW9On2Gvotes
jxbYHs3NDFenR381KJzTDxb7tzsNQeRNxEm7y/sbFzJUJGRJDr+FG1SaXI0JUVdG
fpvIgMAx2Lhpbf0XY93ni7Bc0wIDAQABo4IClTCCApEwHQYDVR0OBBYEFE9IZv7F
YoJHwUQUQTkLcrpyAi/WMB8GA1UdIwQYMBaAFJXwnV5bi81vS01ptck2yRL3fSz9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDRCRS8wMjhBQkU0MjY5
MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpXOUxUV20xeVRiSkV2ZDlM
UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2xmQ2RYbHVMelc5TFRXbTF5VGJKRXZkOUxQMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDQ0QkUvMDI4QUJFNDI2OTIyMTFFRkJGODdCQjBFQzRGOUFFMDIvQjIzNTY5RTI3
NTY1MTFFRkIwMThGMjBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGgHtQwDQYJKoZIhvcNAQELBQADggEBABtudJ7z4ShjEZ3/
Ff/4NUyEiwbn1/LD/8VDs2E0K3avXhyif66efSk0PjkcMnMse7LXEtkLVOw75HM0
S0PNZzZqaA6EL9ud0PeckeRre1pqREgiOt//sLt7EDzqqVz5uFAL6fM+hiBV5M7i
iPG92zKD2YJ+QvJUBT4qRjXP/zvPtjDQ0xa3NXxmHz2qVlQNoSKPSt+Tj/x7rSn2
fb1SyB8CaJf8KJ9XN8rwjqymHJLDOBh/xOLHdcRrlF6i4bm/rx8Vvj6vuSlts232
706VCMfC0LKizEgs+C97aoQj4dk7JeMYfhfKAaGjqd0cyz9o8Q/EioSw0l6WBKV6
4cmBgLo=
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:33:16 2025 by rpki-client