Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/C0F3F504492B11EF8EF0D04FC4F9AE02.roa
File:                     C0F3F504492B11EF8EF0D04FC4F9AE02.roa (raw, json)
Hash identifier:          0zbBkZ62dr/yZQO3asP9YyQ8MW3j8nW078S8WtIQO9c=
Subject key identifier:   8C:F6:1F:FD:69:68:4C:70:0F:65:98:EB:43:B0:57:22:25:58:66:99
Certificate issuer:       /CN=A91E0CF5/serialNumber=813A6E4F7EDC58BC7A48B6D1FD7C19DFD828F1F1
Certificate serial:       C2
Authority key identifier: 81:3A:6E:4F:7E:DC:58:BC:7A:48:B6:D1:FD:7C:19:DF:D8:28:F1:F1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/C0F3F504492B11EF8EF0D04FC4F9AE02.roa
Signing time:             Fri 01 Aug 2025 07:43:08 +0000
ROA not before:           Fri 01 Aug 2025 07:43:08 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135418
IP address blocks:        160.30.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.crl
                          rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 05:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0CF5, serialNumber=813A6E4F7EDC58BC7A48B6D1FD7C19DFD828F1F1
        Validity
            Not Before: Aug  1 07:43:08 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=688c700c-dd22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5f:da:54:41:dc:36:fb:ea:4d:e4:67:83:cc:
                    8d:cb:0b:bd:a9:85:03:76:84:e8:85:49:bf:e8:9f:
                    cb:33:cd:c9:3b:0b:d7:65:19:8c:73:47:66:3f:f1:
                    f6:2b:71:fb:70:cd:ab:66:06:ab:24:10:cc:0f:92:
                    00:61:f6:4c:07:73:59:64:57:c3:56:b3:cc:e3:52:
                    cc:e5:82:d0:5c:bd:39:64:89:d5:4d:65:9e:48:42:
                    1f:18:aa:c0:31:b6:7d:cb:3c:8c:91:6e:18:ba:0b:
                    93:fe:34:0f:7f:cf:ce:65:59:6e:10:76:df:c9:07:
                    85:30:13:51:db:f0:74:42:bc:d9:17:43:8e:0c:8c:
                    f1:9e:66:3b:07:41:37:0c:9d:de:6a:e0:7e:c6:ad:
                    84:60:85:d1:95:3b:91:9f:d2:28:38:99:e1:38:ec:
                    7b:ff:33:2d:3e:b6:6f:0f:dd:d7:88:bb:41:9f:c5:
                    c6:99:7d:e6:a2:74:6b:de:e5:e2:16:cf:e7:06:bd:
                    05:c4:31:5e:a3:3d:72:3a:e2:22:fb:3e:10:bd:7d:
                    3e:22:1d:88:97:49:1e:36:5a:da:11:65:30:eb:8e:
                    19:b3:9b:31:d6:b2:a2:73:4d:54:50:a3:6a:b5:99:
                    e0:40:58:0d:ac:26:4a:ec:b4:04:77:91:17:37:f9:
                    ba:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F6:1F:FD:69:68:4C:70:0F:65:98:EB:43:B0:57:22:25:58:66:99
            X509v3 Authority Key Identifier:
                keyid:81:3A:6E:4F:7E:DC:58:BC:7A:48:B6:D1:FD:7C:19:DF:D8:28:F1:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/gTpuT37cWLx6SLbR_XwZ39go8fE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gTpuT37cWLx6SLbR_XwZ39go8fE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/4BB7C644492B11EFBE10184FC4F9AE02/C0F3F504492B11EF8EF0D04FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:05:59:ea:51:6b:43:23:fb:a2:a4:7c:2f:94:fa:ff:10:40:
         db:c7:d3:68:91:6c:6e:ea:cf:fd:52:47:2a:b6:0a:af:8e:3a:
         4c:40:14:37:79:a0:22:35:ff:1a:b3:be:7a:35:03:b8:c3:e0:
         36:1f:da:f8:70:e6:b6:ba:97:62:aa:eb:5a:bc:c5:6a:c2:76:
         9e:b5:04:28:81:35:00:4d:98:2c:dd:3e:a3:c2:0b:6b:c0:c7:
         96:4d:bc:f2:73:80:52:7a:64:ec:48:49:4e:05:57:eb:02:9c:
         b6:1e:cf:e6:87:51:56:8b:b1:87:8a:5f:0e:da:33:53:36:da:
         58:4f:f4:f1:93:57:1f:ea:0f:1d:93:00:ae:74:3e:11:1e:e6:
         6f:35:ca:b8:79:97:84:81:18:7b:6f:ff:15:49:5d:57:c4:dd:
         73:10:95:56:b2:01:3b:2e:a8:c2:7b:5e:60:b2:97:f6:a3:75:
         5b:eb:ef:3d:96:18:c0:05:5d:9d:f9:86:ec:b6:c8:e6:15:a5:
         e8:47:2a:2b:7d:6a:f3:89:01:49:74:1d:c5:db:70:3f:37:25:
         bb:76:d0:02:26:98:79:6e:96:2d:e6:65:9f:3f:ce:86:05:c2:
         ce:1f:a9:39:7f:e6:3f:0b:14:d2:ca:8c:95:19:14:86:a0:66:
         6b:2e:1f:c2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBDRjUxMTAvBgNVBAUTKDgxM0E2RTRGN0VEQzU4QkM3QTQ4QjZEMUZEN0MxOURG
RDgyOEYxRjEwHhcNMjUwODAxMDc0MzA4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODhjNzAwYy1kZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn1/aVEHcNvvqTeRng8yNywu9qYUDdoTohUm/6J/LM83JOwvXZRmMc0dmP/H2
K3H7cM2rZgarJBDMD5IAYfZMB3NZZFfDVrPM41LM5YLQXL05ZInVTWWeSEIfGKrA
MbZ9yzyMkW4YuguT/jQPf8/OZVluEHbfyQeFMBNR2/B0QrzZF0OODIzxnmY7B0E3
DJ3eauB+xq2EYIXRlTuRn9IoOJnhOOx7/zMtPrZvD93XiLtBn8XGmX3monRr3uXi
Fs/nBr0FxDFeoz1yOuIi+z4QvX0+Ih2Il0keNlraEWUw644Zs5sx1rKic01UUKNq
tZngQFgNrCZK7LQEd5EXN/m6eQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIz2H/1p
aExwD2WY60OwVyIlWGaZMB8GA1UdIwQYMBaAFIE6bk9+3Fi8eki20f18Gd/YKPHx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENGNS80QkI3QzY0NDQ5
MkIxMUVGQkUxMDE4NEZDNEY5QUUwMi9nVHB1VDM3Y1dMeDZTTGJSX1h3WjM5Z284
ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2dUcHVUMzdjV0x4NlNMYlJfWHdaMzlnbzhmRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTBDRjUvNEJCN0M2NDQ0OTJCMTFFRkJFMTAxODRGQzRGOUFFMDIvQzBGM0Y1MDQ0
OTJCMTFFRjhFRjBEMDRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGgHgAwDQYJKoZIhvcNAQELBQADggEBACIFWepRa0Mj+6Kk
fC+U+v8QQNvH02iRbG7qz/1SRyq2Cq+OOkxAFDd5oCI1/xqzvno1A7jD4DYf2vhw
5ra6l2Kq61q8xWrCdp61BCiBNQBNmCzdPqPCC2vAx5ZNvPJzgFJ6ZOxISU4FV+sC
nLYez+aHUVaLsYeKXw7aM1M22lhP9PGTVx/qDx2TAK50PhEe5m81yrh5l4SBGHtv
/xVJXVfE3XMQlVayATsuqMJ7XmCyl/ajdVvr7z2WGMAFXZ35huy2yOYVpehHKit9
avOJAUl0HcXbcD83Jbt20AImmHluli3mZZ8/zoYFws4fqTl/5j8LFNLKjJUZFIag
ZmsuH8I=
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:15:38 2025 by rpki-client