Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/8580DC705AE311EF86351430C4F9AE02.roa
File:                     8580DC705AE311EF86351430C4F9AE02.roa (raw, json)
Hash identifier:          27On7VhpG5fhZmLnd0n/w+EKAhYgslmits5+QsN4KvA=
Subject key identifier:   3B:C2:FB:01:4D:3D:44:44:4E:68:9F:0C:39:FB:8F:9F:D2:55:B2:EC
Certificate issuer:       /CN=A91ED596/serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B
Certificate serial:       B2
Authority key identifier: BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/8580DC705AE311EF86351430C4F9AE02.roa
Signing time:             Wed 23 Jul 2025 06:42:27 +0000
ROA not before:           Wed 23 Jul 2025 06:42:27 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151663
IP address blocks:        160.30.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl
                          rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 06:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED596, serialNumber=BF71F5BF1168A7840576E0006F3BBC65FC48340B
        Validity
            Not Before: Jul 23 06:42:27 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68808453-d49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f6:51:5f:11:d2:6b:51:6d:65:73:81:9e:0f:
                    7d:05:73:d8:27:6c:3f:0b:5d:b8:a1:8d:29:de:df:
                    f3:b8:f9:c6:9c:aa:d0:cb:30:2f:ce:ed:d1:41:c3:
                    63:4d:f5:c4:b8:94:fa:4c:c5:b8:fd:19:4d:5f:a1:
                    2d:3b:68:22:fb:25:bb:9c:b3:11:76:a3:b7:26:c5:
                    6e:9c:5a:67:84:25:34:cc:f5:65:10:85:c2:dd:ba:
                    a9:35:a8:8a:d4:ef:c8:5b:c1:65:9d:49:3a:36:6b:
                    c8:ab:57:a4:f4:6c:be:19:52:eb:38:42:53:a0:6d:
                    fe:0b:5a:64:16:71:b2:74:af:4d:97:1f:17:72:a7:
                    04:1b:bf:b1:28:b9:c9:53:a5:c4:90:43:6d:22:46:
                    6d:f3:6b:4e:52:ef:0c:79:7b:99:8f:d3:a9:6e:ff:
                    fb:d1:3d:21:87:f2:c8:2a:33:a8:21:5a:5c:2b:9a:
                    83:b7:a4:55:75:50:df:1a:04:11:f4:ee:00:04:eb:
                    77:74:fe:d1:09:27:4e:b7:d5:c1:31:e2:d1:3c:4f:
                    34:b5:b3:77:76:e7:15:79:a9:ae:61:68:a1:02:b7:
                    6f:f7:b2:9f:10:fb:94:06:0e:e7:f6:c4:e3:c9:e6:
                    d6:41:77:01:81:7d:99:10:da:2a:f7:9c:16:16:80:
                    30:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C2:FB:01:4D:3D:44:44:4E:68:9F:0C:39:FB:8F:9F:D2:55:B2:EC
            X509v3 Authority Key Identifier:
                keyid:BF:71:F5:BF:11:68:A7:84:05:76:E0:00:6F:3B:BC:65:FC:48:34:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/v3H1vxFop4QFduAAbzu8ZfxINAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v3H1vxFop4QFduAAbzu8ZfxINAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0572DD8A5AE311EF932C232FC4F9AE02/8580DC705AE311EF86351430C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:5d:3e:f4:fd:9a:8c:ff:d9:93:67:68:29:f1:46:60:f6:bc:
         9f:1c:22:ce:96:e9:42:81:05:f8:24:4f:df:00:63:5a:3e:0e:
         e6:3f:8c:ed:6e:97:d8:87:20:2e:aa:0b:ad:72:d2:aa:f9:bb:
         33:02:f3:2b:d0:36:f0:79:8a:87:0f:3c:a4:3a:9c:73:0e:bc:
         36:3f:cb:da:56:4f:b7:61:e7:4b:9e:de:78:7c:64:3e:87:88:
         53:22:60:dc:0b:10:b5:24:c5:df:87:69:97:b2:4f:29:e5:06:
         d2:f3:ba:49:8e:56:eb:f9:4e:0d:c1:4b:9f:72:79:31:3f:95:
         52:ec:84:b0:e5:cd:41:05:4e:a7:5a:9f:c0:67:99:6b:36:da:
         75:e3:88:7b:12:07:d2:2e:a0:7d:48:43:18:57:2a:22:37:e3:
         82:89:d5:b8:a8:fd:de:77:c8:fe:77:d6:f3:0b:e8:fb:0d:29:
         da:27:96:e9:3a:63:04:84:89:e7:13:19:97:90:8f:c1:00:e7:
         9e:b1:4a:4f:22:14:69:95:75:99:4b:9b:97:78:ba:1a:2e:dd:
         31:66:06:c3:bf:b4:f6:82:0f:4f:a2:b5:b4:7e:0f:be:c9:fe:
         ea:c4:1e:c3:c3:3c:66:a8:99:d1:f5:b0:74:f0:4e:2f:36:f6:
         ad:a8:9f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 23:06:25 2025 by rpki-client