Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/00E00D025BC711F0886C5B59C4F9AE02.roa
File:                     00E00D025BC711F0886C5B59C4F9AE02.roa (raw, json)
Hash identifier:          sqy/WdKkX/I9+eeWKmyiO40gweC8VofbqWaj5A5W8ko=
Subject key identifier:   6A:34:D2:43:EC:5E:54:61:97:F4:43:8F:84:27:D1:B5:93:E9:66:D4
Certificate issuer:       /CN=A916D6C1/serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A
Certificate serial:       A0
Authority key identifier: 26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/00E00D025BC711F0886C5B59C4F9AE02.roa
Signing time:             Tue 08 Jul 2025 06:45:59 +0000
ROA not before:           Tue 08 Jul 2025 06:45:59 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     139052
IP address blocks:        160.187.102.0/23 maxlen: 23
                          160.187.102.0/24 maxlen: 24
                          160.187.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl
                          rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 06:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D6C1, serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A
        Validity
            Not Before: Jul  8 06:45:59 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=686cbea7-f8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:10:13:a7:d4:8b:6c:75:a8:dc:5b:ec:68:
                    08:22:50:92:8f:9a:1e:4b:23:7b:dd:a3:97:f3:ac:
                    70:6f:20:29:35:b0:d2:60:b8:eb:b8:f4:10:f6:e9:
                    b7:2e:b4:99:21:e7:ca:9c:56:11:1d:eb:16:78:66:
                    16:d0:1c:8a:fd:92:f6:1b:01:63:18:30:ae:d6:19:
                    6c:9d:f7:2c:e2:3f:01:9a:1a:e8:5b:c6:f1:db:29:
                    9f:ef:b2:d5:3f:b6:1d:17:b3:09:2f:ff:a1:f1:a5:
                    0a:3e:35:3e:00:74:ba:6e:1a:e0:ec:5d:71:72:c7:
                    3c:9a:61:97:9f:e2:61:06:87:41:6c:53:b8:db:57:
                    d6:09:c1:da:80:d5:52:3c:65:fe:db:d0:b4:47:6a:
                    9a:20:c7:04:a1:d6:62:38:ed:89:39:02:d4:1f:17:
                    1e:f5:4c:9b:90:fb:fd:55:ca:8d:a8:fb:ff:f1:e6:
                    80:97:01:8d:50:53:b6:ce:72:9e:eb:47:8c:6b:ea:
                    a8:4a:4e:11:08:c7:29:1f:57:e9:55:bb:72:95:d3:
                    9f:7b:16:8e:18:da:e3:0e:6f:c6:75:5a:14:05:52:
                    a9:33:ef:e9:e3:aa:8f:c7:fa:36:0b:f8:38:bb:52:
                    fc:41:2a:56:31:5d:8e:fe:fb:bd:12:51:df:72:13:
                    5d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:34:D2:43:EC:5E:54:61:97:F4:43:8F:84:27:D1:B5:93:E9:66:D4
            X509v3 Authority Key Identifier:
                keyid:26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/00E00D025BC711F0886C5B59C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:58:9d:e1:35:5a:aa:44:18:5d:51:86:1d:86:6d:59:12:89:
         1b:0f:66:b4:61:46:c4:f8:90:4f:4d:aa:a8:70:95:dc:27:44:
         b5:59:c8:28:07:7b:0d:a3:75:ee:9b:c3:c4:ec:d0:71:a7:1a:
         01:df:d7:99:d1:90:8d:53:7a:48:62:27:ef:33:9f:99:fc:a6:
         14:98:14:bb:af:f9:16:b1:be:95:37:56:46:ea:d8:d9:36:a3:
         cc:fa:15:73:34:e1:bc:a2:2e:b3:cc:26:14:0b:36:45:0a:4e:
         e0:04:9b:33:8b:82:2c:57:e3:86:d5:30:22:e0:8f:15:c9:86:
         24:71:c6:72:28:4a:87:68:4c:f9:13:11:70:42:66:ba:f4:8c:
         34:35:ad:75:7e:78:b1:fc:eb:46:63:1a:bd:fd:50:c8:05:96:
         15:66:1c:e2:25:3a:9b:cd:2f:6f:48:30:53:89:51:76:a7:fb:
         51:ce:6c:07:8a:de:88:13:5b:21:bd:15:9a:46:71:dc:44:d5:
         83:35:a0:0f:d7:2c:03:08:6f:e1:ef:61:15:33:5d:b9:ab:96:
         0c:88:8b:0d:8c:fc:4d:f2:69:d2:e9:82:d8:b9:41:b2:e3:17:
         9b:35:7b:ca:2f:f4:52:bf:2c:06:10:46:6b:65:75:bb:be:5b:
         a7:7f:1a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 10:48:34 2025 by rpki-client