Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6CCA/1A7ADECA0F7011F09E2F7D1FC4F9AE02/A94836600F7111F08BC42022C4F9AE02.roa
File:                     A94836600F7111F08BC42022C4F9AE02.roa (raw, json)
Hash identifier:          P0ugR8U/wyMnqraRD80X5tdZACXWqmlF+Xy2XfETkeY=
Subject key identifier:   95:DE:E0:BA:7B:E0:BC:DE:4E:C0:63:66:9E:C2:5F:33:34:55:F9:AB
Certificate issuer:       /CN=A91E6CCA/serialNumber=A89D0FD4F48ABF694FD9DF7704E596464DED2179
Certificate serial:       38
Authority key identifier: A8:9D:0F:D4:F4:8A:BF:69:4F:D9:DF:77:04:E5:96:46:4D:ED:21:79
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJ0P1PSKv2lP2d93BOWWRk3tIXk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6CCA/1A7ADECA0F7011F09E2F7D1FC4F9AE02/A94836600F7111F08BC42022C4F9AE02.roa
Signing time:             Wed 09 Jul 2025 08:44:19 +0000
ROA not before:           Wed 09 Jul 2025 08:44:19 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     138975
IP address blocks:        160.20.118.0/23 maxlen: 23
                          160.20.118.0/24 maxlen: 24
                          160.20.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6CCA/1A7ADECA0F7011F09E2F7D1FC4F9AE02/qJ0P1PSKv2lP2d93BOWWRk3tIXk.crl
                          rsync://rpki.apnic.net/member_repository/A91E6CCA/1A7ADECA0F7011F09E2F7D1FC4F9AE02/qJ0P1PSKv2lP2d93BOWWRk3tIXk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJ0P1PSKv2lP2d93BOWWRk3tIXk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 07:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6CCA, serialNumber=A89D0FD4F48ABF694FD9DF7704E596464DED2179
        Validity
            Not Before: Jul  9 08:44:19 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=686e2be2-e151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:10:6c:38:dc:f6:11:7d:1f:ea:7f:b6:63:b8:
                    47:c8:8a:25:fb:66:f7:e4:95:d9:4b:36:26:be:91:
                    f2:9d:59:a4:fa:28:b2:42:dd:93:5d:02:1c:ea:d1:
                    46:0d:04:34:d5:f5:4a:71:be:ad:cc:e3:8b:1a:87:
                    0a:20:cc:a0:6a:ed:55:29:18:0c:f7:0a:ff:57:ca:
                    c4:3d:f0:ab:ea:32:d2:12:f1:fd:4b:89:04:df:1e:
                    73:87:48:6b:13:94:f7:33:62:d2:df:7e:8d:93:15:
                    07:8f:ba:3f:d0:47:e6:98:c8:00:c6:69:2d:4c:7b:
                    1f:22:39:b3:10:4b:83:de:0e:fd:cb:24:19:47:1a:
                    e7:43:a9:fd:8e:27:64:32:51:06:bc:5f:6b:0b:07:
                    c0:33:03:58:18:bb:fc:5b:3f:df:25:e4:cf:6c:13:
                    df:51:9e:1d:a8:5f:d8:14:a2:1c:41:70:fa:52:56:
                    da:f8:38:6e:b4:d2:61:55:fc:18:02:6b:89:b7:66:
                    5f:1e:cc:44:b1:33:df:b8:73:ed:15:64:d6:75:40:
                    d9:ef:da:b4:26:4c:24:12:41:e4:75:6c:4f:d4:2d:
                    23:54:73:47:b2:29:84:23:76:2f:b4:c3:8e:3a:98:
                    a1:75:09:56:03:a7:10:2e:6f:46:b8:59:2d:fd:e9:
                    a1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DE:E0:BA:7B:E0:BC:DE:4E:C0:63:66:9E:C2:5F:33:34:55:F9:AB
            X509v3 Authority Key Identifier:
                keyid:A8:9D:0F:D4:F4:8A:BF:69:4F:D9:DF:77:04:E5:96:46:4D:ED:21:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/1A7ADECA0F7011F09E2F7D1FC4F9AE02/qJ0P1PSKv2lP2d93BOWWRk3tIXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJ0P1PSKv2lP2d93BOWWRk3tIXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/1A7ADECA0F7011F09E2F7D1FC4F9AE02/A94836600F7111F08BC42022C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:32:43:4b:47:4d:32:ac:58:79:de:db:c0:34:d9:8e:40:4a:
         86:fc:c2:a9:ba:f5:e6:cd:1f:81:7f:48:e4:75:0d:a6:3d:92:
         59:1d:12:b0:46:47:06:2e:50:95:c3:1e:dd:26:09:02:13:71:
         2e:61:81:a4:2e:dd:01:51:b8:fa:21:e3:4f:2f:55:b3:0f:b1:
         e5:2f:52:b4:cc:5e:7f:9b:a9:ca:7f:81:5e:24:c2:e8:49:1d:
         1b:58:50:50:f8:6d:34:13:ce:fc:21:1e:09:0b:bf:35:36:e8:
         3a:b8:21:e3:00:8a:f7:80:98:e3:e4:de:c3:cf:70:a8:5d:bb:
         13:66:f8:3c:9a:93:59:c4:6f:cf:9b:81:ca:44:78:03:db:f6:
         0b:b8:59:37:ae:e2:cd:98:df:4f:60:0e:64:fa:fb:d6:31:31:
         a3:28:58:cc:01:e4:d7:2d:16:45:0c:fe:e5:c3:6a:9d:e4:d1:
         4e:e4:cc:c8:60:4d:d0:04:e5:e9:a5:13:ab:81:a2:ef:86:95:
         c7:98:ef:10:de:72:56:6d:df:9c:b2:89:c6:53:d3:b6:e4:eb:
         8c:91:98:73:b9:b1:bf:b6:03:f0:4b:67:33:e2:b3:71:6a:cc:
         83:dd:30:7e:16:46:9c:36:86:46:e9:70:ba:88:5c:d8:2e:2f:
         e2:16:8a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 23:26:09 2025 by rpki-client