Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/8F80C48E531211EFAB0B8726C4F9AE02.roa
File:                     8F80C48E531211EFAB0B8726C4F9AE02.roa (raw, json)
Hash identifier:          qqwKlPG3HHIO/Ni46rjsjHo2nk3zj0h/n5n+UQCKPlo=
Subject key identifier:   AE:81:7A:12:7C:3D:A2:3C:7E:A1:16:6F:1B:42:B7:36:9E:B1:93:F0
Certificate issuer:       /CN=A912FCBB/serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2
Certificate serial:       D0
Authority key identifier: BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/8F80C48E531211EFAB0B8726C4F9AE02.roa
Signing time:             Wed 03 Sep 2025 06:27:44 +0000
ROA not before:           Wed 03 Sep 2025 06:27:44 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     133051
IP address blocks:        160.30.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl
                          rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 06:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FCBB, serialNumber=BE91C05E218C7E66EA6F94F9D24577704191BDE2
        Validity
            Not Before: Sep  3 06:27:44 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b7dfe0-c0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:5a:0b:cc:d4:b5:aa:65:7c:be:62:67:65:
                    34:27:18:6d:28:f9:04:bb:9e:a5:c0:4a:3f:b8:47:
                    fe:bd:68:b7:7f:bc:46:c3:f3:0f:45:8c:1a:fc:07:
                    77:8f:0b:44:c7:13:b3:44:67:80:8e:b2:27:f2:f2:
                    9b:a4:53:99:10:d1:88:c2:a7:a7:a0:31:2e:98:4b:
                    74:9e:4f:5b:53:b2:3f:fc:9d:5a:98:fb:00:16:61:
                    d3:c2:4f:37:b0:dc:92:c0:f8:51:a5:4e:d7:f5:e5:
                    ce:aa:7e:28:5d:cf:66:d6:e7:39:22:4b:1e:f0:f6:
                    52:34:65:9b:e6:03:0e:2f:a5:d7:2e:86:b0:03:f1:
                    50:f7:82:f4:90:4b:11:3c:06:b4:1a:7e:bb:3b:bb:
                    4a:e5:15:8f:00:b6:17:58:68:3c:86:92:9c:ec:bc:
                    e0:56:d7:b7:d2:92:44:f8:50:ed:58:99:4a:6f:4a:
                    f2:9a:97:86:36:b9:ff:bc:45:97:12:26:e6:ac:84:
                    8d:0f:44:56:d0:9a:62:ad:23:35:d1:b6:16:13:8b:
                    92:41:7e:83:34:93:f2:f8:93:10:cd:41:49:f5:30:
                    d0:f2:8f:6a:e1:cc:fb:8a:a4:41:da:25:3d:f4:85:
                    57:47:b8:db:05:e8:b2:5d:2d:b8:d1:5f:af:da:b7:
                    b9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:81:7A:12:7C:3D:A2:3C:7E:A1:16:6F:1B:42:B7:36:9E:B1:93:F0
            X509v3 Authority Key Identifier:
                keyid:BE:91:C0:5E:21:8C:7E:66:EA:6F:94:F9:D2:45:77:70:41:91:BD:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/vpHAXiGMfmbqb5T50kV3cEGRveI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vpHAXiGMfmbqb5T50kV3cEGRveI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/54D23F46530F11EF99C88D0FC4F9AE02/8F80C48E531211EFAB0B8726C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:89:43:8a:ba:51:fa:de:12:b4:09:39:72:e6:36:7a:34:43:
         8b:fc:59:e1:f4:c0:8a:7f:3e:7b:50:52:3d:96:0a:61:06:fc:
         c9:08:c6:a4:19:6d:9d:ae:25:e7:41:32:6d:8e:21:72:b4:f5:
         06:8d:bc:47:a0:45:86:04:d6:16:f9:27:ad:79:d8:36:d6:98:
         e4:cc:9f:50:34:46:1b:8c:e5:a6:f4:14:1c:a8:b7:b8:51:5c:
         af:42:47:03:95:a4:f0:67:76:82:1e:96:4a:2c:35:fe:e2:69:
         c0:dd:eb:27:3f:1e:77:cd:94:0b:13:82:01:8b:87:aa:be:94:
         0b:8a:62:55:b1:ba:3b:65:9a:cd:ba:e9:df:b1:c0:74:db:f5:
         15:0a:02:7d:84:8e:83:0e:a1:c7:63:2b:aa:41:4e:02:5f:1c:
         d6:77:34:c4:85:b2:8e:c7:26:55:08:a1:0a:8c:ea:af:14:e6:
         af:a3:3d:ef:d4:3c:4b:48:38:45:8f:64:e3:cf:ba:30:6f:b5:
         39:33:f2:b8:c8:8d:18:06:e0:fd:64:84:bd:d7:d9:c3:25:1a:
         cb:29:11:7d:92:6a:5d:01:c3:0d:96:40:2f:1d:6d:9c:05:dc:
         61:36:f0:04:5c:65:b0:37:03:48:54:c4:54:ff:97:e9:2b:8d:
         48:75:df:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 19:29:42 2025 by rpki-client