Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/836F847C340011EFA88BE541C4F9AE02.roa
File:                     836F847C340011EFA88BE541C4F9AE02.roa (raw, json)
Hash identifier:          C6HUwf1FQ1jXt6f1hhjL5V8WYMVbIiest2VH946jwa4=
Subject key identifier:   64:58:CF:4E:D6:3F:C6:4D:C3:B9:97:42:75:4F:37:39:04:1C:14:44
Certificate issuer:       /CN=A91334F0/serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
Certificate serial:       C6
Authority key identifier: 13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/836F847C340011EFA88BE541C4F9AE02.roa
Signing time:             Tue 15 Jul 2025 06:12:48 +0000
ROA not before:           Tue 15 Jul 2025 06:12:48 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     152899
IP address blocks:        160.22.52.0/24 maxlen: 24
                          160.22.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl
                          rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 05:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91334F0, serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
        Validity
            Not Before: Jul 15 06:12:48 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6875f160-b153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:78:c7:19:b3:f4:9a:7e:02:4c:44:16:7a:6f:
                    39:ad:3b:51:63:35:4e:6c:10:1f:a8:62:d5:2a:eb:
                    13:31:12:46:21:1a:63:b3:16:29:9d:27:63:3a:f4:
                    0e:ff:22:60:a1:05:6a:15:c7:b9:35:7d:54:26:82:
                    cf:55:5e:a8:96:47:16:f5:d5:25:ea:23:8b:ba:30:
                    01:f5:a5:e4:bf:41:a2:8f:aa:59:4c:23:48:7b:cb:
                    df:73:f2:5a:01:a7:e8:25:db:e9:2b:62:ad:41:aa:
                    71:26:a5:57:78:ad:03:c0:e8:55:33:5c:cb:31:1c:
                    28:8b:87:df:19:e8:07:a1:08:6f:e7:92:7f:81:40:
                    69:db:4b:8c:6b:a0:16:fc:89:47:a6:c2:aa:1c:02:
                    87:d0:97:fe:f8:50:96:71:60:ca:e8:2b:10:5d:71:
                    c4:69:4a:50:15:f1:9b:0c:86:13:a3:57:d9:c6:51:
                    c7:9a:d8:24:21:49:8d:23:f4:c3:6e:d4:ad:fa:aa:
                    19:ed:84:f1:c6:c0:94:3f:2c:59:a5:0c:f8:7d:31:
                    2f:61:72:b9:72:82:55:13:cc:8e:0c:c8:2f:41:13:
                    78:cb:12:a2:4e:c6:72:4c:1f:7e:5a:9f:9d:92:19:
                    81:34:be:52:dc:05:63:3b:7f:55:50:c8:2c:1d:51:
                    0b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:58:CF:4E:D6:3F:C6:4D:C3:B9:97:42:75:4F:37:39:04:1C:14:44
            X509v3 Authority Key Identifier:
                keyid:13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/836F847C340011EFA88BE541C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:9b:b4:b8:91:08:aa:a3:51:b0:68:8e:87:75:ef:2f:99:39:
         86:3d:d9:27:54:65:9d:2e:dd:99:8f:d7:5b:9a:c7:38:f0:b9:
         31:47:40:44:5c:76:dc:95:fb:9c:4e:53:ab:c0:01:24:52:cb:
         a1:45:05:e3:d5:f0:0c:a1:b5:b7:a7:3d:33:79:c4:06:bb:13:
         04:97:a7:40:ff:21:8e:18:49:75:2f:d1:7e:35:58:c0:60:81:
         ad:78:65:20:4f:10:d6:1a:c5:f0:37:90:16:2d:d4:97:2e:70:
         87:69:60:66:9b:58:38:6a:56:88:4f:46:81:43:fc:8a:e5:80:
         b9:ed:2a:d1:0f:b8:07:e9:78:f4:c9:f2:c7:b9:18:fe:aa:40:
         15:54:d6:81:4b:57:e2:01:17:0d:78:4f:b9:88:c4:c2:f7:8d:
         19:7d:01:3b:01:00:b4:5b:55:86:b7:e4:bd:e5:24:e8:41:8c:
         0a:e4:c6:31:b7:ba:70:0e:42:3a:70:1f:9c:ff:92:5f:d8:a5:
         9e:4b:81:be:03:f6:47:88:f0:7c:a6:74:e5:2a:a5:51:33:27:
         6f:1f:22:22:5a:80:e9:ed:ae:16:8b:57:4d:fe:4d:e9:e3:33:
         7c:b4:9c:ab:a6:3c:59:31:6b:14:78:4e:33:ef:74:c5:ba:24:
         42:37:c2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:31:11 2025 by rpki-client