Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/C869343A5FE011F0ABA4A158C4F9AE02.roa
File:                     C869343A5FE011F0ABA4A158C4F9AE02.roa (raw, json)
Hash identifier:          1m3AATxdBvNaAbP3EbhkZoZi/9NKKO+rrYQbsiCKglc=
Subject key identifier:   C0:69:69:B1:24:AD:B3:58:BA:DB:16:E6:2B:4A:6A:2E:30:C3:8A:38
Certificate issuer:       /CN=A91430D6/serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523
Certificate serial:       02
Authority key identifier: AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/C869343A5FE011F0ABA4A158C4F9AE02.roa
Signing time:             Sun 13 Jul 2025 11:59:09 +0000
ROA not before:           Sun 13 Jul 2025 11:59:09 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153800
IP address blocks:        165.101.168.0/24 maxlen: 24
                          165.101.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl
                          rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 08:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91430D6, serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523
        Validity
            Not Before: Jul 13 11:59:09 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68739f8d-5a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c3:fb:5c:01:e1:75:1d:30:7b:9f:05:5f:f8:
                    45:2c:b4:04:53:20:1f:41:da:95:d6:23:1f:ff:31:
                    03:80:63:d2:8f:b4:2d:dd:38:57:06:a3:7f:95:34:
                    25:c8:00:2d:15:7f:af:55:15:84:0a:6c:c6:47:ba:
                    58:b7:5d:c5:6b:05:b7:9b:ae:9c:f2:83:e8:62:38:
                    b2:b5:cb:d4:c6:57:6d:36:f7:80:08:1d:7d:a4:e0:
                    ae:4d:60:61:4a:22:78:29:81:9b:26:2c:98:e5:7b:
                    6a:27:85:bd:77:11:e4:ae:33:95:12:6c:b1:28:c2:
                    0d:f7:fc:02:06:b7:3e:3d:4e:79:93:1a:03:00:c1:
                    a9:37:41:26:f4:b7:e8:b0:1d:96:ca:3c:d3:d8:6c:
                    3f:e8:ef:2b:d0:a4:17:bb:55:d3:38:f6:1f:4d:68:
                    d1:50:c5:3e:bb:7a:57:33:7a:38:1b:c0:ca:4f:6d:
                    bf:0f:69:55:49:9d:0f:67:07:0b:6d:b7:8a:52:20:
                    7d:aa:e7:a8:cb:43:9d:05:cd:9b:52:dc:1d:05:40:
                    ed:27:a2:a4:ed:b4:d9:83:81:f6:f5:f9:9c:05:02:
                    9c:fd:4e:20:03:35:85:ba:e7:1a:7d:ac:d4:b8:e3:
                    76:2d:38:cd:86:dd:66:a1:bc:d1:f4:4a:a7:48:53:
                    4a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:69:69:B1:24:AD:B3:58:BA:DB:16:E6:2B:4A:6A:2E:30:C3:8A:38
            X509v3 Authority Key Identifier:
                keyid:AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/C869343A5FE011F0ABA4A158C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:4b:03:46:57:8b:23:fa:4b:37:5e:47:c7:53:3c:90:32:6b:
         fa:04:2c:87:20:44:2e:9a:f3:98:da:01:74:33:82:f6:57:5d:
         0b:7f:d8:17:0c:71:f3:c5:4e:ae:87:2c:65:d4:d8:b1:a0:ff:
         60:89:28:e0:6a:e7:f3:26:6e:eb:00:a1:bf:26:2c:27:05:fb:
         c6:6f:b5:6a:bb:4d:ba:8c:c9:38:92:2e:2d:a7:86:a7:9a:27:
         04:12:10:f0:0b:ca:2b:d2:da:c8:ca:ee:8f:55:66:5b:d4:c5:
         f1:cf:15:99:53:bb:cd:c5:88:23:37:fb:17:21:e8:94:de:6a:
         99:b9:bb:f6:58:53:55:5d:b0:ab:61:01:f0:1f:73:33:89:a6:
         46:d2:05:49:d8:f3:f5:81:db:17:d8:52:03:aa:9b:92:d6:6f:
         28:43:92:bd:60:b7:73:72:e2:86:d4:c7:3a:d0:ee:44:80:b7:
         09:a5:51:ae:eb:69:14:0b:8f:1f:ce:cf:80:68:22:16:86:73:
         9d:6f:c8:e1:57:9a:36:25:fa:60:05:d8:88:97:f1:28:db:89:
         06:be:0a:1e:40:95:89:dc:db:62:94:8d:75:d0:ae:0b:9f:3f:
         31:c7:6e:6f:52:65:07:90:3a:21:9c:1f:e2:31:79:03:39:55:
         c5:d9:3b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:43:53 2025 by rpki-client