Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/AC0031765B6E11EF997EC429C4F9AE02.roa
File:                     AC0031765B6E11EF997EC429C4F9AE02.roa (raw, json)
Hash identifier:          SUsUIXE/tKa73O2xJJTZ5W41hRd+PFlpRhUTlZjlrnU=
Subject key identifier:   97:24:39:C2:EC:4C:48:F1:5A:0C:46:28:7F:94:52:65:A3:8B:E1:6C
Certificate issuer:       /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial:       3500
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/AC0031765B6E11EF997EC429C4F9AE02.roa
Signing time:             Fri 04 Jul 2025 14:50:17 +0000
ROA not before:           Fri 04 Jul 2025 14:50:17 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152213
IP address blocks:        160.30.106.0/24 maxlen: 24
                          160.30.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 14:22:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13568 (0x3500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
        Validity
            Not Before: Jul  4 14:50:17 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6867ea29-9e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:26:b8:e2:ff:ab:31:f8:0a:f0:cb:83:2b:
                    5e:fc:13:e4:10:00:17:b9:ed:78:7d:38:f9:d9:30:
                    1a:b9:09:c4:a2:40:f4:ed:1e:95:3f:be:5d:e1:5a:
                    30:b2:db:f5:db:b9:2b:d6:c2:5f:07:a5:4f:46:a7:
                    be:ba:5b:5f:ab:aa:63:cc:1b:7e:07:bf:96:5c:e8:
                    9c:30:cc:95:ec:57:e7:53:f4:06:17:f9:2c:10:1d:
                    41:52:de:67:85:77:54:0f:ec:4c:dd:07:0e:ad:d2:
                    d0:31:44:b6:1f:1f:f5:7e:b8:5d:28:28:1b:ba:dc:
                    c7:cf:c9:f9:59:53:3b:17:68:09:c6:99:d5:3a:5d:
                    99:50:b5:b2:fa:1f:bd:db:27:a4:06:7c:67:1d:05:
                    a5:66:db:68:c0:52:4a:a4:1e:33:4c:1f:14:72:f3:
                    1d:fe:84:a9:18:81:78:4d:72:bd:9e:8d:f7:4e:7e:
                    49:c7:b7:06:36:3b:7b:07:0f:89:b0:3d:c1:f7:a7:
                    16:d9:10:87:5e:30:2e:39:88:eb:0e:26:91:3f:de:
                    19:82:2e:0d:ec:fb:9f:16:bf:87:19:f6:57:f5:11:
                    40:45:eb:52:9a:26:80:f0:36:f3:62:a7:a2:5a:85:
                    4c:2e:6b:d3:af:4b:bc:29:7d:3e:95:7a:5a:9c:22:
                    fe:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:24:39:C2:EC:4C:48:F1:5A:0C:46:28:7F:94:52:65:A3:8B:E1:6C
            X509v3 Authority Key Identifier:
                keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/AC0031765B6E11EF997EC429C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:2d:3a:80:d3:f5:4e:0a:ae:32:9f:bb:f3:31:fb:4e:cd:bd:
         e2:5a:9f:55:b8:3f:45:ee:45:59:35:7b:9e:6a:1d:aa:c1:1b:
         40:df:33:3b:bd:84:1c:42:3a:15:89:d1:af:1b:37:e0:60:2c:
         bf:33:b9:bc:ba:c7:d8:65:2b:d2:98:93:f4:9e:da:01:78:e6:
         82:a3:ae:96:ba:33:69:d8:67:61:3e:ec:4b:6e:33:90:8d:d3:
         80:bb:70:5a:0a:f8:32:b9:b9:aa:d6:26:93:cd:c9:a1:70:44:
         e7:0a:84:ef:90:66:d4:bd:12:a5:9d:52:fc:ab:ee:8c:09:10:
         ed:cf:94:ee:8f:41:47:3d:f0:be:1b:87:3a:db:96:f5:96:35:
         57:8e:3c:59:5c:3d:92:72:76:25:6f:0b:40:97:23:29:06:49:
         00:35:39:27:2f:1b:c4:09:d2:fa:15:b2:1c:8e:c3:e3:20:60:
         11:15:96:ae:2f:51:a7:28:7a:51:1d:e1:42:fc:c7:6e:a2:30:
         41:cf:46:52:35:63:0e:28:77:c5:2c:6f:57:8a:b3:cd:34:03:
         4a:01:46:60:c1:41:d0:9a:1b:00:6f:6a:62:75:17:a0:55:45:
         30:bf:d5:18:66:c1:85:bb:88:ea:e5:df:ec:e1:bf:02:5d:aa:
         ba:f3:f9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:38:55 2025 by rpki-client