Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/D4BAE68E853311F0AC0D4852C4F9AE02.roa
File:                     D4BAE68E853311F0AC0D4852C4F9AE02.roa (raw, json)
Hash identifier:          JKusbC5VvwUuAdGYiNShuHqXM4sIB8wqjTbQ4/y/qsw=
Subject key identifier:   67:F4:B6:80:42:91:E3:9A:99:02:7C:8A:91:B4:52:AF:6C:6A:D1:1E
Certificate issuer:       /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
Certificate serial:       BD
Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/D4BAE68E853311F0AC0D4852C4F9AE02.roa
Signing time:             Fri 29 Aug 2025 23:56:51 +0000
ROA not before:           Fri 29 Aug 2025 23:56:51 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     141342
IP address blocks:        160.30.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl
                          rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 06:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6
        Validity
            Not Before: Aug 29 23:56:51 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68b23e42-d5aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6b:cf:cc:88:c3:f8:88:b5:2f:3d:ff:73:1f:
                    65:13:b9:74:79:e3:4f:a2:08:71:65:0c:b7:6f:65:
                    6e:5d:67:51:bd:f6:e1:04:05:9e:20:db:2b:1d:e7:
                    49:ca:24:80:ba:e0:d0:c6:5e:46:6a:5d:a3:80:16:
                    d3:f9:fc:f9:f8:9e:5b:c8:f2:94:c3:7d:dc:f8:19:
                    59:f7:d9:ab:6e:4c:d2:26:d6:21:58:8b:40:68:1e:
                    67:00:ba:5a:51:a4:94:72:87:d5:f8:c5:2c:88:53:
                    e2:20:45:10:90:6a:06:02:43:c3:f6:c8:ce:69:b8:
                    73:5a:de:71:0b:10:4b:f1:5c:b9:30:4b:09:6b:dd:
                    7d:da:dd:45:b3:96:b7:0b:76:b8:a2:7a:10:e8:c3:
                    46:25:32:9d:e9:64:d3:31:c9:75:a4:f4:71:a9:de:
                    08:8c:05:28:bb:63:54:9f:46:77:26:73:54:69:00:
                    1b:12:85:a1:30:df:d8:8f:fe:18:9a:57:06:dd:a8:
                    fc:3e:c1:04:40:80:15:26:fd:33:1a:af:8d:61:da:
                    92:e3:b3:ae:0e:ed:65:cf:ef:23:68:53:d5:28:20:
                    3a:29:de:56:61:c7:2d:fb:cc:20:5f:0a:35:08:ea:
                    ca:c7:cd:ff:f8:3a:64:51:b0:00:34:32:a5:9a:1a:
                    4d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F4:B6:80:42:91:E3:9A:99:02:7C:8A:91:B4:52:AF:6C:6A:D1:1E
            X509v3 Authority Key Identifier:
                keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/D4BAE68E853311F0AC0D4852C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:e1:e4:34:0b:de:48:05:f8:c1:5f:59:66:14:03:0b:96:dd:
         68:dc:3e:33:76:39:ff:8a:10:dc:4d:88:d1:be:69:26:4c:57:
         e4:55:1b:d2:d7:c9:24:1a:86:89:b5:77:5b:01:23:2a:a1:ef:
         de:e4:0c:77:5c:e9:28:5a:d7:45:8a:74:ec:e8:8c:c7:a4:a6:
         a7:b8:04:1e:16:9b:d9:be:48:59:ff:06:dc:bb:d2:f7:db:ea:
         07:af:65:89:6f:b0:88:87:5a:46:3c:e0:ad:66:1d:78:76:96:
         b9:10:0e:b6:d8:ed:85:07:c3:0b:31:33:d5:19:a0:4e:c3:7f:
         5e:98:83:22:05:ba:be:a9:72:f1:4f:02:cb:17:6d:54:30:48:
         00:65:cd:1d:b9:63:19:3c:29:8a:c7:a9:66:df:b5:90:8d:7f:
         28:25:04:01:02:3f:68:0a:23:b1:91:95:e8:84:69:54:4c:99:
         e6:cd:9b:c3:ca:a9:c4:e5:c5:44:a6:59:3c:a2:dc:73:2e:f5:
         d7:37:46:e3:c0:da:5d:53:00:88:f5:34:b2:5b:34:ea:c9:f4:
         24:de:4a:91:56:c9:35:aa:aa:cb:76:28:0f:e3:99:e7:18:8e:
         7d:22:7e:c2:91:f9:ec:b0:a4:29:19:55:25:50:17:e3:ac:6c:
         32:38:c2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 00:32:34 2025 by rpki-client