Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/16B4A78CA40B11F089BAB06CC4F9AE02.roa
File:                     16B4A78CA40B11F089BAB06CC4F9AE02.roa (raw, json)
Hash identifier:          VPaGjYCY/yBPqdHyuHravwWJ2fLNhQCH9lpAYkaXN4s=
Subject key identifier:   91:0A:B9:15:ED:0D:13:C2:9C:7D:2B:F8:1D:5C:55:DF:26:24:49:76
Certificate issuer:       /CN=A916E9E3/serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3
Certificate serial:       03
Authority key identifier: 00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/16B4A78CA40B11F089BAB06CC4F9AE02.roa
Signing time:             Wed 08 Oct 2025 05:53:18 +0000
ROA not before:           Wed 08 Oct 2025 05:53:18 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     152098
IP address blocks:        155.35.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl
                          rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 11:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E9E3, serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3
        Validity
            Not Before: Oct  8 05:53:18 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68e5fc4e-2b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e2:8f:22:0c:d9:8a:9e:0f:d2:70:3d:67:c8:
                    c0:7a:f5:01:7a:b2:58:4a:3e:d9:02:83:81:11:b3:
                    c8:2d:ca:f5:5e:20:e2:41:6d:ca:b8:8d:3a:ec:dc:
                    ba:c0:22:cf:11:71:0f:57:b1:c1:aa:31:28:75:21:
                    e5:bc:2d:94:28:d6:e1:2d:36:09:2d:95:66:aa:2d:
                    6d:e1:37:e7:96:36:c3:c0:a2:2e:a1:77:60:ff:c8:
                    d6:9b:a9:d5:76:b1:75:f2:35:6c:69:76:6e:c3:64:
                    69:52:a2:05:ee:f9:7f:54:ac:d1:62:dd:76:56:68:
                    1e:27:11:e4:ea:fe:79:83:49:8f:d2:63:35:fa:ac:
                    77:38:29:2c:88:9d:be:48:91:6b:e0:52:d8:14:19:
                    d7:df:3d:1e:a0:bd:ce:5c:47:ee:7f:93:ca:44:fc:
                    91:51:07:bb:7e:4e:62:17:fa:fa:bb:f2:ba:cb:b3:
                    73:d6:0a:7f:a4:3f:d3:08:8d:0d:c8:2e:30:5a:08:
                    ce:30:05:d8:c5:14:38:4f:17:50:c0:4e:35:1c:82:
                    01:e7:17:1d:03:ee:8f:b9:4f:98:92:59:ef:07:a0:
                    87:09:96:56:16:2f:cf:e3:78:c1:b2:b4:0b:c2:0c:
                    36:e4:ba:10:01:e0:3c:b2:46:89:40:63:f9:9d:37:
                    2e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0A:B9:15:ED:0D:13:C2:9C:7D:2B:F8:1D:5C:55:DF:26:24:49:76
            X509v3 Authority Key Identifier:
                keyid:00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/16B4A78CA40B11F089BAB06CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.35.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:d4:3b:b9:67:2d:6e:3e:0f:c5:25:1a:11:a9:b9:76:32:42:
         8e:8f:62:f1:45:93:ec:64:2b:c5:61:9d:0e:ee:60:f4:b0:2d:
         d0:c4:b5:20:bb:cc:7a:f4:01:e7:fd:d3:69:4e:18:39:c8:65:
         59:1e:9d:2b:1c:f5:ac:ce:77:c1:43:cb:12:f2:f2:80:4e:6c:
         40:da:3e:3a:c3:6a:52:4e:36:c4:c1:45:ad:29:09:53:41:67:
         38:5a:eb:23:7a:9d:be:04:19:36:8a:d7:0f:ff:dc:76:f0:c0:
         c5:04:39:93:53:3d:da:e4:7a:bb:49:8b:dd:55:99:91:72:58:
         24:e4:00:ba:7b:65:2e:46:28:b0:df:65:b0:45:ce:e8:65:40:
         77:7f:94:1c:ca:91:06:28:bc:fc:7b:53:b0:d8:1e:d1:37:76:
         f4:9b:86:28:ff:7c:f3:4f:dd:06:63:bd:24:76:a7:c5:c2:38:
         9f:59:95:4c:b2:32:77:a0:28:83:4a:4f:f1:73:0d:ee:7a:d6:
         b4:20:3d:db:8e:48:d2:d6:38:d2:c9:b7:15:24:af:ea:58:56:
         1a:bc:ba:1d:e2:ba:d0:29:6c:76:62:00:ba:a8:47:e5:b6:cf:
         e2:c1:46:48:bf:be:f4:15:33:ef:67:fc:db:76:b8:b4:2b:dd:
         bb:e6:dd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 01:31:56 2025 by rpki-client