Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F05801E2872711F0913B9D7CC4F9AE02.roa
File:                     F05801E2872711F0913B9D7CC4F9AE02.roa (raw, json)
Hash identifier:          xoF8LTFcEvD+VUOcm/CVQ5R7CLzs0DgdpdNIWCO0nVM=
Subject key identifier:   A6:49:B7:1A:DD:3C:1F:3F:01:69:A6:03:B1:B7:69:01:58:69:50:10
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1F7E
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F05801E2872711F0913B9D7CC4F9AE02.roa
Signing time:             Mon 01 Sep 2025 11:36:45 +0000
ROA not before:           Mon 01 Sep 2025 11:36:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133311
IP address blocks:        160.22.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8062 (0x1f7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Sep  1 11:36:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68b5854d-6069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ac:78:81:73:54:d1:77:27:92:74:8c:67:8e:
                    da:5b:91:5b:a9:64:4a:25:d0:e9:2f:9c:79:f8:1f:
                    dd:88:9b:a3:bc:1c:57:49:db:b3:9e:ce:f4:24:dd:
                    f1:d4:d2:3c:6f:32:0f:36:a9:c9:24:14:89:15:48:
                    6a:0f:b9:9c:0f:d9:f0:59:d9:49:1b:7e:26:33:1e:
                    89:cb:71:99:8d:a6:d8:d1:45:7e:36:0a:74:5b:b2:
                    8b:80:3e:3d:8a:d7:8c:52:59:89:27:46:19:99:c8:
                    46:43:ba:ec:a2:d2:6c:05:0d:54:56:b8:a4:53:31:
                    34:8a:df:d5:fd:f4:f7:26:73:2e:d3:ba:85:a2:ff:
                    60:2d:90:f5:ad:f3:06:44:19:a9:a0:37:98:86:e0:
                    db:90:ae:31:83:ca:0e:e9:07:67:43:f4:68:a6:19:
                    0d:da:0e:3c:d1:6c:29:aa:8e:00:a1:b3:5a:54:cd:
                    87:6b:eb:36:4e:9b:14:ca:4d:64:29:32:e4:fe:e5:
                    c7:2d:0b:17:2d:31:35:4c:86:62:f4:15:20:f3:94:
                    ea:36:55:f4:e1:c8:02:02:c5:ac:a4:a9:92:a5:af:
                    f8:2c:96:e5:67:4f:78:72:02:81:c1:2c:85:70:a9:
                    6a:63:a6:32:48:90:a2:ae:81:61:b1:72:0c:e2:c1:
                    a1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:49:B7:1A:DD:3C:1F:3F:01:69:A6:03:B1:B7:69:01:58:69:50:10
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F05801E2872711F0913B9D7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:b1:81:8b:65:94:a2:03:1f:32:64:80:61:c9:c2:23:e9:99:
         aa:10:6c:a0:d0:69:06:07:86:9a:6a:2d:75:d5:4b:1c:63:77:
         70:03:33:99:74:44:97:7a:c8:2f:13:f2:1b:1f:51:50:1e:52:
         6e:20:3a:87:ca:62:ec:85:d1:ad:8f:aa:de:a7:b8:e8:34:27:
         e2:c8:42:8b:9d:30:17:75:d9:09:9c:08:b0:44:cf:f4:c3:85:
         e6:42:00:b6:3b:e9:d7:e3:03:72:5f:0e:55:b5:11:e6:09:cf:
         3d:97:4b:6c:28:e1:f7:b6:12:d5:2f:db:05:19:21:ba:ff:3d:
         55:83:78:9a:49:94:0b:ae:6d:ab:66:20:53:90:c1:88:83:24:
         60:cd:8e:70:6d:b0:a9:b0:ed:9e:3e:a6:f0:94:d4:e0:fa:43:
         a8:fb:ab:75:15:f2:0c:45:24:87:f7:20:31:e5:23:2a:af:f2:
         10:2e:50:c8:67:d1:8c:31:dc:91:b2:d7:62:c7:4a:d7:82:1f:
         ca:91:eb:4f:95:d5:30:34:e8:ff:51:a4:cf:40:f4:1f:58:5d:
         ee:7a:c7:1e:fd:d5:f5:ee:f2:d7:d3:15:70:3c:b1:26:41:41:
         71:26:29:4a:e4:02:fa:82:94:1e:f0:e7:da:b9:5c:3a:bf:3a:
         39:58:e5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 09:33:01 2025 by rpki-client