Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0095C4A6795811EF9834565CC4F9AE02.roa
File:                     0095C4A6795811EF9834565CC4F9AE02.roa (raw, json)
Hash identifier:          3TLDyi28eSblBONER29U8OsSiQyn9PG0BdBrdhoqSu0=
Subject key identifier:   18:50:8D:98:DB:86:5D:10:07:6E:44:85:A2:EF:49:59:7D:53:38:77
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       069D
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0095C4A6795811EF9834565CC4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:51:31 +0000
ROA not before:           Thu 28 Aug 2025 14:51:31 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152976
IP address blocks:        160.30.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 14:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1693 (0x69d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:31 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06cf2-f8c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e0:8e:c4:37:e8:94:b3:25:3d:ed:c3:58:4d:
                    7a:51:ff:bb:00:89:03:b0:eb:b6:5b:84:1b:13:19:
                    f8:7a:11:c3:63:0d:3d:1d:ca:87:86:76:18:c0:d5:
                    68:ed:fa:ee:68:89:0f:fa:8d:26:e5:6f:77:a9:cf:
                    87:a9:86:ed:82:e9:79:9e:a5:2a:ef:94:66:a6:f0:
                    44:34:ec:bd:00:fc:a0:76:a0:44:30:82:7e:6d:24:
                    b5:65:9f:aa:0a:de:e5:88:3b:1e:f5:bb:41:b4:d8:
                    1c:c2:41:ee:cf:96:ba:02:49:8f:46:ee:62:f3:97:
                    bb:30:57:2e:d9:48:37:ff:48:3c:a1:3e:e8:1e:f5:
                    ca:9c:81:ec:dc:eb:ed:ba:b2:d4:8b:8f:1b:6e:a9:
                    c6:ee:08:f6:f3:38:33:8b:ef:aa:52:f2:76:57:8c:
                    ec:b6:4e:38:a6:b1:7d:29:34:1e:4e:80:05:5f:96:
                    2f:93:81:09:fc:81:d6:57:6f:8a:90:29:ef:17:d8:
                    b0:9f:38:55:6d:b4:e0:5e:8b:4d:6e:ca:07:e3:d2:
                    c6:9c:f8:f4:95:d3:97:b5:03:61:3e:8d:26:7c:30:
                    ee:00:0c:97:f5:b4:a4:7a:0b:19:b3:76:2a:d9:4a:
                    cd:43:da:55:71:9a:a4:4d:34:03:a2:7d:f1:37:52:
                    02:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:50:8D:98:DB:86:5D:10:07:6E:44:85:A2:EF:49:59:7D:53:38:77
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0095C4A6795811EF9834565CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:94:ec:93:91:20:23:94:24:c2:fc:ab:4f:d4:b3:32:3b:89:
         1e:af:77:f0:87:8e:06:92:8a:a2:8c:82:6a:64:74:d7:8b:b2:
         49:d7:97:ad:64:fe:2b:7c:c2:12:61:4f:bb:36:63:e8:88:86:
         04:87:97:2d:23:f7:98:5f:d9:0c:db:e8:db:ef:44:e2:08:41:
         3f:fb:54:c7:0f:fb:33:95:60:23:43:2b:aa:d7:ce:88:58:1a:
         55:10:08:61:66:b7:19:cc:77:b5:2f:a3:0d:ff:b6:0c:9f:3f:
         96:5a:8a:a1:d5:6c:57:26:df:8c:90:62:81:92:d7:9e:27:02:
         0c:a5:9d:cf:71:a0:74:df:c6:3d:30:21:99:71:47:5c:9b:88:
         be:aa:ac:b5:09:42:69:df:c5:4a:21:4b:ef:a2:92:f6:50:92:
         92:2b:7f:8f:87:04:c3:2c:d6:ff:59:f7:2a:ab:e5:ef:e6:9b:
         7e:42:ef:c2:52:25:47:70:0c:fd:02:11:53:b4:f5:8b:0e:50:
         63:90:83:e0:87:a9:57:59:87:cf:ed:db:b1:fd:87:6e:6c:5b:
         ec:dd:78:b1:a2:32:91:c1:c5:ab:7f:47:cb:2b:17:25:00:e6:
         7f:93:7e:da:62:e9:71:eb:76:dd:85:85:b6:6e:33:51:73:d5:
         00:fd:fb:a6
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjUwODI4MTQ1MTMxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGIwNmNmMi1mOGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3eCOxDfolLMlPe3DWE16Uf+7AIkDsOu2W4QbExn4ehHDYw09HcqHhnYYwNVo
7fruaIkP+o0m5W93qc+HqYbtgul5nqUq75RmpvBENOy9APygdqBEMIJ+bSS1ZZ+q
Ct7liDse9btBtNgcwkHuz5a6AkmPRu5i85e7MFcu2Ug3/0g8oT7oHvXKnIHs3Ovt
urLUi48bbqnG7gj28zgzi++qUvJ2V4zstk44prF9KTQeToAFX5Yvk4EJ/IHWV2+K
kCnvF9iwnzhVbbTgXotNbsoH49LGnPj0ldOXtQNhPo0mfDDuAAyX9bSkegsZs3Yq
2UrNQ9pVcZqkTTQDon3xN1IC4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFBhQjZjb
hl0QB25EhaLvSVl9Uzh3MB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvMDA5NUM0QTY3
OTU4MTFFRjk4MzQ1NjVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGgHpowDQYJKoZIhvcNAQELBQADggEBALGU7JORICOUJML8
q0/UszI7iR6vd/CHjgaSiqKMgmpkdNeLsknXl61k/it8whJhT7s2Y+iIhgSHly0j
95hf2Qzb6NvvROIIQT/7VMcP+zOVYCNDK6rXzohYGlUQCGFmtxnMd7Uvow3/tgyf
P5ZaiqHVbFcm34yQYoGS154nAgylnc9xoHTfxj0wIZlxR1ybiL6qrLUJQmnfxUoh
S++ikvZQkpIrf4+HBMMs1v9Z9yqr5e/mm35C78JSJUdwDP0CEVO09YsOUGOQg+CH
qVdZh8/t27H9h25sW+zdeLGiMpHBxat/R8srFyUA5n+Tftpi6XHrdt2FhbZuM1Fz
1QD9+6Y=
-----END CERTIFICATE-----
Generated at Sun Sep 7 00:33:16 2025 by rpki-client