Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7757272E260611EF94E5CC19C4F9AE02.roa
File:                     7757272E260611EF94E5CC19C4F9AE02.roa (raw, json)
Hash identifier:          oux8VwwsMaLdvNO7Fw5+fU0qCuMaybNT2ttgn/tYzrk=
Subject key identifier:   1B:37:A6:6B:88:27:5F:D9:D3:8C:9D:61:88:04:07:D5:20:2D:15:49
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       0678
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7757272E260611EF94E5CC19C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:50:58 +0000
ROA not before:           Thu 28 Aug 2025 14:50:58 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     149145
IP address blocks:        160.19.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 14:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1656 (0x678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:50:58 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06cd2-8d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:53:b8:b1:b5:bc:54:18:53:30:4b:b7:01:7b:
                    40:08:01:c0:6c:24:05:08:8e:42:d6:19:45:57:8f:
                    85:a0:3e:60:ce:1b:d4:7c:c8:22:c5:fb:44:92:28:
                    9b:ef:ef:53:bf:d4:48:62:07:bb:38:ec:36:ca:7d:
                    b1:0a:94:36:c3:54:95:d1:e9:42:2b:03:b3:47:53:
                    e7:76:08:ba:e7:29:24:24:9d:79:da:d6:ac:50:fe:
                    5c:69:27:b8:a2:9e:96:06:86:6d:84:1e:8d:31:16:
                    6d:be:8a:3e:3a:56:ad:6d:ba:73:11:fd:9c:7e:38:
                    a1:8e:8c:4b:fa:3e:18:dd:82:14:54:68:64:b9:9c:
                    94:3f:dd:f4:b0:6f:c5:d6:a9:24:49:fb:34:25:c2:
                    8e:9f:49:df:68:58:51:3b:84:c6:9e:1a:d4:42:11:
                    40:0c:91:3f:62:cd:42:5c:da:89:d0:42:f6:d6:d0:
                    ce:bd:b2:6d:44:4b:de:dd:9b:c0:19:43:6c:56:5b:
                    50:bf:d7:0b:ca:dc:eb:45:36:0c:db:bb:bb:7e:be:
                    1a:f1:e5:a3:1c:79:3d:c6:6e:06:12:ba:97:3e:58:
                    9e:23:43:7a:de:50:18:1f:16:29:88:73:1b:84:62:
                    e3:69:c2:82:bd:7c:83:f8:33:d4:70:07:46:22:45:
                    6c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:37:A6:6B:88:27:5F:D9:D3:8C:9D:61:88:04:07:D5:20:2D:15:49
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7757272E260611EF94E5CC19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:5b:25:d2:b2:85:f8:8a:e4:78:76:e6:73:07:5c:b5:35:46:
         8d:a1:f4:8c:c9:99:9a:ea:ef:f2:6c:10:a0:75:c1:8d:81:44:
         78:d7:67:d7:9f:5f:6f:b7:bc:56:64:57:5d:0b:4f:da:8b:ee:
         bb:e7:bd:67:c5:6e:12:a2:f0:d9:1c:7b:21:8e:00:54:06:53:
         20:a0:c6:57:dc:48:57:d2:3d:a3:f8:46:68:e3:63:f7:2a:74:
         15:75:ac:8c:dd:e8:f5:67:2a:db:3e:60:60:90:d4:5f:55:83:
         f0:26:13:98:43:c2:09:2d:2d:6f:d0:c9:37:76:45:61:0c:a6:
         4c:b7:de:4e:68:e1:c3:7f:e7:88:bb:dc:90:9e:ed:5a:e3:44:
         3d:14:be:4f:f5:3a:03:0d:90:d4:ae:16:d5:4c:7b:28:9a:a5:
         40:ab:5f:26:14:8b:7b:17:7a:6d:b4:14:15:86:2a:a7:a7:f6:
         09:e2:bb:58:8f:a8:cf:32:7a:55:1a:48:fd:84:98:8a:b8:8c:
         c9:b6:a9:00:e0:5d:3f:ce:4b:e4:4b:9a:9a:7d:25:44:d0:9e:
         a5:5b:21:e1:a2:95:f3:50:3d:5a:55:0d:d1:9d:9c:82:c0:af:
         5d:19:00:33:b6:1e:9f:da:49:ba:fc:15:22:90:10:e0:16:8c:
         14:2c:fe:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 00:35:04 2025 by rpki-client