Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/85DC71023AA811F0A8FEC349C4F9AE02.roa
File:                     85DC71023AA811F0A8FEC349C4F9AE02.roa (raw, json)
Hash identifier:          0KOEtKhdN+FNGtHbFGusR64uAB09qzuWpfynaVEj/zs=
Subject key identifier:   66:B3:B0:A0:AE:F3:5F:E7:10:C7:61:EC:DE:D0:B2:7F:D2:50:1A:67
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       069A
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/85DC71023AA811F0A8FEC349C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:51:29 +0000
ROA not before:           Thu 28 Aug 2025 14:51:29 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152968
IP address blocks:        160.30.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 14:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1690 (0x69a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:29 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06cf0-adfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fa:57:4d:86:19:8e:ea:14:14:2e:9d:74:18:
                    3e:cb:8c:d7:72:a8:35:8b:ef:23:77:35:d9:4b:69:
                    4a:92:ee:fd:ce:b4:6c:85:8b:dd:aa:62:9f:16:e9:
                    2e:1b:c3:2b:dd:84:ae:fd:fe:5a:f3:50:54:c0:0d:
                    ec:fe:f6:1a:f3:12:65:dc:38:ed:49:dd:4d:c4:9f:
                    7c:b2:b1:87:98:06:23:c4:eb:18:66:53:e3:19:75:
                    18:08:8c:63:54:ee:f7:8d:17:df:cc:5a:42:d8:dd:
                    56:f0:f2:95:03:a5:1b:70:bf:b3:33:cc:a9:67:3a:
                    2b:b9:ec:79:fe:90:73:ac:5a:5b:83:0f:c5:ef:af:
                    91:ba:2d:bb:39:18:e6:84:b6:9f:d0:dd:ea:3f:32:
                    04:d4:74:b0:a3:63:d8:ac:6a:a8:02:3b:5c:b5:61:
                    97:87:c6:2d:f6:cc:41:97:eb:52:ee:b8:66:ee:09:
                    cb:b7:83:70:c9:3c:6a:14:15:62:1e:a7:b2:a1:a6:
                    36:b1:6b:78:ce:fb:03:01:cc:38:93:c5:f0:58:fb:
                    03:bf:d7:56:18:88:31:86:64:66:72:67:1a:64:9d:
                    15:54:86:08:56:53:6a:65:db:99:8c:97:1f:6b:a5:
                    06:63:22:62:22:b8:b2:58:fc:0d:94:e6:fa:c1:6e:
                    96:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B3:B0:A0:AE:F3:5F:E7:10:C7:61:EC:DE:D0:B2:7F:D2:50:1A:67
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/85DC71023AA811F0A8FEC349C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:30:9d:47:11:75:61:48:7c:8d:78:01:10:7c:56:70:03:52:
         0d:73:c8:31:bd:54:04:d7:3a:6f:a0:1d:db:96:4a:c9:95:82:
         7c:10:cd:66:89:b9:a9:d8:5b:0c:e3:10:07:5e:ad:48:48:5f:
         ac:f0:20:f5:93:1c:14:9a:62:36:43:62:e8:c2:c5:ab:c0:f9:
         55:76:b8:b8:7d:e7:0a:1a:55:55:ec:14:55:94:3e:47:25:33:
         e2:3d:c1:e0:d0:2e:14:f0:b9:88:86:d6:db:58:f1:21:a3:0a:
         94:e0:25:0a:dc:48:50:28:40:ba:39:ac:54:cb:d8:bd:cc:ee:
         27:a9:5b:33:f0:ce:57:d3:72:37:7e:a1:99:53:93:59:03:57:
         07:08:58:d8:db:6d:ab:08:d1:99:e3:d5:7e:1f:2b:9e:45:c5:
         15:8b:79:2f:6a:9e:82:e7:6a:17:04:85:e4:fa:86:63:68:e1:
         9d:7e:3e:f1:5e:9c:af:04:5b:8f:a9:ee:05:b1:cf:4b:7f:e9:
         b6:99:3b:44:d2:dc:e8:22:0a:a6:2a:0e:96:ce:7a:af:ff:dd:
         66:1d:1f:06:07:f6:fd:53:37:35:51:39:18:c6:ab:79:d3:29:
         06:49:01:03:f8:29:cb:a4:fc:9c:b8:c1:e6:10:fa:44:0c:40:
         c7:23:d5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 00:27:57 2025 by rpki-client