Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B14A0E24736C11F0AA0EBE30C4F9AE02.roa
File:                     B14A0E24736C11F0AA0EBE30C4F9AE02.roa (raw, json)
Hash identifier:          gT/4vPd3wBkyeFWqgIN1iaj3wvblFQMGc+FrZh9F4ig=
Subject key identifier:   7C:F7:95:93:2F:B9:F6:2A:12:71:B6:C1:4B:EC:58:B0:C2:C1:7D:0C
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       0671
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B14A0E24736C11F0AA0EBE30C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:50:53 +0000
ROA not before:           Thu 28 Aug 2025 14:50:53 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140811
IP address blocks:        157.66.216.0/24 maxlen: 24
                          157.66.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 14:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1649 (0x671)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:50:53 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06ccc-7365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0a:c9:99:e0:37:cd:ee:f9:53:78:3f:d9:d8:
                    09:e3:0a:fe:64:b5:41:57:0b:a2:bc:03:67:3b:5b:
                    1c:ab:fc:07:a6:f0:0a:e2:18:61:d5:41:b2:1e:b4:
                    33:38:b0:cd:e8:ce:97:af:1f:85:d8:3c:11:f0:e5:
                    86:42:77:51:50:a0:e0:e5:64:c5:ed:2e:9d:dc:b9:
                    74:6e:4e:ec:e1:07:fc:c5:d6:c2:1d:1f:ed:a5:72:
                    97:1b:c7:85:ba:32:d5:43:c9:9c:69:55:e1:8a:a9:
                    13:6a:cb:dd:9e:c2:ec:b7:b3:bb:f4:f0:85:33:39:
                    63:dc:a7:e5:ff:e0:e2:c9:84:95:8f:43:2b:d7:69:
                    08:40:2d:8d:73:25:29:0b:2f:d2:66:14:d3:f1:2e:
                    8d:ff:dd:79:b3:b1:3e:ce:bf:02:cf:d8:6f:98:2d:
                    f8:03:8c:2d:f4:4d:90:ce:75:e0:c3:3d:cd:2f:e5:
                    bb:e3:b2:93:ed:ee:7b:3b:a2:7e:c8:1f:4b:38:9e:
                    e1:b6:c5:68:d4:75:49:97:ee:3d:03:81:77:52:f8:
                    92:47:12:6a:33:73:f9:a4:8b:cc:14:7b:c2:75:83:
                    29:40:2a:38:ba:ee:da:1d:8f:4c:af:f1:19:40:f1:
                    d0:0d:a6:7b:83:bc:f0:77:11:1b:f0:88:c1:90:a2:
                    68:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F7:95:93:2F:B9:F6:2A:12:71:B6:C1:4B:EC:58:B0:C2:C1:7D:0C
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B14A0E24736C11F0AA0EBE30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:a2:d6:ab:16:36:51:7d:c0:11:a0:69:aa:91:aa:68:d0:74:
         8c:00:c3:92:ea:93:93:ae:23:b7:51:e8:20:47:40:68:64:af:
         bf:92:84:ef:e2:52:d6:2c:4f:89:09:00:6f:e0:08:05:78:4a:
         a6:fc:0a:ab:16:d9:62:ab:23:41:ac:29:eb:b8:f8:cc:cc:de:
         a3:b7:60:43:b6:a8:f9:b6:62:fe:65:e4:07:0d:2f:8f:21:be:
         48:2c:8f:c8:f6:2b:bb:56:5d:e7:39:8b:36:76:86:92:35:64:
         42:28:14:60:6c:bb:1c:7c:f4:a2:4e:0a:5c:35:c0:7d:4f:6c:
         44:6e:65:81:a4:3c:c4:97:a0:63:29:86:32:5c:c2:cc:40:ac:
         75:35:8e:80:ce:3c:59:f7:db:4c:9e:85:1a:bd:03:61:9c:bd:
         7d:4a:ef:ab:e3:17:94:fc:f5:a6:9a:f0:5c:b0:fa:f5:90:19:
         50:2b:a5:d4:be:ba:57:9e:16:10:c0:73:03:37:bf:81:ed:e0:
         d9:22:f4:21:18:02:2f:e0:af:dc:8c:95:83:17:a8:d1:6a:98:
         d2:50:2e:c6:e3:23:46:d5:34:30:ed:2d:42:82:ee:a4:01:2c:
         cc:61:f8:0d:e5:31:87:6a:77:79:bf:aa:21:bd:af:5c:35:6d:
         46:21:47:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 00:33:39 2025 by rpki-client