Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B8F01DD0733011F09034C154C4F9AE02.roa
File:                     B8F01DD0733011F09034C154C4F9AE02.roa (raw, json)
Hash identifier:          pudWSXC+L9pJtRtVPrz/byfDwAC2XFdxqEkPU/47iuc=
Subject key identifier:   F9:0E:DF:C4:BC:3B:05:BC:16:79:66:10:60:97:50:F6:1E:A0:0B:5E
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       06C4
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B8F01DD0733011F09034C154C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:52:02 +0000
ROA not before:           Thu 28 Aug 2025 14:52:02 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154053
IP address blocks:        165.101.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 14:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1732 (0x6c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:52:02 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06d11-59e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:49:4d:cb:8a:e9:3c:eb:bd:7b:99:c6:a7:c8:
                    e9:2a:99:a5:c0:3c:d2:33:31:1a:c7:a2:21:42:c3:
                    08:3c:29:78:ac:e3:29:81:18:f2:77:06:d5:b0:92:
                    52:de:ac:db:b3:62:9d:23:c9:de:8d:25:45:99:f1:
                    7b:77:b8:e7:b7:6a:5a:ed:32:4d:cb:c0:66:dc:19:
                    49:55:5c:12:c4:4d:4f:c4:5a:9b:b0:18:0c:0f:f1:
                    59:c4:80:5f:3f:0e:8d:ea:94:06:75:3d:cd:7b:62:
                    42:9e:79:2c:e5:35:39:a6:3a:73:06:6c:df:3a:90:
                    37:97:e4:ea:01:cd:4f:61:ad:cb:42:0f:a3:dd:52:
                    5c:8a:12:e4:8f:ee:46:9e:b5:7a:46:5e:42:69:ee:
                    18:ac:42:99:d8:86:0e:4e:ed:1f:2d:9f:87:2f:7a:
                    2b:80:29:6c:44:14:2b:22:c8:4d:53:8e:3e:51:a6:
                    71:7f:3e:62:5c:35:b4:65:9b:b7:e6:7f:f5:47:d4:
                    77:ab:f6:28:a8:0e:1b:3e:e7:b5:d4:75:8c:26:cf:
                    ea:bb:85:b9:7a:b7:8b:a2:b3:1c:b3:77:d5:6a:25:
                    1a:ba:7a:27:1d:21:22:3f:b5:2e:d3:39:da:b9:13:
                    ba:00:ef:7b:b8:d1:96:9b:c0:af:18:57:56:4d:52:
                    20:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0E:DF:C4:BC:3B:05:BC:16:79:66:10:60:97:50:F6:1E:A0:0B:5E
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B8F01DD0733011F09034C154C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:26:f2:4d:77:23:21:e5:d9:63:ae:28:ee:f0:de:a1:2d:eb:
         35:15:39:cc:2a:c2:2b:9f:1b:8a:7a:17:ff:8b:26:dd:ec:9e:
         39:d2:98:8b:44:24:d6:c6:79:fe:fe:7d:19:d4:f3:2b:fa:2b:
         d1:a9:fb:41:e4:95:87:0f:86:56:1b:67:4e:48:bc:cd:01:d4:
         f6:34:51:31:5b:43:a8:f6:7d:b0:86:c6:63:30:9f:37:19:5b:
         c5:b3:71:16:59:ae:80:97:57:d5:0e:1b:bf:68:c7:d6:84:b5:
         05:27:0b:2f:33:34:78:d6:37:1c:1e:c8:64:86:81:1c:fc:48:
         db:57:02:2f:67:09:0f:96:60:2d:40:89:6e:aa:d2:c3:c4:53:
         b8:78:c3:20:6a:d7:47:71:d7:82:02:e1:27:04:c7:ca:9b:f8:
         d7:c5:29:0e:eb:7e:c9:4d:a1:90:df:c5:23:4b:06:14:9e:6b:
         d1:da:fb:7b:23:5a:aa:ee:fb:f9:e2:e9:b1:20:19:8d:51:55:
         66:4d:af:f3:dc:fb:a8:10:9f:9e:e9:aa:a5:9f:36:e1:22:42:
         67:b1:80:11:50:1f:2a:d2:ba:81:d5:d1:55:ff:a0:68:bf:d1:
         8d:e2:46:1b:42:cb:52:d0:7c:d3:46:b3:81:38:11:ee:39:f6:
         66:46:6e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 00:29:38 2025 by rpki-client