Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F049853EF6D911EEAAB0053FC4F9AE02.roa
File:                     F049853EF6D911EEAAB0053FC4F9AE02.roa (raw, json)
Hash identifier:          d4A1aTfQU2XUSw04OSNBmr5mkWo2RHv7sMVIPQz/L+M=
Subject key identifier:   16:A2:B9:2B:FE:00:00:82:29:DA:8A:D4:82:8C:82:3E:13:7A:DB:94
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       0688
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F049853EF6D911EEAAB0053FC4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:51:13 +0000
ROA not before:           Thu 28 Aug 2025 14:51:13 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151917
IP address blocks:        157.66.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 14:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1672 (0x688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:13 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06ce0-d6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c1:90:47:46:63:8e:97:0b:7b:6c:e1:b5:7b:
                    25:87:a3:3e:42:82:e3:df:07:5a:7f:87:35:62:9d:
                    ad:73:c0:1b:00:b3:e3:ee:22:01:8b:dd:fa:b2:cc:
                    f5:cd:05:da:cb:43:2d:e1:44:ac:bb:46:66:7e:95:
                    eb:a7:f1:12:10:f7:3c:b5:fd:12:fc:56:de:f0:30:
                    a6:b9:77:d9:79:5f:c3:c3:77:30:9c:96:91:16:0c:
                    6a:e4:6c:4b:62:ac:5b:8f:60:00:92:5f:39:f8:8a:
                    70:8c:83:e7:8b:c6:f2:67:db:37:43:63:44:7b:02:
                    c9:18:3b:23:25:96:b6:7f:3d:a1:ba:5b:ec:d9:2e:
                    e9:42:62:03:db:b2:d0:93:43:c2:ce:de:b7:4d:ea:
                    72:ec:1b:d2:35:bd:3b:8d:88:5d:ae:db:f6:e3:c8:
                    40:00:e8:eb:33:9d:58:5d:50:3f:0a:b7:93:02:4d:
                    40:e2:e9:61:50:de:7c:7d:a1:96:07:10:ca:e5:97:
                    7e:94:b1:88:84:65:6d:01:b4:fc:45:b6:88:17:91:
                    4f:11:51:90:bc:ef:57:58:c4:4e:82:01:9d:7e:e6:
                    ea:82:34:a9:c5:0e:67:5b:54:c4:86:9f:0d:14:5d:
                    91:e7:33:a9:64:2a:cc:81:8b:49:ce:43:17:d6:e6:
                    08:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A2:B9:2B:FE:00:00:82:29:DA:8A:D4:82:8C:82:3E:13:7A:DB:94
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F049853EF6D911EEAAB0053FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:38:7d:10:b6:9d:04:88:8b:a2:fe:59:a4:ef:6a:8c:c4:ab:
         d8:93:c5:fe:bd:26:52:77:f8:bc:64:17:c6:d7:27:1a:65:b9:
         ca:40:a9:49:d3:d6:25:54:4d:d5:dc:bb:b2:88:4b:70:d6:01:
         4f:41:78:2f:0f:8e:a0:f4:3e:bb:25:cb:15:83:39:83:0f:ec:
         80:80:33:e9:7e:98:9e:2e:62:a6:18:ef:48:10:13:71:27:27:
         8b:e2:47:2b:1f:77:85:5b:d9:01:1b:ce:40:a6:aa:bd:a2:b4:
         a4:8c:53:e0:ae:73:5e:3e:ca:a5:15:7c:33:8d:c4:ad:30:2a:
         a6:b8:58:c1:61:f8:c6:37:4e:a0:85:8f:bb:dd:17:33:1d:97:
         b8:bd:6d:37:86:7e:cc:50:3d:42:f3:7d:b9:da:65:07:5d:3a:
         39:f3:72:50:db:2f:b0:b8:2d:45:a4:45:d4:79:fa:58:f8:83:
         23:b4:99:b4:6a:d6:d5:5c:40:b2:1a:d4:88:47:6e:7c:52:be:
         81:88:0f:b2:31:98:a8:cc:aa:97:87:a6:34:5f:0d:d8:ce:cd:
         72:79:8f:1b:7a:9e:96:be:a4:4c:51:9c:a9:ef:1f:f1:c6:21:
         c1:37:91:df:55:97:4a:be:d8:d1:59:32:2f:97:f0:4c:1a:49:
         cd:9e:e9:06
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjUwODI4MTQ1MTEzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGIwNmNlMC1kNmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyMGQR0ZjjpcLe2zhtXslh6M+QoLj3wdaf4c1Yp2tc8AbALPj7iIBi936ssz1
zQXay0Mt4USsu0ZmfpXrp/ESEPc8tf0S/Fbe8DCmuXfZeV/Dw3cwnJaRFgxq5GxL
Yqxbj2AAkl85+IpwjIPni8byZ9s3Q2NEewLJGDsjJZa2fz2hulvs2S7pQmID27LQ
k0PCzt63Tepy7BvSNb07jYhdrtv248hAAOjrM51YXVA/CreTAk1A4ulhUN58faGW
BxDK5Zd+lLGIhGVtAbT8RbaIF5FPEVGQvO9XWMROggGdfubqgjSpxQ5nW1TEhp8N
FF2R5zOpZCrMgYtJzkMX1uYIcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBaiuSv+
AACCKdqK1IKMgj4TetuUMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvRjA0OTg1M0VG
NkQ5MTFFRUFBQjAwNTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGdQi4wDQYJKoZIhvcNAQELBQADggEBAG84fRC2nQSIi6L+
WaTvaozEq9iTxf69JlJ3+LxkF8bXJxplucpAqUnT1iVUTdXcu7KIS3DWAU9BeC8P
jqD0PrslyxWDOYMP7ICAM+l+mJ4uYqYY70gQE3EnJ4viRysfd4Vb2QEbzkCmqr2i
tKSMU+Cuc14+yqUVfDONxK0wKqa4WMFh+MY3TqCFj7vdFzMdl7i9bTeGfsxQPULz
fbnaZQddOjnzclDbL7C4LUWkRdR5+lj4gyO0mbRq1tVcQLIa1IhHbnxSvoGID7Ix
mKjMqpeHpjRfDdjOzXJ5jxt6npa+pExRnKnvH/HGIcE3kd9Vl0q+2NFZMi+X8Ewa
Sc2e6QY=
-----END CERTIFICATE-----
Generated at Sun Sep 7 00:31:09 2025 by rpki-client