Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F840BBBECD1011EFA6223D25C4F9AE02.roa
File:                     F840BBBECD1011EFA6223D25C4F9AE02.roa (raw, json)
Hash identifier:          PjV4S+HjGPyK8ZBNDjgUYDEzc5duPLK0MqALJZnb1Sk=
Subject key identifier:   C8:36:66:73:98:D2:FD:E9:9D:F6:E5:F9:C9:FC:F8:9D:0E:00:67:7D
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       06C6
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F840BBBECD1011EFA6223D25C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:52:05 +0000
ROA not before:           Thu 28 Aug 2025 14:52:05 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     24088
IP address blocks:        160.250.76.0/23 maxlen: 24
                          165.99.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 14:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1734 (0x6c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:52:05 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06d15-6797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:61:7c:a8:42:75:3d:2f:ca:7c:a6:1c:99:57:
                    39:6d:8c:96:7c:e9:77:66:47:53:b7:0f:4a:75:fc:
                    d3:0e:ef:41:cb:72:cd:b2:34:04:c0:ce:12:d6:4a:
                    b8:93:30:35:3f:95:8b:03:3e:d5:bc:0b:72:18:4c:
                    19:6e:39:90:7c:36:ad:f9:09:16:68:7c:d7:13:7e:
                    1f:ef:1a:b6:e2:3b:b9:b4:03:30:be:2a:5e:71:c8:
                    84:d5:f9:11:be:53:85:57:07:08:90:c9:ef:cd:b0:
                    6b:96:72:9b:db:e9:78:14:ce:8c:53:d5:e3:51:f3:
                    40:29:5d:15:0a:ca:40:23:b7:c3:79:1c:cd:ee:7c:
                    67:97:17:8b:c2:93:ae:1c:ef:e1:18:ea:66:8c:9f:
                    0f:d6:0a:73:a0:a6:d9:49:ad:5f:51:69:10:c6:07:
                    08:5b:61:a9:d1:9f:a9:62:72:0d:35:28:de:dd:46:
                    8d:ea:3b:39:2a:0c:97:44:f0:d4:3f:95:ca:59:b3:
                    4a:36:85:92:ca:54:e1:e2:6e:f8:0d:55:be:94:82:
                    16:b1:88:d1:f3:e2:38:f9:25:66:dd:cc:51:ac:2b:
                    f6:cb:0a:bc:0b:2d:66:c7:6d:68:32:44:36:6a:db:
                    32:ac:5f:15:1d:34:ee:ca:e8:95:94:73:97:64:d1:
                    3b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:36:66:73:98:D2:FD:E9:9D:F6:E5:F9:C9:FC:F8:9D:0E:00:67:7D
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F840BBBECD1011EFA6223D25C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.76.0/23
                  165.99.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:b9:b1:9e:c6:e6:e9:0c:4c:63:96:a2:5a:bf:f7:c5:61:e2:
         8e:60:8f:b9:38:3a:1a:32:0d:df:00:c1:f6:ea:87:5f:b9:46:
         62:cc:2b:e2:4b:80:08:5c:2a:3e:d3:5d:93:c8:a2:cd:aa:d4:
         12:51:db:37:b9:31:52:46:d2:0b:24:2e:fa:be:95:94:cc:d9:
         fd:5d:96:52:99:17:31:7b:c6:08:17:db:70:06:e8:5f:3f:58:
         e6:d4:70:9f:6f:a7:7c:ed:8b:16:72:9e:b4:03:3d:3c:29:30:
         50:57:aa:da:e3:1c:d7:9a:f7:68:4d:c1:70:51:3d:7d:95:01:
         67:14:c4:53:b8:1b:fd:d1:d4:7b:09:9f:42:cb:41:15:c9:63:
         08:c6:14:c3:da:51:01:a1:31:03:85:35:35:a6:37:5d:86:15:
         e9:9b:6e:99:8f:ee:ad:3d:20:f0:ab:be:74:f2:6c:26:c7:a3:
         16:3e:24:5e:51:05:6b:88:3c:e8:34:6d:fb:c1:41:1f:51:8e:
         52:b1:fa:9d:be:64:aa:f2:6a:6c:86:cd:83:86:7b:ad:b4:4d:
         e7:74:9d:d0:56:b6:6f:77:9d:a6:4a:1b:2e:1d:a5:83:f3:59:
         f4:89:1b:91:6e:77:ba:d0:6d:9a:47:f4:7d:b4:52:0e:42:ad:
         1e:32:99:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 00:30:32 2025 by rpki-client