Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8D943848ABDC11EC8C02DB82C4F9AE02.roa
File:                     8D943848ABDC11EC8C02DB82C4F9AE02.roa (raw, json)
Hash identifier:          Jb+vKo2oRq/L2wrZitSw/LeCCUIxHAnBtv+Vf3YKoIg=
Subject key identifier:   50:B3:46:05:7C:D1:4C:BF:9C:3E:10:8F:27:AE:A8:EE:4D:99:8A:6D
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4E19
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8D943848ABDC11EC8C02DB82C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:57:19 +0000
ROA not before:           Thu 28 Aug 2025 14:57:19 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     45556
IP address blocks:        203.161.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 16:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19993 (0x4e19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:57:19 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06e4f-6234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1f:e1:5e:08:59:b7:74:b8:4a:cd:9f:2d:98:
                    84:88:f9:d4:68:c3:7d:ce:d6:1f:52:c5:a4:dd:a8:
                    c8:99:e9:39:a0:32:ab:6b:f6:05:c3:96:ed:a1:dd:
                    69:28:a8:91:d5:e7:83:79:d0:23:ce:72:d2:7b:88:
                    52:37:5c:12:f2:1f:87:42:37:52:ed:55:5c:43:f1:
                    38:b7:21:e1:5c:b3:12:90:97:29:a4:db:94:ce:27:
                    df:2b:d7:5c:5a:19:00:83:9b:a3:a8:96:08:24:c1:
                    cc:cf:5e:54:9e:34:c8:7e:4b:8f:1e:f1:4f:0d:c6:
                    8f:df:a6:87:f9:8e:77:4d:5f:9b:5d:6f:af:7f:19:
                    70:4b:68:2e:86:1a:b1:3f:3a:79:b7:e7:2e:1d:a2:
                    44:3d:b3:0e:66:85:ae:ab:20:cf:8e:82:73:10:d0:
                    d8:cf:09:8d:e2:47:ed:af:13:ff:ef:97:5a:8f:e6:
                    d6:10:21:1e:e6:2f:a2:b6:0d:0e:f7:b0:35:f5:f0:
                    9a:c6:1e:f5:5d:f9:a4:1a:51:8c:21:42:d3:71:d9:
                    9d:a2:98:83:f3:78:9e:a9:5a:26:43:00:2f:f1:70:
                    67:87:2b:d5:39:81:3c:1b:fb:2e:61:4e:3b:b4:9f:
                    15:2e:6e:e8:c9:af:8b:e6:26:98:e1:90:23:7d:bb:
                    a2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B3:46:05:7C:D1:4C:BF:9C:3E:10:8F:27:AE:A8:EE:4D:99:8A:6D
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8D943848ABDC11EC8C02DB82C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.161.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:cb:a5:4c:35:26:02:1f:ba:09:2f:60:e7:df:f4:35:cc:37:
         70:5e:df:3c:93:22:05:4f:75:d3:25:78:ff:d0:ee:fe:e9:30:
         cc:3a:3c:c8:17:fb:7d:de:ba:bb:a0:98:2d:46:3c:db:37:a4:
         9b:f7:f2:7c:9a:79:58:32:9e:b9:ca:3d:c7:7b:72:84:d2:d1:
         7d:94:5d:21:3e:f9:d7:e9:25:71:5e:71:b1:41:40:c3:ec:51:
         2c:81:cd:9f:d8:a3:6e:bd:e1:c0:41:9f:6a:24:6c:9a:4e:26:
         f0:8d:f4:95:f3:c3:31:90:cb:35:ac:a1:f1:2a:1b:9c:b2:b8:
         76:61:2f:df:f4:f5:1a:2a:60:d8:d6:c7:22:e3:cf:3b:5b:26:
         d8:2c:97:94:4d:be:82:a5:0a:06:47:b8:be:32:01:a1:3a:5c:
         cf:48:f5:1b:df:23:6e:07:3f:2d:26:24:ce:b5:18:d8:7b:e2:
         12:26:04:52:e0:08:c4:38:51:12:87:8e:93:c2:b3:6e:98:b0:
         64:db:f1:20:e0:04:b4:1d:67:71:b2:14:ac:8a:6f:e5:f0:ae:
         5a:0d:8f:95:36:dd:5e:30:25:c5:9e:ad:74:df:c0:e9:d3:e2:
         48:03:b0:17:e6:23:db:8f:70:36:67:de:3c:a0:5b:14:8d:56:
         42:05:4e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:33:13 2025 by rpki-client