Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/5E85AD042B1B11F0AE3E223BC4F9AE02.roa
File:                     5E85AD042B1B11F0AE3E223BC4F9AE02.roa (raw, json)
Hash identifier:          q2PsmBaPUlGvEput/dvI1P9mbtnk1siucrhRcpQcM5A=
Subject key identifier:   D0:47:76:C7:FB:07:0D:44:32:4F:71:63:CC:3C:68:76:FA:69:71:63
Certificate issuer:       /CN=A91B87FC/serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD
Certificate serial:       B0
Authority key identifier: 3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/5E85AD042B1B11F0AE3E223BC4F9AE02.roa
Signing time:             Sun 31 Aug 2025 07:24:21 +0000
ROA not before:           Sun 31 Aug 2025 07:24:21 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     24499
IP address blocks:        160.30.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl
                          rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 06:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B87FC, serialNumber=3A87871E3BAE65EDE2F31BB1AD5C59BB7A74ABDD
        Validity
            Not Before: Aug 31 07:24:21 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b3f8a4-129f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7e:4a:cb:26:06:43:82:f2:d9:c7:b3:56:81:
                    54:2a:a5:d6:42:a7:9b:1a:75:cc:d2:3b:e9:9e:b0:
                    58:9c:a5:da:b7:92:db:3d:ae:67:5b:29:96:00:b5:
                    c0:e8:98:b8:f6:74:d6:81:4d:c4:c0:68:00:32:d8:
                    20:64:55:b8:bb:93:d7:d4:3d:12:d2:c2:97:2c:89:
                    d7:d4:cb:fc:da:2a:41:66:3f:bc:fb:6c:41:e7:80:
                    18:e8:48:54:61:c0:13:fd:49:bd:24:e2:17:7e:24:
                    8e:26:d4:78:f8:44:7c:95:be:af:ff:14:9c:3a:47:
                    62:1d:8a:39:0c:5a:99:00:4b:24:47:71:15:8c:01:
                    a4:ca:71:7a:ce:10:8e:39:9d:bc:08:0c:c2:ed:8d:
                    a8:68:79:7c:fe:3e:a1:3e:2b:66:f2:52:bc:f1:64:
                    b7:2f:a1:f3:5e:c8:33:2d:56:d8:f7:28:88:55:d2:
                    cb:43:2e:2b:c9:f8:b3:66:7d:13:c7:8b:5b:43:88:
                    fc:cf:e7:ef:74:6c:3e:56:e0:af:ab:cf:60:d1:70:
                    4f:77:64:ce:a4:92:75:4f:39:0a:0b:9c:b6:e2:37:
                    39:0f:9d:a9:7d:d7:59:d1:5b:6e:09:6f:06:90:d6:
                    8c:0d:46:6b:fb:ae:ad:d5:aa:98:28:fd:0c:cd:b4:
                    df:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:47:76:C7:FB:07:0D:44:32:4F:71:63:CC:3C:68:76:FA:69:71:63
            X509v3 Authority Key Identifier:
                keyid:3A:87:87:1E:3B:AE:65:ED:E2:F3:1B:B1:AD:5C:59:BB:7A:74:AB:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/OoeHHjuuZe3i8xuxrVxZu3p0q90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OoeHHjuuZe3i8xuxrVxZu3p0q90.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B87FC/3978E31686E111EF8F773F82C4F9AE02/5E85AD042B1B11F0AE3E223BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:2b:89:b3:af:51:77:f6:ec:ea:3f:f2:c1:9a:38:01:f3:a7:
         ae:f7:80:bc:8a:5b:00:c6:00:c1:22:64:d6:a0:09:90:87:d0:
         bf:2c:81:fe:04:08:9e:a6:76:d8:ac:39:5f:95:78:b6:6b:bd:
         6d:4a:a2:db:e4:2e:9c:a1:97:33:bb:46:fb:a1:31:1a:38:2e:
         48:8b:9e:f0:65:ab:be:69:ce:a7:a2:27:ee:c5:08:d5:d9:53:
         a9:35:24:78:0d:7e:65:ad:9d:c7:79:59:44:27:91:83:51:d0:
         80:22:e8:57:dc:26:b7:bc:c9:9a:36:9c:33:b3:1b:ae:65:1e:
         7a:00:b4:21:a4:f0:e7:a0:59:d0:57:c4:97:6d:02:f6:35:57:
         09:92:b0:03:20:50:c2:7f:78:85:7f:24:27:19:24:0c:83:15:
         39:35:b4:02:cd:7c:3c:5a:86:64:9e:9e:a3:0e:b5:73:4d:6f:
         d7:a1:66:aa:36:27:d9:c6:f1:5b:4f:17:b2:e9:64:a0:08:23:
         ab:21:a3:44:51:47:a0:20:e2:ec:15:f6:b1:50:7e:cb:4f:67:
         5c:ff:5f:d6:1a:28:59:19:db:af:2c:4d:57:d9:49:ab:4d:cb:
         15:3b:d4:dd:37:ac:7e:11:12:73:f1:5c:5a:63:65:d1:93:eb:
         fe:a3:9a:43
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjg3RkMxMTAvBgNVBAUTKDNBODc4NzFFM0JBRTY1RURFMkYzMUJCMUFENUM1OUJC
N0E3NEFCREQwHhcNMjUwODMxMDcyNDIxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGIzZjhhNC0xMjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu35KyyYGQ4Ly2cezVoFUKqXWQqebGnXM0jvpnrBYnKXat5LbPa5nWymWALXA
6Ji49nTWgU3EwGgAMtggZFW4u5PX1D0S0sKXLInX1Mv82ipBZj+8+2xB54AY6EhU
YcAT/Um9JOIXfiSOJtR4+ER8lb6v/xScOkdiHYo5DFqZAEskR3EVjAGkynF6zhCO
OZ28CAzC7Y2oaHl8/j6hPitm8lK88WS3L6HzXsgzLVbY9yiIVdLLQy4ryfizZn0T
x4tbQ4j8z+fvdGw+VuCvq89g0XBPd2TOpJJ1TzkKC5y24jc5D52pfddZ0VtuCW8G
kNaMDUZr+66t1aqYKP0MzbTfNQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNBHdsf7
Bw1EMk9xY8w8aHb6aXFjMB8GA1UdIwQYMBaAFDqHhx47rmXt4vMbsa1cWbt6dKvd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODdGQy8zOTc4RTMxNjg2
RTExMUVGOEY3NzNGODJDNEY5QUUwMi9Pb2VISGp1dVplM2k4eHV4clZ4WnUzcDBx
OTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL09vZUhIanV1WmUzaTh4dXhyVnhadTNwMHE5MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qjg3RkMvMzk3OEUzMTY4NkUxMTFFRjhGNzczRjgyQzRGOUFFMDIvNUU4NUFEMDQy
QjFCMTFGMEFFM0UyMjNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACgHm0wDQYJKoZIhvcNAQELBQADggEBAFsribOvUXf27Oo/
8sGaOAHzp673gLyKWwDGAMEiZNagCZCH0L8sgf4ECJ6mdtisOV+VeLZrvW1Kotvk
LpyhlzO7RvuhMRo4LkiLnvBlq75pzqeiJ+7FCNXZU6k1JHgNfmWtncd5WUQnkYNR
0IAi6FfcJre8yZo2nDOzG65lHnoAtCGk8OegWdBXxJdtAvY1VwmSsAMgUMJ/eIV/
JCcZJAyDFTk1tALNfDxahmSenqMOtXNNb9ehZqo2J9nG8VtPF7LpZKAII6sho0RR
R6Ag4uwV9rFQfstPZ1z/X9YaKFkZ268sTVfZSatNyxU71N03rH4REnPxXFpjZdGT
6/6jmkM=
-----END CERTIFICATE-----
Generated at Sun Sep 7 00:28:04 2025 by rpki-client