Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/DCD091AA93D111F0B0A32B0BC4F9AE02.roa
File:                     DCD091AA93D111F0B0A32B0BC4F9AE02.roa (raw, json)
Hash identifier:          apbntEW54Z7A4caHXTIqLm5PS8fFH3F9o/xC7IDPABM=
Subject key identifier:   80:4C:E0:26:93:A6:35:5A:AF:4E:F5:C5:59:78:DB:C2:C7:48:32:15
Certificate issuer:       /CN=A91DF195/serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63
Certificate serial:       05
Authority key identifier: 18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/DCD091AA93D111F0B0A32B0BC4F9AE02.roa
Signing time:             Wed 17 Sep 2025 14:23:21 +0000
ROA not before:           Wed 17 Sep 2025 14:23:21 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     63956
IP address blocks:        160.191.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl
                          rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 11:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF195, serialNumber=18E9297A1F1A18CB879A7E124B5107C440573C63
        Validity
            Not Before: Sep 17 14:23:21 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=68cac459-aea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ef:8e:09:2f:03:37:5a:09:d7:6c:82:fb:dc:
                    e8:25:21:ed:67:db:3a:11:c9:06:dc:e1:7f:2b:1a:
                    57:4a:98:da:f2:63:cd:7c:45:cb:79:7e:3d:9e:2c:
                    f4:70:21:ef:a3:ea:1e:2e:dc:4a:a7:b7:ca:07:61:
                    6d:77:31:06:57:3b:92:fc:e4:d9:27:52:3d:40:f4:
                    b6:b3:a0:91:e5:3c:d3:72:52:28:1a:b0:2a:37:fd:
                    01:fb:64:e8:f4:6c:88:41:d0:2d:8a:f6:d4:96:7e:
                    bd:9f:03:7e:a9:6f:1d:8d:e0:52:3b:45:f5:5c:df:
                    7f:b7:ec:10:2d:18:69:fa:56:5d:4c:94:4e:a4:40:
                    d6:3f:b8:84:a1:59:75:e1:af:e3:5f:17:1f:b3:f7:
                    d7:2d:57:01:81:f8:b5:89:de:c4:44:7a:cd:d3:b5:
                    36:bb:73:61:53:4c:1f:93:f8:6d:81:ee:98:ba:da:
                    dd:f8:2c:dc:28:30:a5:b2:1b:35:60:6c:df:74:4c:
                    75:45:c9:3c:a3:22:2e:10:98:cc:73:72:cc:86:10:
                    e5:41:2c:fe:9f:ed:71:17:d1:9c:01:a3:d1:3f:c8:
                    1d:2b:6c:e2:81:da:ce:2e:fb:6c:43:9c:a8:5f:09:
                    75:fe:c0:4a:d9:8d:40:c1:ad:ee:17:4f:86:99:f2:
                    53:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4C:E0:26:93:A6:35:5A:AF:4E:F5:C5:59:78:DB:C2:C7:48:32:15
            X509v3 Authority Key Identifier:
                keyid:18:E9:29:7A:1F:1A:18:CB:87:9A:7E:12:4B:51:07:C4:40:57:3C:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/GOkpeh8aGMuHmn4SS1EHxEBXPGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GOkpeh8aGMuHmn4SS1EHxEBXPGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/6B66690A938A11F0BBD62385C4F9AE02/DCD091AA93D111F0B0A32B0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:06:8e:a7:5e:e0:9c:09:11:d2:ae:fe:75:6f:45:67:49:e4:
         ea:13:fa:8e:34:bd:32:6a:7e:8b:0b:70:34:0e:39:e3:ef:b2:
         23:74:1c:82:2e:67:3b:91:63:bf:a5:ef:b7:5d:b8:19:12:95:
         5e:ff:cf:10:17:1c:9f:89:a3:b9:0b:50:4b:07:09:e7:8d:8f:
         20:75:90:d4:0f:92:bf:f6:0e:d2:64:4b:8b:40:74:b9:f5:f1:
         21:20:e2:2f:47:ff:0f:e3:95:a3:8f:c9:a5:fe:58:15:0c:31:
         1b:e0:3b:14:83:62:2a:20:d7:0e:4e:61:33:e4:3d:af:24:10:
         ca:21:98:b9:6a:96:9f:f5:b9:fa:a2:1d:a5:67:0c:44:bc:fe:
         eb:b7:e4:32:23:82:41:79:55:4f:b2:94:87:3a:7d:ab:55:f2:
         5a:e4:f8:23:09:52:b9:f5:49:f2:39:4c:86:cd:01:38:23:93:
         0c:a6:18:73:dc:70:8f:a5:84:7a:a4:ed:cd:82:5e:02:1b:2a:
         f0:93:86:b6:23:db:5c:6d:d0:5f:00:8b:9f:ee:27:44:55:14:
         95:f5:aa:a7:7e:95:0f:30:75:db:6d:93:da:71:ee:70:8c:61:
         06:e8:80:cf:b4:ed:a8:62:68:8b:b7:2a:9f:29:16:8f:87:aa:
         10:b5:ae:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 01:30:27 2025 by rpki-client