Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/DF6D4464818211F097447962C4F9AE02.roa
File:                     DF6D4464818211F097447962C4F9AE02.roa (raw, json)
Hash identifier:          uFriQ+Hd3GtX+b70XPw86L5pzFQw2KnB4KHG3QJkhcY=
Subject key identifier:   E0:25:51:79:74:19:7B:87:07:F0:3B:44:AE:40:0E:3F:1F:39:2F:4A
Certificate issuer:       /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
Certificate serial:       CD
Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/DF6D4464818211F097447962C4F9AE02.roa
Signing time:             Sun 07 Sep 2025 06:42:50 +0000
ROA not before:           Sun 07 Sep 2025 06:42:50 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     137910
IP address blocks:        160.30.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 06:42:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726
        Validity
            Not Before: Sep  7 06:42:50 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68bd296a-52da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8d:44:b9:72:9b:49:7e:97:93:6e:cf:21:e6:
                    01:46:24:91:ae:dc:05:0a:5a:27:06:3d:af:fd:f5:
                    8a:83:94:44:83:14:d0:e1:e5:18:e3:e3:3b:7b:57:
                    e9:7d:a0:0c:5e:f0:a5:30:b2:3c:38:65:65:9f:80:
                    d3:1e:9a:6a:cc:dc:06:e4:69:df:9a:7c:6a:46:1d:
                    36:48:df:e1:c0:ee:31:53:0d:3d:05:16:88:2d:d6:
                    de:87:72:c2:4e:b1:d6:74:f2:33:90:7b:67:bb:b5:
                    59:8c:16:7c:28:db:94:03:c5:83:0d:29:a4:68:ae:
                    cb:70:e1:c5:30:c5:52:3c:79:2f:5a:d6:b0:27:66:
                    6b:be:97:7c:24:c5:ca:ea:54:b8:1f:a0:f5:ae:ce:
                    0a:43:e5:94:79:d2:1a:11:60:6f:ab:41:f7:06:9e:
                    f4:df:3c:e3:65:cf:79:43:3a:d6:6f:1e:bd:93:f9:
                    a1:47:e4:a8:e9:58:0b:e4:ef:b5:c0:3a:8b:47:8d:
                    1f:a5:3f:06:53:b6:fa:f3:2c:2c:21:0a:09:9f:57:
                    f9:a4:05:b2:c0:78:30:91:56:74:f8:34:db:ce:86:
                    f9:23:df:ba:01:3b:63:83:06:0e:91:e4:bd:d6:c7:
                    94:3e:5c:19:ab:91:6b:52:87:8f:a2:ab:64:c4:cb:
                    3f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:25:51:79:74:19:7B:87:07:F0:3B:44:AE:40:0E:3F:1F:39:2F:4A
            X509v3 Authority Key Identifier:
                keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/DF6D4464818211F097447962C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:c9:ba:f0:f3:d6:13:35:1d:23:78:57:8b:a0:2a:f0:82:1e:
         14:85:23:12:d6:3e:5e:03:fa:76:33:d2:e8:93:fb:ec:63:d9:
         1b:23:05:02:75:fb:11:1e:34:76:74:af:92:b3:96:21:85:47:
         be:96:70:52:45:0b:0d:f6:56:d8:4d:0f:4b:56:a6:66:bb:d3:
         59:f3:57:3b:3c:ba:98:fe:dc:c3:4e:d8:75:a9:79:5d:2a:d6:
         7e:e7:f8:d4:5f:08:60:40:57:e5:df:b1:bb:36:c0:40:ca:5d:
         23:47:91:eb:d0:b6:bc:79:35:d9:a0:a1:17:a5:d7:08:bb:37:
         0b:f8:30:f9:c9:c9:b5:11:09:e8:9d:25:b1:74:b6:0f:8b:46:
         2d:bf:8d:13:3e:6b:23:18:af:2d:df:28:df:09:45:6c:f2:88:
         96:aa:77:cd:f6:b5:76:e6:e7:54:22:fe:49:e2:21:d2:56:e5:
         8a:e8:d2:26:74:86:ef:4e:9f:91:ed:28:f7:fe:ce:3c:b8:99:
         ab:c4:79:81:1d:76:1b:2e:fb:77:56:a5:cb:cf:05:5e:27:9e:
         2f:14:13:c4:a3:29:4f:b8:53:76:2c:68:37:53:58:fe:fe:05:
         fb:ff:51:9f:1f:8e:9a:bc:f2:d3:5d:43:bd:73:41:4a:20:0a:
         18:9f:98:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 19:05:12 2025 by rpki-client