Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/8334E4446BA911EFADEBED84C4F9AE02.roa
File:                     8334E4446BA911EFADEBED84C4F9AE02.roa (raw, json)
Hash identifier:          /b8c3NYiRoYt5VnH0mNcKwqwOmBEVRecdoyF1gyL4+8=
Subject key identifier:   29:58:00:96:6A:BF:23:D9:D1:DC:53:B2:FB:33:9B:0E:58:CE:72:97
Certificate issuer:       /CN=A9115620/serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
Certificate serial:       C2
Authority key identifier: 33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/8334E4446BA911EFADEBED84C4F9AE02.roa
Signing time:             Sat 13 Sep 2025 06:12:45 +0000
ROA not before:           Sat 13 Sep 2025 06:12:45 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     153191
IP address blocks:        160.30.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl
                          rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115620, serialNumber=3375A96134C57331AF54DD714ED363DAB31B6BD0
        Validity
            Not Before: Sep 13 06:12:45 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68c50b5d-2cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:91:41:60:bb:e2:9c:4f:d6:b4:46:b4:dc:f3:
                    1f:3d:91:5f:0f:08:6b:77:29:92:98:93:1b:b5:bc:
                    2a:ab:9c:62:12:42:eb:f0:06:e1:10:80:92:a2:38:
                    3c:6b:6a:63:81:12:17:61:fb:d8:69:a1:32:9d:43:
                    8c:55:ed:d2:39:7d:76:49:68:11:ba:fe:60:92:b4:
                    e4:3a:a9:51:8a:25:7a:6f:5f:08:d6:2e:26:98:bc:
                    2a:43:75:9c:35:74:11:5b:c0:f9:c4:19:37:d3:97:
                    37:47:cc:e8:83:73:47:6d:fd:28:eb:49:27:af:b7:
                    e2:51:96:0f:c9:ae:f6:0b:0c:a9:39:b7:17:82:36:
                    4d:89:63:9c:f0:3e:e1:c7:e5:de:2d:8c:97:bf:e6:
                    37:6c:77:47:cf:6a:e0:dc:2a:ab:59:b8:b8:89:4b:
                    c1:23:d6:a4:94:92:3e:53:3a:b0:a6:e2:de:39:66:
                    c5:37:5d:a6:ba:89:ae:06:06:b3:d7:f7:75:61:7f:
                    79:0e:37:d1:21:85:36:74:ff:38:0c:0f:1d:5c:59:
                    a0:95:80:65:c1:17:b9:18:6a:75:2b:b4:32:0b:28:
                    f8:2d:0d:a7:8d:5b:d5:52:51:76:a3:84:e6:9c:d1:
                    91:2a:9f:f0:b6:3a:f2:a9:c9:5c:7e:58:63:a0:3e:
                    f9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:58:00:96:6A:BF:23:D9:D1:DC:53:B2:FB:33:9B:0E:58:CE:72:97
            X509v3 Authority Key Identifier:
                keyid:33:75:A9:61:34:C5:73:31:AF:54:DD:71:4E:D3:63:DA:B3:1B:6B:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/M3WpYTTFczGvVN1xTtNj2rMba9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3WpYTTFczGvVN1xTtNj2rMba9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115620/14A376446BA911EFA3B34684C4F9AE02/8334E4446BA911EFADEBED84C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:29:4e:03:df:c3:b2:e7:cb:a4:bd:3e:a9:81:d1:a9:cd:fc:
         07:dc:d3:82:c4:a0:42:42:37:b8:72:84:6a:61:6a:2e:55:28:
         3c:75:f5:b1:6c:88:1c:ba:88:9f:81:6f:02:a9:bb:ba:7a:c7:
         85:50:1d:97:36:1c:e6:f8:55:10:ae:09:39:dc:fb:82:41:fc:
         ec:f9:b3:4b:6d:33:68:ac:8d:8d:57:d8:cc:36:dc:68:f4:d0:
         63:17:2c:ec:00:b6:14:15:61:48:49:26:f4:70:5e:73:8f:1a:
         df:a5:3f:76:cc:b5:9b:52:0f:7a:ab:2e:57:ba:aa:a2:8e:b6:
         39:34:11:18:73:33:0c:fd:91:75:c0:be:b8:ed:bd:50:b5:e9:
         83:0e:28:78:2c:9c:b6:00:bd:52:6d:8a:24:b0:fe:31:b4:49:
         01:64:8b:f6:00:9e:cc:15:69:67:df:a5:92:55:6b:1f:f0:a2:
         b2:d4:8e:34:46:ee:fb:6e:40:e6:5d:ef:18:5c:4f:04:70:60:
         d6:a4:3b:00:4e:d5:96:49:ac:a3:72:ac:cf:39:2a:46:12:be:
         14:5d:e4:4b:eb:6f:49:a0:5b:72:e5:af:71:f1:67:18:fa:ea:
         dc:c1:e5:aa:43:45:e7:8a:d6:02:6d:86:40:a0:8c:b2:6c:0c:
         11:c3:b1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:59:19 2025 by rpki-client