Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/D5A3117E85DF11EFA2C33754C4F9AE02.roa
File:                     D5A3117E85DF11EFA2C33754C4F9AE02.roa (raw, json)
Hash identifier:          sJiJ1naY/4cR2Pgo/DEru8iJf9KG6T1eb6PbQmIPhNY=
Subject key identifier:   AC:4F:0A:31:DA:AA:3E:4F:15:8F:55:66:83:D9:E5:6C:93:A6:9D:E4
Certificate issuer:       /CN=A91336DF/serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
Certificate serial:       A5
Authority key identifier: 8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/D5A3117E85DF11EFA2C33754C4F9AE02.roa
Signing time:             Wed 13 Aug 2025 07:16:53 +0000
ROA not before:           Wed 13 Aug 2025 07:16:53 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153183
IP address blocks:        160.30.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl
                          rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:23:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91336DF, serialNumber=8B5E8EBABE09A1F493D10253C1A3B93939BFCA8A
        Validity
            Not Before: Aug 13 07:16:53 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=689c3be5-5eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:93:5f:fb:c9:e5:4b:60:69:aa:f4:cd:3d:3e:
                    d3:31:78:65:69:33:c2:2b:24:e9:8d:9e:a3:4a:03:
                    a1:1f:9f:84:34:ed:28:d2:42:1b:3a:4d:42:e0:94:
                    60:97:dc:9a:dd:e1:e0:16:92:07:5e:02:6d:2f:3e:
                    7a:9b:c4:ca:b0:f0:98:e5:54:ae:66:7e:a6:b7:b8:
                    b5:e3:62:49:4e:63:2a:7b:7c:78:73:20:49:b4:bb:
                    2f:2b:82:c1:53:82:5f:75:a5:e3:f5:7a:cd:8d:d6:
                    e4:fc:40:7b:9b:6e:3e:c8:0d:2d:51:10:fa:1f:ce:
                    f5:f0:45:93:a6:64:63:d1:61:b9:3e:76:bd:32:04:
                    0a:01:d9:4f:7d:36:74:ff:5f:66:04:7c:49:86:7d:
                    2e:68:4d:96:17:7c:fe:78:e2:f4:28:e9:4a:7c:3c:
                    e7:4b:74:4c:f6:f4:f1:d0:96:25:2f:95:e6:fd:9f:
                    dd:ef:21:dd:bc:15:d7:91:1f:2b:f1:25:4c:95:65:
                    2f:1e:a1:57:6f:13:62:c4:14:e8:5e:2d:52:ee:12:
                    97:e3:0e:9a:a1:57:18:06:69:27:a0:35:24:53:8e:
                    41:6a:6c:11:72:32:b1:e7:5e:86:c3:81:28:6c:9c:
                    2d:cc:1f:c3:93:f5:99:3c:3d:34:79:f4:57:c7:4f:
                    b3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4F:0A:31:DA:AA:3E:4F:15:8F:55:66:83:D9:E5:6C:93:A6:9D:E4
            X509v3 Authority Key Identifier:
                keyid:8B:5E:8E:BA:BE:09:A1:F4:93:D1:02:53:C1:A3:B9:39:39:BF:CA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/i16Our4JofST0QJTwaO5OTm_yoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i16Our4JofST0QJTwaO5OTm_yoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/1A362A56813F11EF9CCE1A1AC4F9AE02/D5A3117E85DF11EFA2C33754C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:47:74:e3:f2:3c:53:cf:f8:44:97:40:dd:2c:7c:e1:1f:75:
         d6:d8:e7:70:9b:1e:a0:d3:6d:f8:a3:d7:0e:a7:90:00:5c:1d:
         1a:f6:50:0d:23:68:d0:7e:f1:d2:1c:9c:19:24:d1:14:c0:7b:
         eb:ed:94:45:db:1a:12:d8:e1:8e:10:4e:cb:35:09:e8:cc:07:
         76:6b:eb:2f:7d:bc:c5:6d:b9:09:96:77:c0:73:4d:a4:7b:83:
         04:5c:a8:19:43:ac:f8:86:fb:85:2f:05:08:f5:1e:94:a2:af:
         be:bf:23:4c:cc:d9:73:a5:2a:da:a7:14:b6:0d:db:83:b4:47:
         66:2c:69:c4:49:84:63:38:12:70:8f:74:a5:57:cb:2e:49:66:
         5e:25:33:19:bb:c5:89:d5:4a:3f:85:ae:42:ec:d4:75:61:11:
         5c:04:1f:4b:d2:4a:1d:56:68:16:6d:91:0c:61:fe:1f:0e:08:
         c6:bf:87:25:4e:21:6a:d4:34:67:35:9e:4c:35:6b:fd:44:6d:
         7f:13:df:d8:db:27:b8:08:27:4c:bb:e3:6a:4b:86:63:46:3a:
         2c:74:00:c3:de:6b:b0:c7:81:0c:67:9c:1a:6a:75:32:10:09:
         8a:10:c7:ad:ef:bf:85:81:71:53:2a:e9:6a:a0:94:c0:30:a6:
         93:bf:fa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:53:32 2025 by rpki-client