Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/C06D45B6961611F0870D4413C4F9AE02.roa
File:                     C06D45B6961611F0870D4413C4F9AE02.roa (raw, json)
Hash identifier:          w0+vj4aVz0K4Becg/iBGdIuc8dYR3B+infU6zn+iFnc=
Subject key identifier:   45:7A:D2:1D:90:23:62:9A:B2:27:77:A2:D5:FE:CC:22:6F:24:35:A3
Certificate issuer:       /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Certificate serial:       FB
Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/C06D45B6961611F0870D4413C4F9AE02.roa
Signing time:             Sat 20 Sep 2025 11:41:31 +0000
ROA not before:           Sat 20 Sep 2025 11:41:31 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     150774
IP address blocks:        160.22.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl
                          rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:05:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91443DC, serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
        Validity
            Not Before: Sep 20 11:41:31 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68ce92eb-5386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2c:de:4d:b2:6e:f3:8b:99:4c:71:47:d1:39:
                    5f:4a:64:0f:a0:6b:5f:aa:d7:9a:ed:15:6f:e2:81:
                    36:9d:79:ca:b3:55:fa:51:c0:84:30:c5:40:47:f6:
                    65:52:21:42:52:83:2e:39:9b:86:c8:ff:58:c1:30:
                    87:61:43:66:26:00:07:86:d1:49:14:4e:ab:17:11:
                    9f:c0:02:ba:3e:1b:76:d7:e9:7b:57:96:9f:08:86:
                    7e:b0:f1:7f:ef:c2:43:fd:41:7a:b8:35:10:40:cf:
                    69:09:8d:4c:6e:2a:c5:56:ac:e6:c9:35:2b:e0:3e:
                    10:ed:c9:22:14:1b:b3:8b:0c:59:f5:d8:1c:6a:93:
                    90:1e:8e:dc:7e:42:e0:c7:b8:cd:2c:7a:6a:79:7e:
                    5a:2e:db:4c:8d:06:63:2f:9f:a0:f7:26:ff:26:54:
                    9b:17:16:ca:af:14:c1:46:c6:57:03:33:d8:f5:fc:
                    8e:38:93:61:85:b3:21:55:3e:3b:74:1f:ae:d9:da:
                    13:7d:cc:64:37:38:46:9f:48:4c:21:6b:ad:6d:89:
                    dc:c2:4e:e0:d7:28:76:37:c4:05:a6:62:46:e5:05:
                    d1:1d:5e:2f:26:b0:18:5a:4e:b9:c3:b0:10:ab:5a:
                    4b:0e:12:64:15:e9:b6:cf:f6:74:6c:de:70:f9:96:
                    1c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7A:D2:1D:90:23:62:9A:B2:27:77:A2:D5:FE:CC:22:6F:24:35:A3
            X509v3 Authority Key Identifier:
                keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/C06D45B6961611F0870D4413C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:e5:7a:bc:b5:2f:95:fd:1c:72:03:24:b4:2c:5e:8e:05:43:
         a5:d2:17:da:35:40:54:c4:c1:94:7f:98:61:23:7a:d3:69:4e:
         0a:1e:70:d0:e5:81:d5:e3:e0:5e:5f:28:31:6e:70:a0:d6:73:
         b7:48:ef:41:27:ed:39:c3:f6:f4:78:5f:44:50:07:74:b2:01:
         83:da:e1:d3:ec:92:42:fd:b4:12:8c:89:e2:39:a3:bd:53:d2:
         37:cf:c1:4c:0e:7e:d8:44:43:85:5c:13:80:29:c1:e8:65:aa:
         14:47:16:9a:92:fa:f3:49:6f:c9:d8:e6:34:8d:c1:85:af:da:
         48:a3:f5:76:b4:51:b1:ad:2e:fe:eb:d7:4d:6d:41:e2:be:f8:
         78:f3:90:95:27:29:ca:d1:cf:4e:34:b5:05:e3:36:1c:d6:6c:
         65:71:7e:31:eb:a2:a3:77:9e:52:77:8c:c3:fc:82:f0:17:63:
         d2:4d:63:71:0b:49:65:af:84:3f:94:b3:bc:80:d9:16:e2:71:
         d4:a8:48:83:b3:49:24:4b:67:ec:29:1a:7e:fa:9c:59:f0:ee:
         5e:31:fd:23:a3:2c:73:ce:fa:1a:2a:6c:73:c5:5b:98:2c:34:
         2a:dc:55:f7:ba:b6:14:36:14:37:38:ac:42:ba:3d:ce:bd:10:
         af:42:37:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:52 2025 by rpki-client