Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/146766F4A47B11E9867CBF58C4F9AE02.roa
File:                     146766F4A47B11E9867CBF58C4F9AE02.roa (raw, json)
Hash identifier:          xeaHh4f0PcYoja3FW2MKcCuwzba5+DIVdsTI+jNxV6c=
Subject key identifier:   7C:89:DA:0F:D3:DE:1D:12:7F:97:5E:99:37:3D:BE:0C:80:A2:74:A6
Certificate issuer:       /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
Certificate serial:       354C
Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/146766F4A47B11E9867CBF58C4F9AE02.roa
Signing time:             Mon 18 Aug 2025 14:50:21 +0000
ROA not before:           Mon 18 Aug 2025 14:50:21 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     9911
IP address blocks:        165.21.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 14:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13644 (0x354c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260
        Validity
            Not Before: Aug 18 14:50:21 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68a33dad-2015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6d:47:99:b6:04:de:d0:b2:27:aa:de:ac:a3:
                    b1:69:2b:c7:02:34:1b:04:9f:f9:54:db:0c:23:1f:
                    7b:ad:fa:10:9e:8e:35:5e:69:4b:18:41:f0:9e:9e:
                    2d:36:9f:95:87:ce:96:75:82:11:18:09:50:69:03:
                    14:2a:64:4f:72:fb:77:25:1d:4d:3b:e2:ad:44:4d:
                    b5:9d:c4:55:e9:18:52:18:36:01:da:1a:10:c1:2a:
                    72:34:31:8f:b7:d6:b3:de:8e:9d:66:68:be:6d:eb:
                    8c:a0:d1:0a:09:f4:9f:4e:c9:ae:ac:39:44:fb:92:
                    c2:26:bc:2e:77:e4:2e:6b:9d:85:8c:2e:9d:36:95:
                    a9:a0:92:04:ad:0a:68:0c:4c:29:f2:40:d7:f1:c4:
                    96:ff:cf:02:f7:84:d2:35:db:a8:ae:65:ed:50:d3:
                    46:cd:e2:c7:10:e5:50:b7:95:81:a6:c5:25:36:74:
                    db:0c:c3:0f:00:61:f6:3c:73:e1:8f:06:d7:24:18:
                    b2:1d:e3:1c:13:6b:4a:fc:18:99:a6:3b:0f:f0:77:
                    7c:74:33:95:47:45:7b:a4:ac:f2:54:8b:41:43:95:
                    1c:c7:29:86:a8:0b:60:e2:87:10:87:e0:84:4c:1c:
                    0a:cf:da:21:91:e1:fc:cd:48:47:35:5b:4c:e2:95:
                    aa:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:89:DA:0F:D3:DE:1D:12:7F:97:5E:99:37:3D:BE:0C:80:A2:74:A6
            X509v3 Authority Key Identifier:
                keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/146766F4A47B11E9867CBF58C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.21.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:65:3d:84:15:59:f5:01:bc:bc:6d:f3:e1:95:e1:e9:60:21:
         07:de:af:b3:ad:4d:b7:6d:8c:be:d7:1c:b6:47:49:54:01:86:
         18:b3:b1:8e:a2:7b:91:2f:f1:fb:be:d3:d5:5b:58:9c:7e:2f:
         36:7c:57:dd:82:a7:c2:80:a1:02:02:70:b3:85:cd:53:d3:04:
         e5:b9:83:be:1b:62:36:d9:a1:45:4c:d4:14:be:00:43:6c:b6:
         27:b5:de:87:18:1f:58:9e:eb:7d:a1:a1:d9:30:fc:03:8b:cb:
         3d:a2:6a:75:ed:9f:cd:4d:d7:74:d7:33:4e:a4:b7:21:e7:97:
         16:cf:55:fd:fb:3b:a7:c1:1d:b9:03:4d:88:fd:47:cb:00:ad:
         31:5c:9a:5e:0e:68:c6:5c:1f:e0:20:e6:d8:c3:ae:80:26:d5:
         77:43:35:53:1b:38:86:a7:da:47:06:92:f5:8a:22:39:20:25:
         db:ab:5c:28:0c:ec:bb:e7:4a:f5:77:3d:73:5b:44:cb:5a:5e:
         8a:31:7f:eb:d4:e7:54:be:c3:77:00:9f:ee:c2:2b:28:67:a2:
         2e:31:de:cc:ab:35:69:32:0e:5e:21:4f:d5:d6:19:df:ab:4f:
         c0:7a:79:89:9b:5b:6e:b3:b9:8a:8e:17:19:f5:06:48:8a:31:
         80:45:6c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:16:23 2025 by rpki-client