Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/27AEE7D0979D11EFB1426839C4F9AE02.roa
File:                     27AEE7D0979D11EFB1426839C4F9AE02.roa (raw, json)
Hash identifier:          xNPSf2uxf0gfylw09N39nWcLaL34aWsQPkwDaLt++sk=
Subject key identifier:   AF:D6:31:4F:30:65:D2:27:47:6D:24:E3:78:6F:D3:1F:5B:AA:2D:19
Certificate issuer:       /CN=A9163EB9/serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C
Certificate serial:       DA
Authority key identifier: BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/27AEE7D0979D11EFB1426839C4F9AE02.roa
Signing time:             Tue 23 Sep 2025 06:25:35 +0000
ROA not before:           Tue 23 Sep 2025 06:25:35 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     131108
IP address blocks:        160.30.62.0/23 maxlen: 23
                          160.30.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl
                          rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:25:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163EB9, serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C
        Validity
            Not Before: Sep 23 06:25:35 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68d23d5f-1cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:26:7d:93:93:02:83:60:d2:1d:69:f9:02:fd:
                    25:6c:01:dc:ec:56:30:05:93:93:d3:88:06:a7:e4:
                    77:58:92:45:01:bc:01:4d:85:65:01:93:a1:cb:4e:
                    36:42:78:9c:ff:a8:ba:79:25:c9:b2:84:bd:f6:78:
                    dc:30:72:65:5a:dd:ed:fb:0b:8b:f5:9c:59:6f:5b:
                    bc:af:8e:61:af:87:5a:31:7a:4f:78:15:d1:29:a3:
                    5c:c8:d3:f6:48:76:e8:b3:f2:6a:11:d8:9f:fe:3a:
                    77:e9:60:56:21:c2:5f:9f:48:aa:e0:e0:78:86:20:
                    f4:1a:12:7b:56:2d:82:6f:a0:56:d7:7c:3c:a3:2c:
                    f3:b5:db:8a:f4:9f:e8:36:b9:5d:29:f6:44:57:35:
                    18:36:66:4f:43:cb:29:01:a6:f4:2f:e5:d9:11:0f:
                    53:6e:bf:f2:c7:af:93:ff:69:64:6f:25:26:de:0c:
                    92:c6:2c:f4:3b:a9:9e:91:af:90:c5:18:14:d4:50:
                    73:be:80:7b:e2:35:b1:a1:62:f4:15:7b:95:81:83:
                    ad:d9:10:a2:75:91:3e:d7:03:a7:03:dc:52:43:85:
                    b1:1a:2e:17:4c:d9:a9:71:59:66:24:58:7e:1c:77:
                    c9:11:8f:20:b3:b9:07:0d:72:16:c5:fc:ce:38:81:
                    7d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D6:31:4F:30:65:D2:27:47:6D:24:E3:78:6F:D3:1F:5B:AA:2D:19
            X509v3 Authority Key Identifier:
                keyid:BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/27AEE7D0979D11EFB1426839C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:7c:87:d8:89:46:16:18:66:95:67:c0:e1:af:8c:e8:44:f9:
         87:53:96:40:f7:f1:e6:b8:98:55:d2:8b:49:b5:68:64:e3:97:
         23:99:03:ca:12:80:3e:e9:97:aa:31:81:2b:eb:bb:2a:b0:26:
         8a:ca:8f:65:dd:59:e4:9d:c6:c1:97:bf:4d:06:f8:cf:a6:b0:
         64:ed:77:04:05:d9:cb:2b:3b:7a:8e:de:b3:f6:ee:92:43:37:
         51:a0:65:86:68:f3:c4:d8:b1:56:99:00:54:48:00:7f:e0:b2:
         8f:a7:e8:e4:ac:a5:1c:cc:8f:1e:df:f0:97:cc:72:77:00:12:
         7c:2b:36:b2:30:a4:3c:4b:9e:8e:97:a2:f2:b2:7d:4b:0c:11:
         aa:ac:03:d5:25:6d:67:34:9a:8c:53:c7:ed:73:e8:89:25:da:
         91:d9:ba:80:63:3d:6a:b7:f6:7c:ad:1a:f2:dd:fb:ad:39:ff:
         9b:49:ff:c9:26:2c:fe:72:ff:75:ea:b6:ec:3d:2d:79:9b:ac:
         f6:52:db:74:8a:2c:e2:c6:2c:cb:ba:47:92:36:60:0e:c3:bc:
         19:af:4a:b5:e4:23:e1:53:34:0e:7b:52:07:21:54:99:c0:df:
         9e:dd:14:df:ee:c1:dc:83:6d:53:79:1a:6e:23:f8:ee:24:70:
         ff:ec:2c:d9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjNFQjkxMTAvBgNVBAUTKEJDMEJGOEY5RDczQjdFOENGQ0M4RUE1RTlGNDJEN0E4
NTUyMzNEN0MwHhcNMjUwOTIzMDYyNTM1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGQyM2Q1Zi0xY2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlCZ9k5MCg2DSHWn5Av0lbAHc7FYwBZOT04gGp+R3WJJFAbwBTYVlAZOhy042
Qnic/6i6eSXJsoS99njcMHJlWt3t+wuL9ZxZb1u8r45hr4daMXpPeBXRKaNcyNP2
SHbos/JqEdif/jp36WBWIcJfn0iq4OB4hiD0GhJ7Vi2Cb6BW13w8oyzztduK9J/o
NrldKfZEVzUYNmZPQ8spAab0L+XZEQ9Tbr/yx6+T/2lkbyUm3gySxiz0O6meka+Q
xRgU1FBzvoB74jWxoWL0FXuVgYOt2RCidZE+1wOnA9xSQ4WxGi4XTNmpcVlmJFh+
HHfJEY8gs7kHDXIWxfzOOIF9OQIDAQABo4IClTCCApEwHQYDVR0OBBYEFK/WMU8w
ZdInR20k43hv0x9bqi0ZMB8GA1UdIwQYMBaAFLwL+PnXO36M/MjqXp9C16hVIz18
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VCOS9GQ0Q1NUMwQTU0
OUYxMUVGODZBRTU5MjJDNEY5QUUwMi92QXY0LWRjN2Zvejh5T3BlbjBMWHFGVWpQ
WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZBdjQtZGM3Zm96OHlPcGVuMExYcUZValBYdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjNFQjkvRkNENTVDMEE1NDlGMTFFRjg2QUU1OTIyQzRGOUFFMDIvMjdBRUU3RDA5
NzlEMTFFRkIxNDI2ODM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGgHj4wDQYJKoZIhvcNAQELBQADggEBACN8h9iJRhYYZpVn
wOGvjOhE+YdTlkD38ea4mFXSi0m1aGTjlyOZA8oSgD7pl6oxgSvruyqwJorKj2Xd
WeSdxsGXv00G+M+msGTtdwQF2csrO3qO3rP27pJDN1GgZYZo88TYsVaZAFRIAH/g
so+n6OSspRzMjx7f8JfMcncAEnwrNrIwpDxLno6XovKyfUsMEaqsA9UlbWc0moxT
x+1z6Ikl2pHZuoBjPWq39nytGvLd+605/5tJ/8kmLP5y/3Xqtuw9LXmbrPZS23SK
LOLGLMu6R5I2YA7DvBmvSrXkI+FTNA57UgchVJnA357dFN/uwdyDbVN5Gm4j+O4k
cP/sLNk=
-----END CERTIFICATE-----
Generated at Tue Oct 21 03:20:54 2025 by rpki-client