Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/3EEBC4867BFF11EFA2839E45C4F9AE02.roa
File:                     3EEBC4867BFF11EFA2839E45C4F9AE02.roa (raw, json)
Hash identifier:          +qIyoxy4aGRwH3KPJiIeeGzTmFk3xSC3JgRiA3rxQ1E=
Subject key identifier:   4F:FF:EB:E1:3F:87:88:3A:93:B7:B6:8D:6F:C7:57:A1:C4:A6:E3:D4
Certificate issuer:       /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
Certificate serial:       BD
Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/3EEBC4867BFF11EFA2839E45C4F9AE02.roa
Signing time:             Thu 11 Sep 2025 06:45:59 +0000
ROA not before:           Thu 11 Sep 2025 06:45:59 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     153334
IP address blocks:        160.187.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl
                          rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B
        Validity
            Not Before: Sep 11 06:45:59 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68c27027-1010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ce:e4:de:f6:0f:fb:73:81:79:8f:96:b1:cd:
                    81:94:7d:2a:27:b5:6e:dc:71:1d:73:af:52:71:a5:
                    e5:68:87:7d:bf:2e:9f:35:c0:d9:7f:31:ce:2a:5a:
                    e6:93:20:10:9d:4b:7d:2c:90:f8:be:80:36:d8:9c:
                    d9:19:93:ed:8d:4f:3a:a4:ec:68:9b:ae:fb:15:09:
                    96:39:4d:3d:04:de:e7:30:69:41:b7:49:f5:b2:43:
                    c9:d8:2e:b5:0f:c9:d2:31:68:95:f5:e8:e8:c2:50:
                    7a:1c:6b:2e:1a:46:8e:83:b1:3b:fb:56:3e:03:33:
                    2f:b7:e7:53:ff:cf:82:32:72:f1:9b:6b:f2:4b:53:
                    3f:83:d2:8b:31:89:77:ca:50:b0:da:41:6f:e2:1b:
                    c9:be:ce:44:bf:e1:49:1b:41:ba:56:52:80:35:8a:
                    f2:6d:52:a3:2f:10:e8:b0:bf:55:d1:53:83:f4:bc:
                    1e:03:a3:17:c3:60:07:a0:c3:96:2d:10:4a:ba:f5:
                    8a:f1:eb:9f:ae:a4:92:e2:7f:ff:6e:ec:14:94:d7:
                    63:20:de:0e:10:15:09:5e:ca:ca:d9:34:4b:16:7c:
                    9e:e4:d0:69:6a:3c:df:fc:0b:84:da:b1:16:e7:d6:
                    18:53:62:4e:22:43:9c:03:46:b2:3d:de:dd:bc:16:
                    84:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FF:EB:E1:3F:87:88:3A:93:B7:B6:8D:6F:C7:57:A1:C4:A6:E3:D4
            X509v3 Authority Key Identifier:
                keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/3EEBC4867BFF11EFA2839E45C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:77:91:fb:27:c5:de:75:45:77:57:fb:02:63:df:0c:b7:3b:
         e2:27:28:d9:ff:63:0c:8a:2e:b2:ed:1b:c6:99:76:37:99:ab:
         e4:85:f3:66:e3:f9:41:20:e8:31:89:16:d0:d2:aa:98:cf:d8:
         2c:f5:51:5b:c6:4b:aa:7e:69:40:0d:a0:8a:24:c3:9f:c5:a0:
         e1:25:87:41:73:3f:b3:41:85:c5:e6:fd:b1:1f:2e:df:c4:ff:
         f4:81:90:dc:82:78:6b:38:51:17:8e:b9:08:97:24:ff:0b:ce:
         73:4a:e4:80:35:40:a6:54:8b:59:38:ab:8d:ef:71:b8:a5:56:
         af:03:96:4f:0c:28:6e:82:bf:c3:0e:ca:3a:87:be:ca:b1:af:
         ca:4c:41:d8:0f:ee:e7:0a:35:51:2e:3e:30:c5:7a:bd:08:7c:
         11:e0:eb:12:5d:40:55:1a:5d:20:64:36:15:f2:4d:b3:df:2f:
         60:4d:8e:0f:b9:35:8b:51:da:3c:6a:4e:98:5a:08:b6:ad:7f:
         ee:c3:a5:27:28:99:69:20:27:13:77:4e:39:5a:e4:6f:82:f5:
         5e:76:02:15:af:94:b4:0e:43:37:7b:d0:2b:06:3f:b8:ba:05:
         bd:b0:2e:05:35:d9:f3:77:fe:62:de:b7:71:df:d5:37:80:f0:
         5e:04:41:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:48:59 2025 by rpki-client