Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/4E9597086B5C11EFABB11F60C4F9AE02.roa
File:                     4E9597086B5C11EFABB11F60C4F9AE02.roa (raw, json)
Hash identifier:          Co6tkDsI5HQErtzjpED6IOpErLBa9412vvEmJqPigVc=
Subject key identifier:   C4:A2:E8:2B:43:95:E5:94:2B:F2:44:FB:18:E0:D6:5C:19:7B:1A:5A
Certificate issuer:       /CN=A9176C8F/serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
Certificate serial:       BD
Authority key identifier: 4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/4E9597086B5C11EFABB11F60C4F9AE02.roa
Signing time:             Tue 19 Aug 2025 06:44:28 +0000
ROA not before:           Tue 19 Aug 2025 06:44:28 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     152475
IP address blocks:        160.30.128.0/24 maxlen: 24
                          160.30.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl
                          rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176C8F, serialNumber=4E7ED951C4F89F11F194468EA81544D7335E4F59
        Validity
            Not Before: Aug 19 06:44:28 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68a41d4c-f874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:88:7d:c4:33:72:b7:e7:e0:7c:99:16:bf:15:
                    4b:d7:49:c9:9b:d7:64:e3:0c:c0:d1:05:b7:ad:1d:
                    85:c7:d7:f1:70:23:f3:e9:1e:d0:d6:64:07:b6:fc:
                    fa:be:6f:4a:15:4f:7c:79:dc:36:94:9e:ae:3f:ca:
                    43:e7:b0:02:05:5a:a1:e7:2a:17:14:88:3c:82:04:
                    fe:47:00:e9:b2:1f:c9:77:68:60:57:04:52:12:a9:
                    21:f8:97:1c:95:c4:20:e0:3d:6c:fd:2c:5a:72:6a:
                    1a:83:6c:35:7a:31:81:e8:fc:b4:d6:8a:62:42:bd:
                    53:7d:ac:8b:22:8a:3f:c1:49:c3:4b:c0:b4:9d:4d:
                    14:74:aa:8a:f6:a1:af:12:f4:9f:d8:4e:3c:17:84:
                    0c:64:a2:bb:0d:50:f9:69:6a:3e:35:c8:68:fd:5f:
                    a5:1b:3d:cd:ac:f8:d4:88:e5:74:20:5d:bc:1b:e9:
                    a5:60:a4:68:4c:a3:e6:c7:f3:06:96:b7:fb:56:f9:
                    5d:79:c4:a8:ca:58:6e:e9:32:38:67:37:e3:12:e5:
                    f2:0d:46:43:b3:50:5f:6f:93:6f:6f:78:b9:0a:07:
                    af:75:9f:50:75:dc:b9:a2:4d:42:7c:18:2b:79:82:
                    11:d1:d0:cb:26:e2:72:3a:e3:a4:ab:8f:95:e7:73:
                    37:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A2:E8:2B:43:95:E5:94:2B:F2:44:FB:18:E0:D6:5C:19:7B:1A:5A
            X509v3 Authority Key Identifier:
                keyid:4E:7E:D9:51:C4:F8:9F:11:F1:94:46:8E:A8:15:44:D7:33:5E:4F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Tn7ZUcT4nxHxlEaOqBVE1zNeT1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/F14EED986B5A11EFBC99925CC4F9AE02/4E9597086B5C11EFABB11F60C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e6:8b:02:c3:6d:a1:d0:58:a2:90:42:2b:5b:fc:9e:af:67:32:
         a0:7f:54:61:5d:aa:85:b5:5c:05:5d:29:d2:0b:a5:51:cb:8e:
         6c:3f:42:90:29:43:b9:3e:25:20:c3:37:a8:18:81:cc:38:16:
         48:8a:98:14:36:2b:ad:b4:5f:88:bb:b5:1b:1e:32:34:c9:1f:
         3d:42:64:46:cb:fb:93:25:a6:67:4c:f5:3f:33:e2:6d:90:b9:
         01:d6:93:ac:b8:c4:15:86:bf:1b:04:3c:42:ef:8f:d8:ea:a0:
         77:30:74:53:c2:c7:19:6e:b2:4a:89:d9:9a:b0:c8:eb:48:92:
         9c:52:4c:7d:a5:42:14:86:17:76:cc:bb:78:db:23:8e:55:e1:
         7a:53:b0:16:cf:f3:29:dd:a3:7b:57:aa:49:ab:d1:e3:0a:5c:
         29:4b:fd:e0:1f:77:e5:71:0e:cd:be:de:ba:83:1a:57:f4:78:
         1a:2e:fa:f4:a5:43:11:87:08:c4:fe:28:74:6c:d8:cf:fb:5b:
         0c:ab:0f:d7:4a:18:5c:b1:d0:ae:89:4f:45:bf:fd:08:c4:9a:
         f9:88:5c:9f:f3:72:13:32:a8:4a:b6:d5:42:ee:d7:0b:3c:28:
         b5:e7:d1:dc:e5:c0:03:84:31:3a:51:10:4d:6c:dc:52:7b:31:
         bb:2d:02:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:35:56 2025 by rpki-client