Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/144D9AA823F011F0B0D6F263C4F9AE02.roa
File:                     144D9AA823F011F0B0D6F263C4F9AE02.roa (raw, json)
Hash identifier:          lyaciBaHQ7wicHWM/adA9CDhCXcjs8ttP7h7VzDSE2s=
Subject key identifier:   E6:0B:AE:5D:32:67:9D:9A:02:F8:1F:A3:FF:43:53:65:6A:6A:A7:4C
Certificate issuer:       /CN=A9179F64/serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
Certificate serial:       F3
Authority key identifier: 32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/144D9AA823F011F0B0D6F263C4F9AE02.roa
Signing time:             Sat 27 Sep 2025 06:34:55 +0000
ROA not before:           Sat 27 Sep 2025 06:34:55 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     140288
IP address blocks:        160.30.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl
                          rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:37:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179F64, serialNumber=32D353743C8FE2F08E97B22E5B609ABC14CCFE3B
        Validity
            Not Before: Sep 27 06:34:55 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68d7858e-9b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e0:c2:0d:5f:3d:1c:7e:a3:46:1b:ba:2f:30:
                    44:cd:bb:09:44:dd:e3:23:8f:73:7b:f4:35:53:c4:
                    da:ff:0a:ba:b3:ef:fc:7e:f5:4a:83:b8:5a:76:bf:
                    5f:54:ca:11:42:af:e0:c6:ab:26:37:2a:ce:b2:7c:
                    ff:05:36:82:a8:00:4d:c5:19:73:43:c6:5e:99:90:
                    d1:77:7c:eb:d2:d2:bc:42:db:63:6b:98:ba:45:14:
                    51:6b:f5:88:70:10:96:2f:77:7d:cf:19:dc:02:68:
                    d9:32:78:d5:87:1e:17:0d:8e:e0:0d:97:31:e3:c6:
                    13:b3:a6:d2:1e:b7:43:22:dc:47:94:8f:da:bd:e1:
                    0d:4b:92:51:52:0f:a8:93:80:12:3a:5a:da:2e:04:
                    4b:7b:c9:ab:42:56:f7:5a:9f:31:c4:64:06:04:95:
                    e2:e5:a1:3d:4c:03:b0:65:ba:5c:7b:5b:10:fc:31:
                    ed:e1:ad:63:56:14:2a:6c:66:d9:23:0f:0f:7b:9a:
                    70:91:13:dc:89:e2:b1:2f:60:d6:27:a2:3f:62:1f:
                    9c:b2:b6:2f:37:f4:1f:04:90:5a:a9:b9:25:0c:7f:
                    19:3d:ab:e2:3f:63:3f:8b:7f:7f:69:c6:1b:00:15:
                    ec:51:9c:e1:69:d3:22:ec:18:6b:f6:15:3e:d2:ad:
                    b5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0B:AE:5D:32:67:9D:9A:02:F8:1F:A3:FF:43:53:65:6A:6A:A7:4C
            X509v3 Authority Key Identifier:
                keyid:32:D3:53:74:3C:8F:E2:F0:8E:97:B2:2E:5B:60:9A:BC:14:CC:FE:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/MtNTdDyP4vCOl7IuW2CavBTM_js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MtNTdDyP4vCOl7IuW2CavBTM_js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/77BF0192624B11EFAB120F4FC4F9AE02/144D9AA823F011F0B0D6F263C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:8d:b4:f3:23:b1:ca:be:f6:1f:29:66:38:1b:c0:ef:0c:ca:
         fe:5a:30:0c:39:c2:d3:6b:1e:a3:43:8d:23:81:54:3a:f0:ad:
         35:e5:17:00:26:1c:79:86:06:8a:1f:7c:4f:8e:40:ab:f0:07:
         c5:b3:fd:81:c2:24:51:83:7d:b4:28:ca:64:73:07:f5:fc:af:
         07:2c:39:c0:f2:9e:12:dd:a7:8c:ae:f0:1b:e8:5c:09:0b:43:
         a7:bf:0f:9e:31:39:83:99:5c:c9:68:cf:13:4c:40:a7:f1:b6:
         5a:97:e4:7f:c7:e1:1f:52:01:4a:62:38:08:fa:54:fd:67:5a:
         78:6a:41:9b:d0:9e:a8:84:09:fa:bf:4f:e9:c4:57:b7:c6:7b:
         b6:b6:31:2c:72:57:16:e0:77:23:9f:03:7c:fc:24:b2:6b:49:
         27:fd:21:63:97:3d:02:5c:dc:c4:2d:18:d1:85:c0:0f:76:59:
         71:75:13:6d:dc:0b:8c:92:b4:9e:c2:3b:eb:32:8c:07:c8:50:
         a3:68:6d:1c:b8:bc:66:0c:93:05:23:81:e6:cf:02:aa:72:03:
         83:9a:d6:18:3e:21:c5:f6:89:8c:ba:a9:05:ac:69:5e:49:c5:
         0a:65:61:77:d2:42:71:42:e3:00:2f:39:01:93:78:cb:f4:f7:
         31:76:d8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:34:57 2025 by rpki-client