Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FD70F5608D4311F0B13B2181C4F9AE02.roa
File:                     FD70F5608D4311F0B13B2181C4F9AE02.roa (raw, json)
Hash identifier:          37m01vDFC1YEKWy1VxgRPGXzxYWA49Np1l/YPOq74J0=
Subject key identifier:   0E:33:B0:38:50:31:AC:2C:80:75:21:7E:EA:DA:E5:B7:18:E8:89:D7
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1F90
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FD70F5608D4311F0B13B2181C4F9AE02.roa
Signing time:             Tue 09 Sep 2025 06:12:41 +0000
ROA not before:           Tue 09 Sep 2025 06:12:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135760
IP address blocks:        160.22.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8080 (0x1f90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Sep  9 06:12:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68bfc558-b90b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:c3:15:f0:4e:e3:a8:cb:3f:69:a4:64:a2:
                    6c:52:9b:c3:08:5e:19:75:80:a0:63:8c:9b:1b:ad:
                    0b:f1:63:a2:40:b1:47:2c:6c:29:68:21:0c:47:b3:
                    93:0b:fd:ea:f6:32:50:e1:49:6d:0c:4f:5f:2c:54:
                    cc:64:1f:98:db:98:4d:4d:6c:1b:2a:82:f5:58:57:
                    b6:af:e6:46:37:17:e9:28:5d:1d:a5:cb:69:f7:e0:
                    70:41:0d:88:d9:ed:88:aa:a4:1a:e5:3c:3b:e8:ce:
                    db:6f:7f:96:18:29:78:34:fe:a6:94:c4:17:28:58:
                    6d:2d:1d:a9:ac:ba:31:2c:48:b0:6a:6b:8a:46:12:
                    8d:ca:43:ba:b3:67:59:55:97:6c:10:0f:64:88:49:
                    f9:7e:bc:d8:a8:b9:d3:c9:f5:63:d1:e1:4c:98:83:
                    b0:fe:94:99:17:8f:60:3e:29:c1:79:53:5c:be:80:
                    bb:6e:67:cd:96:d7:00:f8:71:08:61:56:27:75:60:
                    52:66:b3:c2:30:e8:02:c1:b0:0e:82:c4:01:53:ad:
                    24:ce:36:b9:bf:c9:d4:b8:8a:1e:bf:69:83:41:7f:
                    9f:48:1c:d3:7d:7f:0d:0f:45:cc:af:02:c4:93:7e:
                    7f:3f:0c:94:7a:b6:fc:6a:fb:48:25:15:b4:c2:07:
                    ac:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:33:B0:38:50:31:AC:2C:80:75:21:7E:EA:DA:E5:B7:18:E8:89:D7
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FD70F5608D4311F0B13B2181C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:b8:95:c0:d1:86:4e:67:12:d1:85:f5:ae:8e:2c:8f:58:ba:
         ca:a3:b4:08:db:16:d9:1c:ca:b2:b4:75:ce:0c:d6:d2:87:cb:
         c5:02:25:b0:ef:5f:45:ac:a6:80:58:58:43:97:f9:8d:6e:21:
         33:94:9e:3f:b5:69:04:16:bc:36:10:17:cb:37:cc:c5:d8:9b:
         1c:5e:12:a8:ea:e2:da:a3:db:a4:53:3f:7c:83:87:8a:62:27:
         49:cb:5a:9a:6f:1d:98:d1:6f:73:d5:d3:18:19:22:49:27:f0:
         a8:6e:7b:01:13:19:a1:86:36:09:85:54:69:1f:11:62:75:6f:
         0c:61:b8:7b:9c:78:0b:1e:c4:4c:6d:5f:cd:e2:95:40:26:70:
         5e:3c:50:22:40:3d:0c:1a:f7:aa:5e:75:96:a5:6e:1e:4c:7d:
         be:b7:f8:ba:36:fd:31:30:3d:2b:60:b2:a1:dc:05:d9:63:e9:
         4f:2d:b8:ac:1e:31:03:72:e1:f8:ba:0e:f0:68:2a:39:1a:ca:
         40:67:bf:c8:a8:b9:31:fa:59:af:05:f2:64:bc:05:22:15:65:
         7b:77:88:33:9f:80:96:de:f9:89:d8:e8:f0:40:2c:7b:16:0e:
         db:a9:4c:68:79:80:37:55:60:bf:49:a1:d7:4d:e7:1b:a4:72:
         4c:ae:a6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:00 2025 by rpki-client