Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/EF63DB0EA26B11EF8F077C3FC4F9AE02.roa
File:                     EF63DB0EA26B11EF8F077C3FC4F9AE02.roa (raw, json)
Hash identifier:          iLpw/uJbge7uZ/WmLMuhiuh6b3ClTayyECZNu36JGVw=
Subject key identifier:   44:27:3D:E1:3F:D1:37:0A:7C:85:51:5A:22:1A:48:94:CA:83:0F:47
Certificate issuer:       /CN=A918F0E2/serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
Certificate serial:       AC
Authority key identifier: 80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/EF63DB0EA26B11EF8F077C3FC4F9AE02.roa
Signing time:             Fri 03 Oct 2025 07:02:31 +0000
ROA not before:           Fri 03 Oct 2025 07:02:31 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     149506
IP address blocks:        160.187.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl
                          rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F0E2, serialNumber=807E688AA50BD3E38BE31B5D4C4E060804EB15DC
        Validity
            Not Before: Oct  3 07:02:31 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68df7507-5c98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:08:8f:37:c4:cd:30:82:f6:a6:5c:e4:40:ac:
                    17:a5:68:f1:ec:58:e7:b7:ce:a1:39:72:e3:86:77:
                    90:55:13:a3:9e:75:de:f0:bc:f1:05:d1:93:2a:60:
                    d8:c9:48:66:85:81:8b:c9:47:9b:95:19:18:38:a7:
                    e4:2e:7a:23:2c:1e:c5:bb:e5:a7:53:fb:68:53:34:
                    33:e5:18:b4:c1:24:a9:f2:98:07:99:63:aa:d2:a2:
                    7f:29:35:92:ef:36:9d:7e:3b:50:f0:59:12:26:f8:
                    03:57:b5:9e:f5:93:22:83:3c:b7:db:07:88:4d:b9:
                    ed:be:e6:3e:47:91:e1:d5:4a:2b:09:ce:c6:c7:e4:
                    31:23:53:6a:b2:bb:93:35:23:b2:33:fe:e7:63:16:
                    06:e9:36:65:22:fb:e6:3a:a3:4a:05:6d:25:ad:5c:
                    f6:66:86:50:c4:1a:99:e0:10:f2:cf:03:b2:d5:de:
                    9f:ec:bc:12:46:ba:68:1c:2d:e2:ac:bc:ad:ce:fa:
                    74:bb:3d:8c:e8:a3:8e:e7:74:ef:83:f9:a0:e2:6c:
                    7e:d8:e1:2e:ca:fa:a1:c4:72:5d:22:bb:08:9d:9f:
                    99:9d:89:63:dd:58:74:54:fa:ef:2a:43:50:bc:c5:
                    bd:5f:8b:8c:f3:58:d3:af:bb:1f:40:48:6b:5f:13:
                    2f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:27:3D:E1:3F:D1:37:0A:7C:85:51:5A:22:1A:48:94:CA:83:0F:47
            X509v3 Authority Key Identifier:
                keyid:80:7E:68:8A:A5:0B:D3:E3:8B:E3:1B:5D:4C:4E:06:08:04:EB:15:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/gH5oiqUL0-OL4xtdTE4GCATrFdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gH5oiqUL0-OL4xtdTE4GCATrFdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F0E2/2B4BB42EA25E11EFA38D9375C4F9AE02/EF63DB0EA26B11EF8F077C3FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:9f:16:99:02:bc:f2:c5:bd:bb:b7:1c:88:84:2d:95:12:0a:
         d4:d3:ee:80:22:7e:eb:d6:e1:d8:59:5f:b0:70:55:c5:63:8e:
         88:89:c6:9d:af:79:b4:7e:7f:32:24:5d:83:93:50:68:3f:12:
         62:b0:84:8c:05:cb:8f:bc:b8:c3:41:20:db:d0:e7:89:6d:ef:
         90:7d:74:a8:6c:9c:36:a6:5d:a6:5e:44:88:be:9e:59:5b:26:
         04:47:e6:a5:2b:51:57:7d:c5:69:f3:9c:a6:20:91:9b:1a:00:
         f6:61:7f:9a:ed:aa:14:76:63:8c:b3:bd:16:15:2c:32:25:fd:
         e6:41:cb:50:11:50:c3:f3:07:10:82:d8:62:30:cb:9b:0d:8f:
         ca:35:de:d1:d5:13:80:4c:9e:33:94:96:14:17:f9:15:50:63:
         17:cd:2f:4b:d3:59:d8:f0:3b:a5:70:6c:5d:22:cb:19:43:c7:
         3b:54:ca:73:46:db:a1:e1:31:5a:12:d8:30:18:e5:15:4e:b1:
         54:ad:91:2f:bc:86:b0:84:ff:7a:d7:b0:5b:cf:f6:15:54:2e:
         a1:8d:51:f0:fa:30:96:ac:00:7c:23:40:a4:1a:8d:b0:8c:ee:
         8a:bb:da:da:83:b2:5d:a9:8b:f1:56:b5:08:07:a1:89:75:c5:
         a6:3c:96:a9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEYwRTIxMTAvBgNVBAUTKDgwN0U2ODhBQTUwQkQzRTM4QkUzMUI1RDRDNEUwNjA4
MDRFQjE1REMwHhcNMjUxMDAzMDcwMjMxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGRmNzUwNy01Yzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuwiPN8TNMIL2plzkQKwXpWjx7Fjnt86hOXLjhneQVROjnnXe8LzxBdGTKmDY
yUhmhYGLyUeblRkYOKfkLnojLB7Fu+WnU/toUzQz5Ri0wSSp8pgHmWOq0qJ/KTWS
7zadfjtQ8FkSJvgDV7We9ZMigzy32weITbntvuY+R5Hh1UorCc7Gx+QxI1NqsruT
NSOyM/7nYxYG6TZlIvvmOqNKBW0lrVz2ZoZQxBqZ4BDyzwOy1d6f7LwSRrpoHC3i
rLytzvp0uz2M6KOO53Tvg/mg4mx+2OEuyvqhxHJdIrsInZ+ZnYlj3Vh0VPrvKkNQ
vMW9X4uM81jTr7sfQEhrXxMv2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFEQnPeE/
0TcKfIVRWiIaSJTKgw9HMB8GA1UdIwQYMBaAFIB+aIqlC9Pji+MbXUxOBggE6xXc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjBFMi8yQjRCQjQyRUEy
NUUxMUVGQTM4RDkzNzVDNEY5QUUwMi9nSDVvaXFVTDAtT0w0eHRkVEU0R0NBVHJG
ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2dINW9pcVVMMC1PTDR4dGRURTRHQ0FUckZkdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEYwRTIvMkI0QkI0MkVBMjVFMTFFRkEzOEQ5Mzc1QzRGOUFFMDIvRUY2M0RCMEVB
MjZCMTFFRjhGMDc3QzNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACgu18wDQYJKoZIhvcNAQELBQADggEBAH6fFpkCvPLFvbu3
HIiELZUSCtTT7oAifuvW4dhZX7BwVcVjjoiJxp2vebR+fzIkXYOTUGg/EmKwhIwF
y4+8uMNBINvQ54lt75B9dKhsnDamXaZeRIi+nllbJgRH5qUrUVd9xWnznKYgkZsa
APZhf5rtqhR2Y4yzvRYVLDIl/eZBy1ARUMPzBxCC2GIwy5sNj8o13tHVE4BMnjOU
lhQX+RVQYxfNL0vTWdjwO6VwbF0iyxlDxztUynNG26HhMVoS2DAY5RVOsVStkS+8
hrCE/3rXsFvP9hVULqGNUfD6MJasAHwjQKQajbCM7oq72tqDsl2pi/FWtQgHoYl1
xaY8lqk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:44:37 2025 by rpki-client