Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/52636904771911F083181320C4F9AE02.roa
File:                     52636904771911F083181320C4F9AE02.roa (raw, json)
Hash identifier:          1KusZBNNW/qOCnR0kl7JmRQp5eJkrJEh2HYRqvBUy6w=
Subject key identifier:   CD:63:8E:1D:1C:CF:13:D8:EA:D5:6F:7B:74:4A:AD:12:E0:76:BF:09
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0C3B
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/52636904771911F083181320C4F9AE02.roa
Signing time:             Tue 12 Aug 2025 01:11:49 +0000
ROA not before:           Tue 12 Aug 2025 01:11:49 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     401783
IP address blocks:        160.20.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 19:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3131 (0xc3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Aug 12 01:11:49 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=689a94d5-94fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:60:14:fa:ea:1f:62:94:76:dc:8f:ba:69:4b:
                    bb:83:32:ee:aa:36:08:67:ca:11:e4:53:79:ed:7c:
                    12:0b:10:a6:09:ab:65:67:61:19:4c:bd:bb:84:1e:
                    f2:ff:cd:0b:10:65:fd:b4:7e:6e:e8:b7:5b:2a:85:
                    b3:de:7a:55:2f:47:93:14:b7:15:01:3a:b0:3c:e7:
                    0d:54:2a:ad:c4:16:9b:8c:76:2e:fc:16:18:05:23:
                    7e:75:50:c3:6a:54:e7:d6:ed:24:7c:2f:eb:53:a5:
                    7e:c4:75:da:c5:33:2d:e5:9d:80:59:46:77:75:1e:
                    0c:04:30:65:a6:f5:cd:8b:b5:1a:46:1a:ef:d6:37:
                    01:5a:bd:d6:a2:d2:f4:9e:47:da:cd:45:aa:57:3a:
                    05:97:d1:bb:70:43:b8:09:a1:ed:67:11:cc:3d:41:
                    7d:2f:bb:28:96:b2:7e:7a:15:f0:6e:f6:68:0d:96:
                    91:8a:1f:9a:d1:1c:80:45:d5:55:01:bd:72:cc:37:
                    c3:0c:fd:71:f5:9b:61:fb:ca:d2:6c:c7:75:85:39:
                    25:df:5c:3e:76:25:f0:df:d2:9b:1f:d9:69:cc:da:
                    62:95:1a:73:e8:d4:fa:47:70:a9:4a:3b:d6:d8:5e:
                    32:fb:8f:05:23:59:52:d9:4f:e6:3d:c9:67:12:8c:
                    11:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:63:8E:1D:1C:CF:13:D8:EA:D5:6F:7B:74:4A:AD:12:E0:76:BF:09
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/52636904771911F083181320C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:fc:c0:34:3b:e9:50:5c:48:17:44:e0:3e:a1:6d:4d:40:d4:
         99:f7:62:0c:52:49:08:2c:c7:06:47:12:9c:61:a6:5b:a1:bc:
         14:1c:2a:ca:ac:80:ff:4f:3f:6d:51:83:37:c1:65:d2:79:83:
         0c:1b:5f:c2:ea:89:85:7d:20:9b:37:65:da:ae:9b:cc:3c:75:
         dd:c9:fb:45:33:39:81:3e:34:95:76:3f:40:c4:72:df:7f:23:
         06:bc:cb:51:f5:e4:3b:d6:7c:6f:0c:da:44:0e:75:69:f5:45:
         54:85:d6:4b:1f:76:70:a6:96:37:0c:60:e3:a7:15:ef:cc:08:
         b5:7a:a1:3f:7d:0e:29:55:59:08:a5:46:82:37:16:70:d8:b9:
         6f:4c:e1:5f:5d:2e:9b:d3:93:27:58:40:23:17:c7:0a:0b:6c:
         a4:b5:8c:b7:21:d0:c8:86:43:c0:ba:66:12:d5:f3:f7:cd:e0:
         40:ef:0a:9d:e0:3f:f1:be:ae:c7:ad:6f:0f:78:1c:e6:75:2c:
         c1:41:ef:4c:a3:87:f3:92:25:32:56:b0:49:9c:6d:48:7d:2f:
         70:fc:63:1d:e0:16:34:b3:bb:63:c3:45:df:93:aa:e7:40:0f:
         ff:5c:14:12:ec:bc:d1:67:06:fe:3a:9b:36:d0:6d:55:11:06:
         f3:d6:04:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:12:33 2025 by rpki-client