Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/A17BA30CA6D111F08493B238C4F9AE02.roa
File:                     A17BA30CA6D111F08493B238C4F9AE02.roa (raw, json)
Hash identifier:          +jjUk6DWnhFJTZ2CeTeHF6nfZYcl/RdNtMmjvU5Ds8c=
Subject key identifier:   00:7A:DC:82:90:EF:C0:E6:B7:31:E3:91:84:EC:0B:26:54:B3:89:01
Certificate issuer:       /CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
Certificate serial:       017E
Authority key identifier: BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/A17BA30CA6D111F08493B238C4F9AE02.roa
Signing time:             Sat 11 Oct 2025 18:39:34 +0000
ROA not before:           Sat 11 Oct 2025 18:39:34 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     152322
IP address blocks:        157.10.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B39, serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E
        Validity
            Not Before: Oct 11 18:39:34 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=68eaa465-9301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:91:53:22:c6:68:5e:15:a0:84:23:13:a6:f1:
                    7e:b3:9c:72:15:7f:76:55:9b:e5:bf:03:7a:c4:0a:
                    ba:e7:8e:1a:a7:19:bf:e4:a0:50:65:0c:40:7b:72:
                    22:57:48:2b:a3:8f:07:4b:27:2e:9b:38:f7:53:24:
                    64:12:f8:e6:60:d8:f7:e6:df:27:1b:38:bd:09:ab:
                    ed:2c:91:76:26:06:72:fe:bc:76:aa:c7:8c:b7:c8:
                    ae:8c:13:ea:00:f2:f8:29:fe:c5:80:ef:fe:aa:71:
                    4c:3b:60:67:9e:1d:20:e1:d4:f3:9e:e9:6c:43:da:
                    ea:a3:b4:91:a7:5d:f5:f7:9c:ad:b3:73:b1:53:35:
                    d1:05:dc:92:e8:4a:9d:7a:00:81:7f:30:c0:51:3d:
                    84:8f:14:fb:26:c9:22:bb:7e:00:f0:c3:fe:f7:37:
                    a5:93:76:eb:0f:8d:61:2d:42:1e:26:93:6b:cb:e5:
                    4f:de:23:34:23:ea:4c:0d:15:9b:17:4f:56:d4:59:
                    9d:2d:b4:96:fe:56:f0:52:3a:ca:d0:b1:21:09:7c:
                    d0:ef:40:b5:30:21:95:85:34:9b:38:04:01:15:50:
                    2b:5c:19:33:37:a7:1c:85:e0:22:c9:74:42:10:eb:
                    74:04:3a:fe:f0:68:af:be:61:d3:80:c7:f4:88:0a:
                    18:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:7A:DC:82:90:EF:C0:E6:B7:31:E3:91:84:EC:0B:26:54:B3:89:01
            X509v3 Authority Key Identifier:
                keyid:BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/A17BA30CA6D111F08493B238C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:fd:1a:66:b5:6e:84:4f:ae:26:dc:a6:4d:46:48:78:65:69:
         bf:4d:a9:2d:42:92:3a:6f:9d:ff:83:07:bd:42:b1:da:7f:08:
         f1:14:e7:da:a8:e8:a5:69:85:a5:7f:43:e0:7b:dd:9b:e3:14:
         99:a2:6e:d5:ed:8d:74:58:78:e0:85:b6:eb:96:8c:eb:c3:e4:
         86:de:c8:cd:7b:6b:c3:46:40:c2:a2:e4:88:e0:00:0e:df:9a:
         2d:29:cd:92:45:5c:9b:f5:78:57:bc:29:94:28:b2:46:f7:22:
         30:29:14:b1:08:5d:1d:e2:8c:87:28:85:4b:06:4d:36:3d:2b:
         25:d3:5a:6f:c3:4b:94:01:9d:57:83:db:0b:9e:ab:4c:cb:f2:
         aa:c0:a0:d9:a4:a5:08:eb:42:d8:db:ec:bb:71:d5:f9:da:3c:
         d7:d6:26:2a:b1:c0:83:ed:ea:18:77:bb:d7:a5:d0:ee:71:e0:
         8a:9c:49:b0:b9:bb:f5:a3:b4:b4:9c:a7:94:7c:14:ce:e0:bc:
         35:95:8a:4a:68:49:1c:01:aa:3f:64:db:d2:b4:a6:69:cb:3e:
         d6:b3:2a:c1:e2:c9:ff:d3:41:bc:e6:6c:8f:f6:04:95:3a:dd:
         6a:21:91:0c:7e:fb:fb:fe:87:52:ad:f4:e1:2d:35:e3:0c:61:
         e7:da:9f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:36:24 2025 by rpki-client