Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/139C500E3FEE11EFADFD8221C4F9AE02.roa
File:                     139C500E3FEE11EFADFD8221C4F9AE02.roa (raw, json)
Hash identifier:          UDMdam5CVPEajBvKs4T0wWRjVfE0KSKNwFZAssQMepg=
Subject key identifier:   87:CF:60:36:59:5C:46:78:3B:77:1B:8E:61:A2:30:A5:44:91:DF:A9
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       068C
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/139C500E3FEE11EFADFD8221C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:51:16 +0000
ROA not before:           Thu 28 Aug 2025 14:51:16 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152933
IP address blocks:        160.22.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676 (0x68c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:16 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06ce4-2641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6e:26:17:b6:a4:21:f1:ac:e9:ce:db:e5:6f:
                    d8:ec:81:b7:d0:69:4d:97:6a:50:d7:af:84:ff:10:
                    b0:c3:d2:54:63:34:49:bc:8f:6f:7b:65:e4:0c:e5:
                    ff:34:09:71:cf:78:ab:c1:1b:a4:15:35:60:b8:70:
                    a2:18:b0:cd:55:72:62:07:b0:67:21:ab:c1:14:5c:
                    60:51:7e:7e:05:e1:e4:6a:2a:09:90:84:44:d0:96:
                    e7:f2:3c:b0:2b:30:a4:09:0a:68:be:39:29:c4:91:
                    b3:81:16:ea:65:05:31:5f:35:f4:fa:e6:ff:6e:ac:
                    34:6e:93:87:c8:21:97:3c:c1:84:12:61:7d:50:97:
                    21:78:ce:cb:66:6b:c3:c9:d3:cc:e8:2c:6d:75:8e:
                    04:ea:6f:8c:41:28:4e:0b:f0:d3:38:bb:99:37:d4:
                    92:e4:13:1a:88:9d:0d:04:1c:2a:df:1f:ef:52:0e:
                    8f:05:3f:7c:bb:2c:26:4a:3d:b3:92:68:65:02:29:
                    2a:e6:3c:51:4b:63:0c:8e:17:0e:55:97:39:b5:fa:
                    ad:4a:18:76:86:e9:70:3c:d4:95:f2:cc:2e:bf:4e:
                    c1:b4:95:d9:bb:ad:93:7b:91:4c:0b:55:19:42:c9:
                    f1:51:e0:a3:bd:00:4f:7a:c5:d9:07:ec:49:7b:fe:
                    82:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CF:60:36:59:5C:46:78:3B:77:1B:8E:61:A2:30:A5:44:91:DF:A9
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/139C500E3FEE11EFADFD8221C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:35:31:67:8e:db:f4:b6:85:ad:ea:1c:9c:27:2f:74:27:18:
         ec:52:db:d7:bd:fe:7f:c3:38:2d:7c:92:8c:5e:21:c4:cc:e0:
         04:10:d5:4f:e2:8c:f5:44:8d:2d:8d:3c:ef:fc:1f:46:92:d9:
         19:d9:de:84:e4:cc:16:0e:e4:dd:e0:00:e7:ac:df:17:2b:8d:
         b0:5d:6c:73:82:8e:ec:16:11:4f:a6:cb:ac:41:5d:9a:bd:d1:
         75:3a:c6:42:df:d7:49:4e:ac:6e:8c:96:40:dc:00:f5:0d:96:
         ee:9d:e7:8a:51:e5:e3:ee:2f:04:79:c5:73:27:98:dc:11:f7:
         a9:b4:98:dc:f5:84:9f:af:a4:5a:da:af:6b:82:92:86:7c:43:
         18:b6:ed:6a:73:50:d8:9c:84:ff:21:e3:b5:c6:cf:00:8a:02:
         c9:02:37:d6:7f:2f:e0:c6:9d:4c:2f:4c:89:87:28:8e:6c:ab:
         3b:5e:41:c8:8c:9a:18:3d:0c:12:30:59:e8:f7:cb:b8:62:8a:
         0d:23:85:10:7b:3e:b7:d4:9c:ca:82:01:35:81:96:53:53:5c:
         53:45:df:bc:bf:cd:6d:cd:69:f4:d7:c1:a2:f1:fc:6c:bf:c8:
         24:75:4d:a0:40:49:58:d7:77:0f:ee:bb:cd:b3:9b:38:5e:42:
         39:76:08:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:08:32 2025 by rpki-client