Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7746DBBAA87111EF81AAB431C4F9AE02.roa
File:                     7746DBBAA87111EF81AAB431C4F9AE02.roa (raw, json)
Hash identifier:          r98tSWPCmyriF1drjP9wnKfjVvGNTJXToETQgcb5z38=
Subject key identifier:   54:D5:BE:D0:60:F5:9F:52:76:0A:A2:FC:EF:96:16:FA:D3:69:83:A2
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       0682
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7746DBBAA87111EF81AAB431C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:51:08 +0000
ROA not before:           Thu 28 Aug 2025 14:51:08 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151866
IP address blocks:        160.187.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1666 (0x682)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:08 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06cdb-e260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:d5:20:81:07:f6:8c:eb:ae:ea:ee:de:73:
                    29:09:68:54:48:de:44:b4:5a:1f:b4:c7:7e:48:e5:
                    0e:c1:5b:0f:09:5c:eb:9c:0c:1a:17:26:c8:2b:42:
                    57:bc:13:c5:52:3e:c9:e1:cf:d5:2c:95:4a:43:45:
                    c7:f3:bf:ed:ed:47:a0:c0:b8:3a:be:c7:34:67:74:
                    b1:9a:eb:30:df:d0:b8:ce:1e:96:3d:db:66:cf:91:
                    b3:9a:78:3c:fd:84:87:0e:a8:e2:69:9a:3b:9a:35:
                    ff:51:99:23:f9:38:97:95:d5:f3:69:46:1b:af:d9:
                    7b:49:c7:69:bb:10:0a:fd:1e:6a:64:de:db:ce:b6:
                    95:73:36:f5:b8:ff:04:9b:f9:76:75:c7:42:33:1b:
                    86:11:4a:d5:3d:ba:0f:e0:7c:1d:0d:7d:70:f9:ce:
                    c4:3d:c3:65:b4:ac:96:b6:6c:a1:4c:ee:88:ee:52:
                    32:1f:69:e1:24:2a:f0:49:ce:75:58:dd:65:cf:72:
                    92:e9:22:81:92:87:ee:1f:db:8a:c8:c2:27:71:63:
                    95:f1:21:7c:a8:44:ff:9a:4b:03:61:9c:c7:db:94:
                    46:90:c2:e1:30:d9:a9:61:7b:0c:e2:e4:87:4d:9d:
                    2a:a1:66:3a:c8:e7:05:f1:a5:1e:fa:30:5e:f2:5c:
                    22:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D5:BE:D0:60:F5:9F:52:76:0A:A2:FC:EF:96:16:FA:D3:69:83:A2
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7746DBBAA87111EF81AAB431C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:4e:a3:ca:7c:21:a6:ba:31:84:bc:39:d8:8b:07:ba:6e:ad:
         68:06:ee:96:80:57:b4:38:02:15:fb:f4:33:a4:aa:c5:5d:22:
         6a:df:fc:a6:86:bd:3f:9c:d4:23:ee:60:a9:70:21:d9:16:4a:
         c3:ce:13:2d:47:f2:cb:1c:37:50:28:c6:08:45:e1:94:cd:8e:
         73:e5:bc:77:2c:1d:74:e5:74:7a:0e:16:c9:26:0b:f9:3d:d1:
         ef:52:ac:a8:f7:bd:ec:47:d2:1a:8a:52:8d:a2:a7:ca:c7:d3:
         f5:ac:cf:fa:1a:7c:05:06:a7:3e:1d:bd:90:66:4d:91:ce:02:
         31:8c:5f:c7:52:86:4a:d7:a2:90:9c:60:9b:cc:9f:c8:50:cf:
         9a:0b:d8:a7:60:9c:39:35:10:47:31:b4:63:c1:53:6b:67:e9:
         a4:5a:73:ea:b6:c1:7d:82:16:ab:08:85:3a:12:ad:26:1e:bb:
         84:56:e2:c4:d7:0d:2e:4e:8b:41:d9:71:67:c1:20:19:74:11:
         10:68:a8:24:c1:da:b6:e7:59:73:71:d2:9b:d8:e2:5f:3d:c4:
         37:5b:07:14:68:0a:63:de:dd:09:3b:be:0a:eb:07:a2:66:67:
         02:9e:f5:1e:34:39:94:e4:1a:c8:f2:f5:6f:a3:27:8d:7b:f5:
         b1:84:a1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:08:28 2025 by rpki-client