Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/AC4DF5AE54D411F0A181951CC4F9AE02.roa
File:                     AC4DF5AE54D411F0A181951CC4F9AE02.roa (raw, json)
Hash identifier:          7BCHE+kzNjBF8k4abwOKXzsGwLLW+3ubtsn/UkZQwOc=
Subject key identifier:   59:99:98:23:BD:45:BC:57:86:70:A2:11:9D:B7:41:AC:88:60:7A:25
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       06C0
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/AC4DF5AE54D411F0A181951CC4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:51:58 +0000
ROA not before:           Thu 28 Aug 2025 14:51:58 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153941
IP address blocks:        165.99.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1728 (0x6c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:58 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06d0e-25aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:69:f5:a7:d8:94:b5:62:a0:47:38:35:84:95:
                    7c:69:57:5c:ac:02:c4:cb:6d:08:1d:b3:33:39:5d:
                    28:a8:74:13:d9:c3:9a:b5:89:1b:d8:01:c1:7a:b8:
                    c4:d8:bf:2f:de:7c:ef:58:78:98:37:3d:a3:c3:95:
                    24:8f:4d:d4:06:39:09:4a:7a:b1:ee:06:40:4a:b6:
                    a7:dc:1f:6e:ba:dd:a6:5e:4d:42:c1:b7:d9:a6:05:
                    32:c3:99:5b:12:8f:16:72:9c:eb:db:62:e5:2a:7c:
                    13:b3:3c:b2:61:1e:46:09:19:bc:1d:58:ee:b9:d4:
                    6b:0b:ba:72:c1:dd:93:ed:30:37:29:a1:9b:2e:c4:
                    7c:a4:af:71:14:cc:5a:7d:9b:ff:e8:f6:63:7b:bd:
                    c2:37:12:38:55:4e:6a:45:9b:c0:b8:ae:57:e9:6b:
                    3b:f9:d7:99:61:69:f4:51:cf:eb:57:8c:ee:ab:26:
                    ee:21:f0:5c:9e:81:3c:bd:3e:19:9c:ba:c3:23:ff:
                    75:3f:2d:86:51:4c:0b:84:fe:6b:df:0d:d9:08:e6:
                    87:39:70:b2:53:e2:02:e2:f2:3d:27:d0:c8:08:c4:
                    4d:f7:dd:31:4a:2b:bf:67:35:78:88:9d:e6:bf:14:
                    42:14:98:37:1c:d0:08:c1:82:b8:45:e1:fb:91:ee:
                    a0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:99:98:23:BD:45:BC:57:86:70:A2:11:9D:B7:41:AC:88:60:7A:25
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/AC4DF5AE54D411F0A181951CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:75:07:7f:53:ff:1e:cc:e9:05:c2:ff:37:e8:2e:57:da:22:
         f5:11:cd:44:16:e0:ce:39:80:b1:0e:cb:64:79:52:e0:5a:bd:
         37:73:a1:03:c0:e5:76:97:4b:6d:39:58:91:19:d0:20:68:53:
         af:6f:c4:25:d4:81:5a:46:01:4c:8f:52:e5:79:9b:73:05:67:
         66:2b:99:fc:8a:08:d7:4e:91:31:26:db:28:16:34:c8:c4:53:
         b3:12:aa:4d:e3:a9:99:1f:aa:e4:68:60:d6:d6:9c:d1:9c:a6:
         1f:57:b3:2d:f2:a6:e4:aa:8b:1e:ae:83:f0:74:22:60:4f:9c:
         73:ed:bc:b7:d0:22:76:dd:b8:35:f0:09:31:32:8f:20:83:e1:
         bb:0a:1f:31:7a:f4:8d:df:70:86:a0:53:2f:e2:3e:4b:2a:b3:
         4e:0e:88:e8:d3:e1:e8:2d:70:06:24:f4:de:86:0a:ce:6d:92:
         b9:59:9f:b7:5c:0a:2f:51:5d:99:af:d7:3c:37:82:dd:34:da:
         33:13:17:8d:34:47:ec:ff:b3:60:aa:d9:20:ce:ec:8e:83:6b:
         55:5b:5a:e5:76:2c:d5:95:cc:34:43:9d:50:c0:ca:95:af:5b:
         ed:f9:e3:67:14:5e:0a:13:04:d1:53:25:83:69:cb:a3:46:9f:
         66:09:d2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:13:07 2025 by rpki-client