Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/723EACFE6E8511EF83048D43C4F9AE02.roa
File:                     723EACFE6E8511EF83048D43C4F9AE02.roa (raw, json)
Hash identifier:          VfxLY1OrzcWvFN2AYE0olIYJUBwCwU7OS82n259ineU=
Subject key identifier:   F5:A8:88:4B:17:0C:46:95:31:B6:CA:4E:09:FE:95:EB:95:B0:18:9A
Certificate issuer:       /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
Certificate serial:       D5
Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/723EACFE6E8511EF83048D43C4F9AE02.roa
Signing time:             Sun 19 Oct 2025 09:12:34 +0000
ROA not before:           Sun 19 Oct 2025 09:12:34 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     214441
IP address blocks:        160.187.22.0/24 maxlen: 24
                          160.187.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl
                          rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:12:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
        Validity
            Not Before: Oct 19 09:12:34 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68f4ab82-5c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0c:ce:c1:f0:14:7d:cd:e2:55:37:70:bb:d3:
                    33:3a:34:9c:7f:47:e4:43:85:2f:79:01:03:e3:62:
                    ab:10:6d:31:1a:cb:85:e4:7f:28:b8:07:aa:b9:a6:
                    a2:8f:06:e2:cd:35:3a:0f:33:b7:4b:08:dd:25:c5:
                    ec:dd:d0:39:19:72:6d:e0:7c:fa:12:d4:f3:af:a5:
                    36:07:ff:9d:c5:e0:73:0b:19:89:cf:f6:3a:0a:2f:
                    ef:0a:67:45:ac:f3:63:72:b9:4f:d6:99:8a:a1:60:
                    44:90:f2:06:79:cf:8f:47:90:4e:57:39:50:ec:42:
                    4b:65:05:6c:d2:00:83:b4:04:88:ac:b3:32:cb:e7:
                    66:55:ef:31:91:e2:d1:78:d5:fe:65:ef:84:a3:83:
                    6d:47:9e:4b:94:f0:32:6c:cb:df:1e:b6:9c:78:5a:
                    39:78:4c:45:c2:02:a7:7f:e0:aa:38:8e:c3:2f:43:
                    92:33:5d:46:8d:e7:d6:1d:65:2a:9f:4c:56:59:65:
                    d5:d3:6c:bb:2b:64:d2:a5:30:92:14:c1:05:18:12:
                    32:23:a1:8b:81:57:6a:01:d1:48:f3:b2:a4:da:40:
                    05:55:30:3b:9a:5e:fa:29:09:8c:aa:a8:dd:84:a1:
                    d6:a4:7d:2a:8a:a0:57:c1:6b:d5:b0:6f:e2:4f:f7:
                    b9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A8:88:4B:17:0C:46:95:31:B6:CA:4E:09:FE:95:EB:95:B0:18:9A
            X509v3 Authority Key Identifier:
                keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/723EACFE6E8511EF83048D43C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:59:91:89:f7:e9:50:ee:c6:7d:1d:c3:fc:75:f5:06:7c:bd:
         bd:59:27:48:f3:c7:e4:14:7a:fb:ca:9c:39:d1:b0:6b:81:3b:
         58:05:7a:3e:60:c6:b9:cf:26:96:ed:90:e6:be:e2:85:d2:33:
         1b:30:00:c7:9f:7f:dc:a9:43:c3:12:5a:9f:15:24:ef:6c:da:
         89:3a:5e:78:b3:e2:fb:d4:20:0b:37:54:42:50:42:bd:f7:94:
         3f:a2:99:30:66:4a:53:3b:6c:7c:d0:78:6d:92:60:c8:4f:cf:
         08:86:e8:5f:6f:a7:3a:90:d7:c1:73:1f:40:1a:47:8b:28:2f:
         99:85:9e:f8:a8:46:74:4d:96:d3:62:47:0e:b9:b2:65:d8:f3:
         c3:23:f7:dc:96:a4:f1:b7:65:6f:b7:bc:0b:04:10:22:75:4d:
         62:c4:8f:5f:f2:0e:01:b4:90:87:e7:d4:0e:12:fc:55:46:b5:
         a1:92:a9:a4:99:b5:0d:b4:89:be:06:ff:97:f7:2b:c8:10:7d:
         50:67:c7:96:85:0c:72:d1:d7:cc:d0:4b:73:58:b9:d7:5e:79:
         46:27:88:95:ce:4f:40:05:3e:75:c2:c3:2c:81:a7:af:a5:02:
         2c:6c:7f:8e:85:6f:02:8f:56:de:a0:e0:9e:a7:66:b4:a4:8a:
         9a:62:0f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:40:11 2025 by rpki-client