Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/758FF4327EA411F0A9758120C4F9AE02.roa
File:                     758FF4327EA411F0A9758120C4F9AE02.roa (raw, json)
Hash identifier:          ZZxl6tncFLbJYoFiNESnSNUh3zuF/WuZgnB/SPpwjU4=
Subject key identifier:   78:92:1D:59:7E:0C:7C:FF:F2:0F:C4:23:36:57:15:7D:23:E6:AA:80
Certificate issuer:       /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
Certificate serial:       B3
Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/758FF4327EA411F0A9758120C4F9AE02.roa
Signing time:             Thu 21 Aug 2025 15:35:26 +0000
ROA not before:           Thu 21 Aug 2025 15:35:26 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     150015
IP address blocks:        160.187.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl
                          rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
        Validity
            Not Before: Aug 21 15:35:26 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68a73cbe-3f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3e:d0:fd:c8:79:00:a7:25:8a:27:17:58:0a:
                    a9:80:ce:56:2d:8b:ff:d7:9d:a5:21:3f:d2:3b:8e:
                    c1:df:94:b8:92:9c:6e:e5:82:39:cf:7a:dd:5c:51:
                    6a:b5:76:e4:94:0d:de:ac:44:c4:ae:ea:dc:c4:c3:
                    c6:ed:b6:70:68:93:70:ba:e2:00:8f:40:fd:34:03:
                    23:57:c1:17:b5:40:cd:57:30:23:82:01:92:a7:39:
                    4e:78:b4:fa:fa:66:d8:3b:54:82:74:1a:be:1f:b1:
                    3f:20:59:83:b2:cf:a2:27:5b:97:b5:30:12:d2:b8:
                    db:4e:53:61:57:37:61:3b:b8:93:96:e7:6e:b3:f9:
                    54:bf:b6:be:11:0a:81:9b:07:02:21:c2:7f:52:99:
                    14:c9:e7:f7:ba:d2:fc:53:39:84:03:95:e4:74:1a:
                    18:d5:7a:8a:13:d5:68:05:48:b9:31:de:17:a1:be:
                    d2:aa:d5:49:b6:19:3f:93:87:80:7e:e8:79:b9:ce:
                    44:af:ec:3e:2d:de:0f:83:49:29:ec:a3:3b:4b:26:
                    d7:5c:ec:9b:a0:37:d0:cb:bc:33:c7:c1:18:5f:f9:
                    3d:3c:b1:fd:fd:17:09:68:37:75:b1:85:84:1d:6e:
                    d3:e2:35:55:12:a5:fb:15:fb:8f:ba:4c:4b:37:8f:
                    1a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:92:1D:59:7E:0C:7C:FF:F2:0F:C4:23:36:57:15:7D:23:E6:AA:80
            X509v3 Authority Key Identifier:
                keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/758FF4327EA411F0A9758120C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:e9:65:af:f0:1d:a8:41:0d:0e:2b:74:9f:57:2e:dd:c8:5e:
         2b:93:7c:eb:18:49:aa:e1:87:8f:52:e5:a9:f8:09:7f:69:c9:
         c1:f2:25:32:e5:1c:8d:09:ad:39:c7:95:4e:b6:af:4b:45:d3:
         9f:c2:91:e3:c8:32:6b:fc:dd:d9:6d:50:e6:9f:c1:e0:f3:fd:
         91:70:df:fb:6a:10:b0:44:4a:7a:97:75:51:ed:99:8b:8a:b8:
         51:ec:0d:90:8c:f4:c1:a0:bd:fa:c2:7b:ad:8f:fe:ff:71:55:
         20:ff:20:1f:bb:ce:20:f1:62:1d:1b:b6:68:17:ee:29:97:ae:
         f6:07:3c:8d:af:4f:3b:da:cd:66:c0:1b:b7:75:b4:5f:3b:f2:
         eb:8f:e6:32:2b:18:d2:14:49:29:ed:23:46:d8:a6:a5:ba:09:
         91:fc:db:d4:8b:ac:e4:bd:e7:22:47:35:08:fc:3c:d0:23:c3:
         b8:c1:52:1d:83:6a:ab:af:f7:84:5e:d1:59:07:e7:bf:31:73:
         a9:64:af:91:cc:36:4c:02:62:70:0e:fe:fc:ce:62:3a:f4:28:
         3d:bd:a1:b9:04:96:80:b0:a7:00:05:0d:c0:22:08:27:56:0b:
         da:1b:a8:a9:88:85:49:71:bc:f6:eb:7f:8d:57:5b:20:3a:48:
         31:c0:2d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:23:40 2025 by rpki-client