Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/CB31DFEA7BE411EFB6955155C4F9AE02.roa
File:                     CB31DFEA7BE411EFB6955155C4F9AE02.roa (raw, json)
Hash identifier:          /MZsQd7r1AUngKpTxxkCkkNWLr5PAUrY0B8gx8HXfWY=
Subject key identifier:   05:A8:4A:3E:1B:9E:B4:A5:9A:79:E3:60:67:09:BE:D3:C7:B2:C7:DA
Certificate issuer:       /CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Certificate serial:       C0
Authority key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/CB31DFEA7BE411EFB6955155C4F9AE02.roa
Signing time:             Mon 29 Sep 2025 06:36:20 +0000
ROA not before:           Mon 29 Sep 2025 06:36:20 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     153345
IP address blocks:        160.30.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl
                          rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:52:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE4E, serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
        Validity
            Not Before: Sep 29 06:36:20 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68da28e4-c3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:67:e5:84:3b:9a:4d:30:a9:cd:28:b7:01:16:
                    c7:a3:77:a6:a2:5c:11:ff:23:36:b3:dc:44:f1:53:
                    8d:30:84:e6:2a:4b:a3:a7:00:5b:e0:26:13:00:8f:
                    54:68:8f:b1:bf:ca:ff:60:14:a9:19:84:e3:1a:4d:
                    30:04:e5:6d:0c:ce:b9:de:ae:1e:9d:e4:68:87:f1:
                    18:59:20:09:75:aa:3e:89:4d:00:ed:18:cd:7e:9e:
                    6b:19:94:98:87:ae:db:37:85:ed:5d:6e:cf:2e:ea:
                    32:dd:57:9b:0b:cd:07:11:42:01:ec:9f:c0:3e:60:
                    88:37:b4:f4:bb:ef:53:50:c6:09:d9:19:a2:92:24:
                    f7:f2:4a:e2:7b:f9:e9:00:e3:5e:8a:ca:b7:20:05:
                    5c:b3:36:65:8d:82:8b:d7:e4:b0:f5:38:96:9e:68:
                    c5:2b:4d:88:30:34:33:46:7f:9f:31:d9:d2:db:69:
                    bb:97:93:95:c1:32:ff:6a:b8:97:f8:cf:4a:79:1b:
                    09:83:ed:71:b1:61:a9:8f:44:9d:00:51:24:bb:45:
                    75:73:4e:59:71:18:6c:c7:25:73:fa:5f:b7:4a:be:
                    9f:e0:8f:42:06:31:c2:90:31:83:4f:62:e9:db:1d:
                    b7:06:02:20:93:c5:94:e2:74:05:ef:6b:44:7f:dc:
                    53:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A8:4A:3E:1B:9E:B4:A5:9A:79:E3:60:67:09:BE:D3:C7:B2:C7:DA
            X509v3 Authority Key Identifier:
                keyid:C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/CB31DFEA7BE411EFB6955155C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:f1:93:c2:0b:bc:2d:65:d7:39:a0:f4:bf:c4:a6:4a:a8:77:
         d5:f3:4f:fb:00:1d:58:bf:6c:00:7c:86:5c:d9:15:45:90:40:
         bd:a9:ea:6b:45:36:b9:74:37:b6:78:f1:a9:71:9a:aa:33:7a:
         a9:f5:f8:59:1d:15:51:b0:0f:b1:ae:08:f1:1c:92:f5:16:86:
         6b:29:fd:5a:ad:80:03:77:0e:12:d4:cc:d4:a7:03:dc:0a:92:
         2c:1e:49:9f:28:b1:60:34:f5:95:9b:36:eb:05:68:c9:3b:f0:
         9b:54:5d:3f:d2:fe:e3:67:18:2e:60:90:dc:a3:8e:cb:91:32:
         f3:87:85:5b:7c:54:dd:82:94:39:1f:b2:b9:8e:5a:b4:c3:58:
         c1:bb:c8:aa:f9:81:2f:c1:58:ab:95:15:5c:a7:c6:2e:3d:38:
         79:90:92:4f:c0:b9:b4:ce:cc:c1:27:32:c5:dc:75:18:da:da:
         ab:6e:6f:b2:3d:cb:d4:1b:89:df:7e:78:c4:08:7a:fd:93:d2:
         a4:cb:51:1c:ce:2f:03:8a:cd:9d:4c:da:bd:74:62:b3:4d:e1:
         30:2f:e2:50:4d:3d:87:b6:74:51:ec:2e:17:96:17:28:7f:9d:
         0f:f2:30:2a:c9:c5:dc:b9:39:2d:11:da:6d:59:7a:90:c4:82:
         bc:3b:61:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:00:06 2025 by rpki-client