Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/0A6CBB6E54CD11F0A3E48084C4F9AE02.roa
File:                     0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (raw, json)
Hash identifier:          zutu0HkO4ucOHeH/2JeJGru547OHviuXA/RDD+leiEs=
Subject key identifier:   DC:54:F0:07:C4:62:58:24:6B:8D:1C:BC:D1:28:08:AF:56:1F:E2:DC
Certificate issuer:       /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Certificate serial:       8D
Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/0A6CBB6E54CD11F0A3E48084C4F9AE02.roa
Signing time:             Sun 29 Jun 2025 09:40:07 +0000
ROA not before:           Sun 29 Jun 2025 09:40:07 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     139904
IP address blocks:        160.191.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
                          rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
        Validity
            Not Before: Jun 29 09:40:07 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=686109f7-5964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ac:ba:cb:6a:8b:d4:84:d5:f0:d5:d5:14:25:
                    56:90:08:39:67:c7:09:56:66:ad:7c:55:0d:f6:34:
                    07:23:cc:54:10:e2:e7:b1:69:5d:0b:14:ed:59:ad:
                    06:b9:dd:41:c0:9d:f2:ec:0e:07:69:a8:31:70:e2:
                    2a:0a:39:d7:5b:c9:76:ba:21:e1:01:8a:99:68:ef:
                    29:23:40:95:de:28:04:2a:17:b6:07:c8:45:05:db:
                    ae:29:be:b7:bd:f8:5f:f5:b4:48:a3:ba:1b:d6:0c:
                    de:86:2d:3d:ad:06:02:91:dd:16:70:1e:ee:fd:0e:
                    b9:c3:d1:a2:ff:c0:8c:8a:35:af:2b:4d:de:f9:a9:
                    e0:99:e8:15:1b:8d:11:0e:81:e0:c0:95:c4:32:b4:
                    13:7d:5a:41:3f:bd:f2:e3:d9:ae:a3:83:f7:3b:d5:
                    50:8b:ca:15:b4:10:35:5d:46:91:a6:a8:f8:35:d8:
                    86:b0:8c:4f:d0:98:83:a2:5a:e4:06:4c:b2:14:6a:
                    48:1d:0c:63:d0:da:f9:b7:24:e7:a9:ed:8b:af:b7:
                    0b:d6:12:29:20:43:33:38:77:c1:be:8a:b5:5e:44:
                    da:4f:14:0e:ab:6e:2b:d2:bf:dc:b8:bb:f6:e2:8f:
                    f2:fe:13:7b:a2:46:d0:b7:b5:b9:e6:f2:a5:3d:f2:
                    eb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:54:F0:07:C4:62:58:24:6B:8D:1C:BC:D1:28:08:AF:56:1F:E2:DC
            X509v3 Authority Key Identifier:
                keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/0A6CBB6E54CD11F0A3E48084C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:7e:5f:ce:20:5f:b5:7e:48:90:e4:5d:8c:a2:49:34:60:7e:
         a7:7f:5e:b6:94:b3:1f:e8:0a:19:fe:35:8f:9e:5b:19:d6:b6:
         5f:d3:dc:6c:7d:3d:1e:7a:7e:db:0a:80:9e:f6:fa:79:2b:bb:
         72:51:64:79:43:7b:1b:31:df:6e:cc:3b:d3:f4:43:8a:00:66:
         c7:a4:d3:d5:d1:92:7e:cc:40:d5:40:b6:73:f6:cc:37:7b:85:
         a2:df:cd:e0:cb:4c:ba:25:45:37:4b:a9:62:4b:b3:7c:93:81:
         58:ca:2a:79:a8:c8:10:59:75:93:1b:62:3c:50:d4:1e:30:0a:
         7f:e2:16:8c:b6:3c:bc:f3:2a:18:73:a7:6b:ef:f8:86:b7:14:
         d1:46:96:d6:0e:50:68:11:56:43:1e:a0:7c:5f:b4:2b:ff:3c:
         b8:d2:e0:e1:ce:3a:df:4e:58:3a:64:6d:d4:1c:4f:25:97:e2:
         0a:0e:d7:e4:e5:d3:5f:60:7f:75:d6:a2:6e:dc:34:6c:d7:cd:
         ea:00:f7:4f:ff:50:68:8a:ed:3e:df:f3:2e:54:b8:bd:da:bf:
         48:50:2a:d9:66:0c:52:cb:1f:71:f3:5b:8c:4a:14:7d:63:c1:
         16:ac:e9:70:48:30:5a:79:ce:47:5d:7c:f4:6d:d2:1d:61:6f:
         cc:ea:5b:41
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzYwQTUxMTAvBgNVBAUTKEFBRUM0ODg3NzFEN0I5NDE4NUM4QTkwRkUzNkQyOTdE
RTc2Qzg0QkMwHhcNMjUwNjI5MDk0MDA3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODYxMDlmNy01OTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2ay6y2qL1ITV8NXVFCVWkAg5Z8cJVmatfFUN9jQHI8xUEOLnsWldCxTtWa0G
ud1BwJ3y7A4HaagxcOIqCjnXW8l2uiHhAYqZaO8pI0CV3igEKhe2B8hFBduuKb63
vfhf9bRIo7ob1gzehi09rQYCkd0WcB7u/Q65w9Gi/8CMijWvK03e+angmegVG40R
DoHgwJXEMrQTfVpBP73y49muo4P3O9VQi8oVtBA1XUaRpqj4NdiGsIxP0JiDolrk
BkyyFGpIHQxj0Nr5tyTnqe2Lr7cL1hIpIEMzOHfBvoq1XkTaTxQOq24r0r/cuLv2
4o/y/hN7okbQt7W55vKlPfLrWwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNxU8AfE
Ylgka40cvNEoCK9WH+LcMB8GA1UdIwQYMBaAFKrsSIdx17lBhcipD+NtKX3nbIS8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjBBNS85OTdCMzY2RTkx
RjAxMUVGQjY5NjVDMjRDNEY5QUUwMi9xdXhJaDNIWHVVR0Z5S2tQNDIwcGZlZHNo
THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3F1eEloM0hYdVVHRnlLa1A0MjBwZmVkc2hMdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzYwQTUvOTk3QjM2NkU5MUYwMTFFRkI2OTY1QzI0QzRGOUFFMDIvMEE2Q0JCNkU1
NENEMTFGMEEzRTQ4MDg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBACgv1MwDQYJKoZIhvcNAQELBQADggEBALx+X84gX7V+SJDk
XYyiSTRgfqd/XraUsx/oChn+NY+eWxnWtl/T3Gx9PR56ftsKgJ72+nkru3JRZHlD
exsx327MO9P0Q4oAZsek09XRkn7MQNVAtnP2zDd7haLfzeDLTLolRTdLqWJLs3yT
gVjKKnmoyBBZdZMbYjxQ1B4wCn/iFoy2PLzzKhhzp2vv+Ia3FNFGltYOUGgRVkMe
oHxftCv/PLjS4OHOOt9OWDpkbdQcTyWX4goO1+Tl019gf3XWom7cNGzXzeoA90//
UGiK7T7f8y5UuL3av0hQKtlmDFLLH3HzW4xKFH1jwRas6XBIMFp5zkddfPRt0h1h
b8zqW0E=
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:28:08 2025 by rpki-client