Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/4DA7A7766C6611F0883DC646C4F9AE02.roa
File:                     4DA7A7766C6611F0883DC646C4F9AE02.roa (raw, json)
Hash identifier:          bd7Gyj5KNeVEwD0iXG4ANGqD2PVntxmIGI6qgC7T6Rg=
Subject key identifier:   56:5F:E6:2D:55:C9:6B:95:36:81:37:86:64:27:2B:98:D1:BE:CE:78
Certificate issuer:       /CN=A91D488C/serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A
Certificate serial:       32
Authority key identifier: 10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/4DA7A7766C6611F0883DC646C4F9AE02.roa
Signing time:             Thu 09 Oct 2025 17:59:47 +0000
ROA not before:           Thu 09 Oct 2025 17:59:47 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     55501
IP address blocks:        160.250.96.0/24 maxlen: 24
                          160.250.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl
                          rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D488C, serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A
        Validity
            Not Before: Oct  9 17:59:47 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=68e7f813-67fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:53:45:dd:fb:5d:07:df:14:89:b1:2f:1b:bf:
                    bc:ef:28:43:25:a4:62:b9:40:d7:63:db:dd:1a:be:
                    f2:71:31:36:c2:44:19:34:7c:6d:0f:ba:b8:03:f1:
                    37:c0:96:4d:64:ef:3c:16:c5:30:25:5b:f0:b2:ff:
                    62:fe:ef:48:48:29:e5:8b:7a:36:4b:eb:1d:d0:9c:
                    72:f4:b7:d8:eb:bc:d0:37:0c:60:f2:c8:cf:57:16:
                    c4:d3:4b:7a:f1:e3:5a:9b:ce:1b:46:0f:50:0a:17:
                    22:a7:f3:32:d9:42:62:b6:18:7e:a1:56:e3:24:93:
                    9c:32:41:81:4c:20:91:d5:07:1f:a7:ef:5c:8e:70:
                    64:52:16:58:77:62:2a:88:26:4e:ba:00:2f:af:2c:
                    be:2b:f9:90:ac:fb:ca:ff:47:17:eb:0b:37:da:b6:
                    61:6f:54:48:e3:f7:29:33:83:9f:14:e8:d0:ad:16:
                    2d:24:dc:f0:f0:c2:fa:42:d1:fd:af:f0:0b:ee:36:
                    9f:a1:d8:2d:19:45:53:7c:2c:88:a2:37:84:c1:cc:
                    ee:5f:53:14:83:5d:4e:e3:45:c4:f6:8d:11:ba:15:
                    d6:2f:e4:96:1e:0e:cf:b1:b9:0a:3f:53:77:5f:7c:
                    5d:ae:cd:30:52:93:83:67:d7:c7:a7:01:f0:bb:59:
                    cc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5F:E6:2D:55:C9:6B:95:36:81:37:86:64:27:2B:98:D1:BE:CE:78
            X509v3 Authority Key Identifier:
                keyid:10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/4DA7A7766C6611F0883DC646C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:b6:1e:16:53:fc:b4:7e:07:83:ed:4c:b0:0e:89:68:5f:68:
         e8:0c:d7:99:e1:f5:41:fa:5c:60:0b:96:53:b0:6d:36:1a:b8:
         93:e5:59:20:81:39:3d:7d:b2:c4:bc:62:d6:0e:f3:ef:46:5d:
         f1:de:f6:58:be:29:cf:82:2b:4f:1b:04:aa:69:c0:a1:95:9b:
         1e:e1:82:55:9a:f2:93:b9:95:9a:99:19:bf:1a:00:3b:9e:c8:
         5a:78:fb:05:51:d9:20:8c:a5:80:3f:17:ec:28:1b:46:e1:91:
         97:89:60:50:cf:f9:3b:7c:77:ed:72:58:23:24:d7:13:db:e9:
         c0:75:18:0c:94:7d:ae:43:8e:f9:af:c5:80:a6:9a:fe:cc:a9:
         cb:90:6d:3a:ba:77:40:73:20:19:04:d5:ae:22:3d:65:a5:cc:
         f0:bd:2d:b0:e1:70:20:84:8b:d3:3b:61:56:17:5e:ad:b8:c6:
         53:31:44:3f:6d:33:0b:d3:21:53:ce:d1:4d:d0:02:9a:5a:52:
         8c:dc:37:2f:08:f0:31:17:16:fd:54:cc:eb:64:61:7b:a2:8c:
         1f:7f:96:90:f3:a7:36:13:b0:8e:ae:2d:00:0c:d5:5e:3c:b2:
         b4:42:2d:38:26:fd:55:07:e2:73:1c:c5:dd:3d:fe:6f:dd:f8:
         1c:53:90:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:38:36 2025 by rpki-client