Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/B59F3130AA5C11F08080113BC4F9AE02.roa
File:                     B59F3130AA5C11F08080113BC4F9AE02.roa (raw, json)
Hash identifier:          RrN69emHD5LJJbN43b1ri6XKXD1rzQb2RimMmZsDRe4=
Subject key identifier:   69:1B:94:5B:7B:CF:F2:C2:98:96:1A:D2:7C:1B:91:46:56:3C:50:92
Certificate issuer:       /CN=A91EB2B8/serialNumber=A897AE8FF2141CB334EAA4B881CC3C5656D47436
Certificate serial:       46
Authority key identifier: A8:97:AE:8F:F2:14:1C:B3:34:EA:A4:B8:81:CC:3C:56:56:D4:74:36
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/B59F3130AA5C11F08080113BC4F9AE02.roa
Signing time:             Thu 16 Oct 2025 06:52:41 +0000
ROA not before:           Thu 16 Oct 2025 06:52:41 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     54994
IP address blocks:        148.222.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.crl
                          rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB2B8, serialNumber=A897AE8FF2141CB334EAA4B881CC3C5656D47436
        Validity
            Not Before: Oct 16 06:52:41 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68f09639-37bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f2:a3:92:25:68:ae:69:90:02:19:e8:73:ed:
                    ff:3e:d5:6a:70:61:4f:87:ed:eb:cc:1c:9c:6b:74:
                    bf:f6:9e:c9:f8:82:11:08:94:e4:df:12:b7:89:ea:
                    00:64:90:40:ba:b3:ff:fe:76:b4:52:eb:5b:40:09:
                    8e:3d:09:88:8f:49:34:7b:16:9b:fc:91:18:78:ee:
                    4d:8a:72:72:d9:6f:58:09:bf:ae:ce:b3:1e:31:c6:
                    a3:1f:cb:ba:b1:23:fb:7c:93:68:45:71:7b:0e:4b:
                    d7:cd:75:f7:0b:e3:6a:94:fc:cf:a2:3d:9e:8e:67:
                    f4:20:38:5c:d7:1a:42:76:c4:c5:90:71:30:a4:7c:
                    9e:e4:80:1e:73:f8:6c:15:dc:ca:45:ae:e5:2b:dd:
                    54:2c:b9:d1:22:4e:76:52:36:3f:3a:cd:a8:25:1d:
                    58:39:04:29:c6:dd:33:79:76:51:a7:11:d2:2c:31:
                    18:b8:0d:4d:ff:c3:0b:2c:7f:3b:cf:57:01:88:11:
                    0a:38:3b:b8:cd:17:1d:38:fa:54:32:61:1a:5b:c1:
                    b4:c1:e6:2d:0a:d8:5f:8c:91:b2:79:40:e3:27:eb:
                    7b:e1:4b:83:c6:f6:a3:81:ce:88:08:1d:18:cb:d3:
                    00:58:4a:2c:5b:e4:74:58:83:06:ea:38:b9:53:c0:
                    69:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1B:94:5B:7B:CF:F2:C2:98:96:1A:D2:7C:1B:91:46:56:3C:50:92
            X509v3 Authority Key Identifier:
                keyid:A8:97:AE:8F:F2:14:1C:B3:34:EA:A4:B8:81:CC:3C:56:56:D4:74:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/qJeuj_IUHLM06qS4gcw8VlbUdDY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qJeuj_IUHLM06qS4gcw8VlbUdDY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3583E586516511F0BC1CAF75C4F9AE02/B59F3130AA5C11F08080113BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:91:68:d4:af:26:92:71:f2:0a:c0:0b:5e:53:0f:77:96:ef:
         ec:26:37:6a:41:6a:e5:dd:0d:34:a3:7c:96:64:9f:bf:18:4f:
         c3:9b:b7:ea:76:af:3e:d0:72:64:c5:79:d6:02:f9:77:48:a8:
         b3:96:e3:b4:78:50:d9:8b:48:59:b8:9f:7b:07:55:ec:0e:b8:
         04:7b:70:18:9c:22:42:b3:29:ae:c7:41:b1:5a:ab:f1:8a:be:
         1c:ee:7b:a6:5e:03:05:ce:98:fa:97:8f:a9:29:21:3e:4f:6b:
         ee:38:1c:a7:97:c6:87:58:3e:a0:98:3a:43:8f:d6:c7:4a:63:
         ac:75:51:0f:cd:86:19:c7:09:93:e0:b6:a6:1b:91:e4:77:21:
         05:80:c5:67:64:16:b4:d7:b7:c0:a0:fc:c0:2e:a1:84:af:e2:
         29:d7:ed:90:ab:bb:7c:38:aa:ab:b1:f1:ac:30:ed:ec:73:34:
         ab:4e:b8:25:10:cc:85:14:6e:2c:51:6d:25:dc:07:c7:4d:fa:
         67:4d:4c:d6:8a:f8:2d:9c:ee:cb:4a:5a:15:2c:c6:b3:7a:43:
         4b:af:c1:4e:99:6f:b1:84:8e:73:aa:cc:e1:81:4f:98:e5:18:
         1b:3d:36:c7:d0:f0:b8:52:12:13:c4:ad:77:4d:1c:6a:db:66:
         f7:03:b4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:53:37 2025 by rpki-client