Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/D79D112E6C7F11EF92105459C4F9AE02.roa
File:                     D79D112E6C7F11EF92105459C4F9AE02.roa (raw, json)
Hash identifier:          taSipunEH/A4JKib1d15PbUF8sLm4qJrajeTCDOlA48=
Subject key identifier:   AD:93:4C:8F:9B:87:3D:E0:99:B9:FC:37:8C:93:73:E7:C4:EA:91:4D
Certificate issuer:       /CN=A91F8981/serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
Certificate serial:       B6
Authority key identifier: 52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/D79D112E6C7F11EF92105459C4F9AE02.roa
Signing time:             Sat 23 Aug 2025 06:41:35 +0000
ROA not before:           Sat 23 Aug 2025 06:41:34 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153175
IP address blocks:        160.30.26.0/24 maxlen: 24
                          160.30.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl
                          rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8981, serialNumber=520BA94CD0FB9E7C140DFBC0CC58B93CF54C22F3
        Validity
            Not Before: Aug 23 06:41:34 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68a9629e-cba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3b:df:18:4d:44:f8:72:92:5b:a8:4f:f4:e2:
                    e2:98:7c:3c:85:c1:4d:f6:5b:e9:fc:a6:67:19:88:
                    8f:fe:18:fb:ad:c8:3b:2b:a3:94:6c:f4:60:bb:5c:
                    70:ac:d6:0b:4a:28:9d:67:82:14:f5:2e:63:a1:29:
                    8f:8e:d7:fb:06:0d:f3:d1:99:cb:86:75:58:b6:71:
                    21:6f:46:51:28:77:7c:54:3a:3b:dc:59:2c:e9:06:
                    66:33:bf:39:0d:52:82:00:3f:ef:5b:dd:11:b4:ba:
                    19:07:a9:80:79:9b:89:9d:24:b8:e9:09:ec:6f:1d:
                    3d:01:20:ae:97:64:1d:ea:a8:f1:6b:7b:24:81:70:
                    11:04:01:00:d9:45:ad:53:26:6c:fa:0f:45:1c:3a:
                    97:f0:79:0f:0f:df:42:61:d6:8b:f9:64:12:90:99:
                    6e:d1:eb:43:8e:a6:02:f2:b8:0e:1d:bb:ae:a7:4a:
                    8d:07:72:17:46:c2:f6:46:78:ba:98:43:c6:cc:65:
                    5e:f2:a2:e7:78:04:78:65:5e:fc:95:9e:19:b7:cb:
                    23:02:c1:ed:d0:63:87:be:7b:20:0f:66:3a:57:58:
                    f7:78:06:09:b8:ce:e5:48:33:da:99:ce:9f:e8:75:
                    94:b3:a2:67:44:f5:e3:a5:40:78:2a:a1:05:48:95:
                    93:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:93:4C:8F:9B:87:3D:E0:99:B9:FC:37:8C:93:73:E7:C4:EA:91:4D
            X509v3 Authority Key Identifier:
                keyid:52:0B:A9:4C:D0:FB:9E:7C:14:0D:FB:C0:CC:58:B9:3C:F5:4C:22:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/UgupTND7nnwUDfvAzFi5PPVMIvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UgupTND7nnwUDfvAzFi5PPVMIvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8981/1CF6CD746C7F11EF914D7D57C4F9AE02/D79D112E6C7F11EF92105459C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:94:de:bb:a6:76:3f:16:37:b0:3e:bc:71:fc:8d:c0:a9:48:
         34:c1:38:81:90:6d:bf:f7:f2:45:7d:85:80:1e:65:83:30:11:
         07:9c:21:bb:b5:a3:86:f7:81:9c:ab:dd:8e:fe:9e:0f:ed:a3:
         4f:86:58:14:fc:a1:88:bb:51:ca:df:95:e0:06:4a:98:0e:fb:
         be:82:58:72:9e:07:4d:4a:2b:02:21:6b:b4:98:9f:93:23:31:
         04:8d:33:0d:b8:e8:e9:9b:ec:e1:96:0d:17:95:f0:ad:40:5b:
         b2:a1:1c:e3:21:66:db:e3:a3:32:4f:f5:57:a0:ab:96:1a:ae:
         13:e1:1a:8f:f6:b1:38:37:70:22:3c:f4:26:86:a4:f5:d7:44:
         35:9e:dc:f9:5d:2c:ce:39:95:bd:1b:70:a8:7f:e7:1f:54:36:
         47:6f:24:46:87:6e:d7:bd:78:39:fa:21:b7:91:d9:b3:34:3c:
         bb:ab:dd:b5:bb:de:b4:6a:fc:fa:a3:40:0e:ea:12:f5:16:23:
         73:c2:23:05:fd:a4:ab:ab:1f:58:d4:f7:b6:db:1e:33:c2:f7:
         3e:73:e6:79:86:66:7e:d7:f6:94:c8:ce:f6:e2:76:89:2d:d4:
         f3:8d:dc:c7:b2:4a:5d:fc:e6:6f:b7:92:d0:f2:85:b8:5b:61:
         7d:7d:92:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:02:50 2025 by rpki-client