Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/CE2868C28F4C11F18259B4DA4511F970.roa
File:                     CE2868C28F4C11F18259B4DA4511F970.roa (raw, json)
Hash identifier:          SVvm79oQMCFC2IGmLTLLnWJV/qee9aelISNdMkE7N/8=
Subject key identifier:   84:BE:8C:25:E2:4C:BC:3C:66:95:F6:BC:5E:22:38:D4:A5:DC:E4:3A
Certificate issuer:       /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Certificate serial:       0189
Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/CE2868C28F4C11F18259B4DA4511F970.roa
Signing time:             Mon 03 Aug 2026 15:05:47 +0000
ROA not before:           Mon 03 Aug 2026 15:05:46 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     17644
IP address blocks:        160.25.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl
                          rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 04:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
        Validity
            Not Before: Aug  3 15:05:46 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a70ae4a-b395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:45:40:74:ef:2e:30:7e:8d:82:1e:17:49:fe:
                    36:a6:ed:ee:05:57:df:f0:7d:2b:6d:58:3a:26:2d:
                    0c:e5:b4:ac:60:0a:66:4a:51:78:14:40:fb:5f:49:
                    da:25:e1:be:5a:21:a2:d4:30:02:cd:a1:ab:d4:c3:
                    ea:3c:3d:44:f2:20:c4:40:06:a2:b8:51:ae:83:46:
                    b6:70:c7:26:c6:8b:56:ec:9e:9f:5d:b7:56:87:b1:
                    ec:8e:3a:24:84:8d:ec:55:2d:45:d2:8a:8a:e4:ec:
                    4e:f0:4e:eb:40:a6:71:ed:af:29:95:12:ae:94:0e:
                    c4:6a:47:18:3d:02:0d:00:31:9f:de:e4:6d:c8:1e:
                    94:d3:2d:4e:0d:36:65:47:b3:9d:6c:d6:97:41:49:
                    22:e6:cc:87:9e:45:bd:ac:3d:9f:a6:54:c7:51:d3:
                    2a:ad:e8:02:24:0d:e1:4e:9c:57:79:34:19:6b:ed:
                    fa:dc:59:11:8a:22:5b:a1:f6:d0:5a:93:46:6e:aa:
                    fd:eb:a9:2c:70:69:f1:16:9f:e2:19:01:a2:82:6f:
                    9c:cb:0d:06:05:57:9f:49:59:48:db:15:ed:a0:04:
                    54:46:04:c1:33:25:5e:26:0f:61:fb:e1:ac:4a:03:
                    c0:dd:c6:53:5d:89:ce:d1:c1:b2:d3:ca:97:6a:b5:
                    94:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BE:8C:25:E2:4C:BC:3C:66:95:F6:BC:5E:22:38:D4:A5:DC:E4:3A
            X509v3 Authority Key Identifier:
                keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/CE2868C28F4C11F18259B4DA4511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:48:3e:7f:5b:4e:ec:c5:2d:b9:60:bc:2a:d2:dc:77:aa:1c:
         05:3d:23:6c:e8:89:47:b0:15:8a:55:1c:0a:50:59:55:09:d4:
         bb:8a:e0:05:6a:33:29:56:09:e7:70:27:4d:21:8b:b2:6e:0d:
         2e:3c:bd:0b:5b:f4:6d:49:7c:3f:6e:5c:6e:b9:3a:b2:dd:51:
         6d:f2:01:e9:35:9f:d7:ca:39:4d:4c:e1:7c:9f:4c:a7:16:9e:
         0d:c8:14:50:01:14:63:ae:f1:13:53:d4:5e:f6:77:0f:6c:83:
         f0:d0:ed:7d:38:1c:39:57:bd:86:f8:91:82:af:5f:29:02:b4:
         24:04:ce:76:72:04:44:9c:56:c1:ef:20:ef:d5:48:7b:21:95:
         ae:6c:b1:6c:03:1b:57:5c:02:64:89:36:a9:d1:d4:5e:82:39:
         bd:64:e8:53:42:b6:18:08:82:e0:b3:59:a6:dd:ca:d3:10:3a:
         64:db:e1:1e:a4:e4:ae:7a:9a:bb:a8:e1:e4:48:34:86:20:92:
         fb:e4:2a:62:fe:d7:ae:d7:65:26:87:31:a7:be:e9:ba:5f:dd:
         b1:7e:e9:c5:58:2a:fd:d6:bb:f7:9c:93:fa:83:aa:32:39:6f:
         49:db:ae:aa:3b:9a:bd:5b:c3:51:6b:09:19:4b:90:b5:f0:5a:
         25:35:2b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:57:10 2026 by rpki-client