Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/1B86A7CCE2CA11EFAA007D32C4F9AE02.roa
File:                     1B86A7CCE2CA11EFAA007D32C4F9AE02.roa (raw, json)
Hash identifier:          1vEZv+7+qYLHn55ib9kkDfWTdYO4S/WHs8pgEEuMR50=
Subject key identifier:   32:A6:1A:58:01:5D:9B:12:C7:BD:65:47:2C:C1:20:51:66:A7:F7:93
Certificate issuer:       /CN=A913A748/serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81
Certificate serial:       0194
Authority key identifier: 69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/1B86A7CCE2CA11EFAA007D32C4F9AE02.roa
Signing time:             Mon 27 Jul 2026 06:55:05 +0000
ROA not before:           Mon 27 Jul 2026 06:55:05 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     151786
IP address blocks:        160.25.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl
                          rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:55:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A748, serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81
        Validity
            Not Before: Jul 27 06:55:05 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6700c9-79e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:e1:3c:48:39:67:51:94:ae:be:f7:6a:28:
                    13:43:58:b6:39:56:51:68:66:44:9b:3d:88:df:71:
                    d7:7d:0f:e1:5f:7a:11:6f:4e:a2:f9:c9:11:ed:df:
                    8f:4c:70:77:64:12:1e:45:52:76:0c:e6:66:59:3e:
                    d6:9c:00:c4:ad:56:f0:96:ca:46:5b:38:c0:8b:3b:
                    d5:71:43:5e:9c:87:24:90:11:dd:12:41:e2:92:9a:
                    bb:2b:87:f6:da:cf:ac:92:04:0f:10:33:71:c5:f5:
                    e6:c3:e8:db:c8:49:d1:d3:df:34:50:28:78:4f:be:
                    06:a9:f9:ee:b9:60:02:f0:ef:82:bb:80:ab:63:98:
                    a9:0c:e5:5b:e4:d2:2d:46:cf:86:4e:ec:6f:f3:5e:
                    7a:93:93:71:63:f5:86:f3:46:ab:69:f2:db:a2:a2:
                    5d:60:73:7a:07:f1:b7:37:1a:9a:f1:31:d2:a7:2c:
                    d2:c3:f8:04:4a:d5:c5:5e:37:53:24:07:81:f1:62:
                    e9:d9:18:9d:a9:1b:d8:38:96:c4:fd:75:46:e3:f9:
                    a6:82:c7:2c:f3:3d:a2:20:ed:7b:e1:4a:55:44:03:
                    5e:0b:c1:c4:1a:b3:e0:d3:67:50:c5:a4:5a:46:53:
                    6b:ef:c0:e5:d9:b3:56:75:00:a3:a1:d8:55:b8:ee:
                    0b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A6:1A:58:01:5D:9B:12:C7:BD:65:47:2C:C1:20:51:66:A7:F7:93
            X509v3 Authority Key Identifier:
                keyid:69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/1B86A7CCE2CA11EFAA007D32C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:21:ad:c3:7b:72:60:ae:2b:4c:5c:7d:6d:0d:e7:12:71:77:
         09:ac:36:76:6b:fb:7f:6a:2d:a2:87:e4:72:ad:67:0e:77:65:
         9a:42:9f:78:59:8a:a1:0a:a1:25:f3:8e:43:6e:b5:9b:1c:5e:
         23:ae:ff:34:b2:ff:58:89:1e:d4:f4:f9:fe:81:af:3e:cc:3b:
         c8:6a:8f:d0:3b:2e:94:88:a9:c9:aa:5c:d3:34:50:80:6b:28:
         3e:bf:34:c7:9d:06:4b:0c:b9:53:3e:73:36:d1:c8:a9:fe:d2:
         bb:7d:95:8c:53:0a:86:00:7b:9c:75:73:a0:d9:1d:1c:f9:ef:
         c4:b4:1c:e9:37:cc:61:f8:15:28:6e:7c:9d:41:4c:47:34:96:
         cf:d5:ae:cc:8c:08:f1:f8:23:ca:85:de:42:eb:de:85:e1:b3:
         56:d7:6e:1b:77:76:4d:8d:ce:18:d8:3f:5e:bc:e1:91:55:53:
         53:a8:ed:6e:56:5c:9c:85:b5:8d:9c:c4:ef:19:d4:f1:53:08:
         d1:9f:a0:75:3f:99:e3:75:b4:0e:e4:39:74:b6:38:e7:68:21:
         84:c4:87:50:90:6b:5c:90:62:c5:6e:65:36:53:e1:63:55:70:
         b1:71:3b:0c:2f:26:d6:5c:1e:32:fd:bd:fd:c6:28:fa:99:cb:
         6c:ef:d7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 22:01:08 2026 by rpki-client