Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/7C5F5278589611F084D9AA7BC4F9AE02.roa
File:                     7C5F5278589611F084D9AA7BC4F9AE02.roa (raw, json)
Hash identifier:          SpGXHIvK5nyaRkt9i4BT1y40N9SY9IO5lxOenq0eXjc=
Subject key identifier:   6F:53:09:9A:78:18:74:8A:72:49:4B:3D:A3:16:62:E2:1E:8D:54:84
Certificate issuer:       /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial:       38BF
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/7C5F5278589611F084D9AA7BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:23:13 +0000
ROA not before:           Mon 18 Aug 2025 14:50:24 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     19551
IP address blocks:        180.255.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
                          rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Mar 2026 14:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14527 (0x38bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C, serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
        Validity
            Not Before: Aug 18 14:50:24 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a48411-3f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:49:34:2b:f2:fd:40:d1:03:53:b1:8d:de:12:
                    29:64:af:7a:97:fd:83:ba:50:1d:17:f6:3d:17:1f:
                    d5:29:f4:bf:b1:b0:19:77:5d:f1:3f:83:9f:9f:2f:
                    ac:ca:2a:2c:6b:9b:2c:10:e9:41:fb:db:8f:28:14:
                    f3:36:16:6f:09:d2:44:38:98:4a:1d:53:39:74:75:
                    38:39:5f:7f:8f:52:d0:1c:53:53:98:df:1a:fc:d7:
                    79:02:6c:c7:c7:97:97:7d:cf:dd:8d:ae:b4:85:fd:
                    46:34:68:57:df:57:72:91:23:9e:01:9c:d8:cd:09:
                    52:bc:48:63:9c:56:2f:6c:86:be:bb:b5:8d:9e:6b:
                    9c:e9:e0:a8:8b:22:e1:11:fa:72:c9:38:92:1a:20:
                    07:bf:62:ec:41:47:b3:f3:63:41:e1:0c:85:cd:7d:
                    f9:74:42:15:87:79:ff:be:88:ca:9a:5e:49:7c:86:
                    18:51:68:e5:24:18:6a:78:ea:44:17:69:37:d6:77:
                    8e:d1:3a:be:93:7d:72:bd:e4:e1:13:f4:6e:cf:36:
                    45:ba:90:5d:3c:cd:d6:ac:04:e7:84:d1:77:7b:83:
                    b0:ad:19:83:4e:d4:e7:7b:4d:1c:69:c0:a5:3c:16:
                    41:ff:35:d7:21:2d:2b:41:11:79:0b:11:54:b1:f5:
                    15:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:53:09:9A:78:18:74:8A:72:49:4B:3D:A3:16:62:E2:1E:8D:54:84
            X509v3 Authority Key Identifier:
                keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/7C5F5278589611F084D9AA7BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.255.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:98:37:95:92:76:09:12:c2:c5:55:95:2b:2d:81:f6:81:23:
         5a:bd:75:53:cc:0f:5e:4e:4b:0d:f1:a8:6e:9c:33:c0:31:b2:
         ea:b1:b1:ee:fb:4b:55:4e:b1:c7:9a:88:7f:6a:33:20:19:70:
         69:c7:f3:1a:fd:22:3c:43:de:96:d5:c7:12:0f:64:84:4b:3b:
         74:dc:eb:bb:b7:37:cd:78:6f:e1:30:5c:23:bb:ed:8b:a5:66:
         9f:1a:e9:19:f4:b3:36:01:6c:7b:26:ce:91:a2:e5:c0:22:be:
         bd:d0:65:b4:0c:f9:cc:9f:37:ac:2c:28:5b:6a:04:0b:1c:e7:
         a4:1e:ff:6b:6d:00:19:ee:a1:6b:55:30:f3:08:9c:2d:e9:7e:
         95:b0:11:b2:92:0b:24:99:ee:d1:2a:6e:e5:2a:84:fc:44:03:
         7d:53:36:45:65:c9:b2:c5:e0:00:cb:5a:d9:c6:e6:50:e9:b0:
         0f:44:0a:50:92:d2:e3:29:12:54:95:94:de:6c:f9:18:34:f8:
         0e:d8:41:56:73:0f:e5:72:de:3b:e1:bd:99:ee:50:b8:f8:88:
         0a:6b:2e:0e:7f:cc:2f:0b:97:2e:e6:b5:0b:a2:e6:7b:c6:00:
         97:d4:bf:d9:27:9b:71:a4:a1:25:45:f7:c4:97:a0:78:f9:6b:
         39:43:db:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:36:44 2026 by rpki-client