Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/426E71C25B1511EF95122A62C4F9AE02.roa
File:                     426E71C25B1511EF95122A62C4F9AE02.roa (raw, json)
Hash identifier:          UXnC/XoVUkLq/3kEuo54UNzjcpY8CVmcAHE/kWC3Jds=
Subject key identifier:   2B:65:21:85:D0:F2:1D:85:32:4D:1E:25:13:5E:5D:2A:76:8E:44:E8
Certificate issuer:       /CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
Certificate serial:       C3
Authority key identifier: 11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/426E71C25B1511EF95122A62C4F9AE02.roa
Signing time:             Sat 23 Aug 2025 06:11:49 +0000
ROA not before:           Sat 23 Aug 2025 06:11:49 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     131582
IP address blocks:        160.25.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl
                          rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 06:11:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175964, serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
        Validity
            Not Before: Aug 23 06:11:49 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68a95ba5-4fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:01:71:86:ca:22:55:2b:59:63:57:0a:a0:9d:
                    81:7b:04:f9:df:9b:ea:02:2d:56:10:ce:b8:14:e6:
                    51:91:d6:09:5c:2a:96:e0:b3:3d:2a:76:49:96:9b:
                    26:f6:c4:4f:11:ce:31:f1:c9:7e:e8:9b:09:be:ab:
                    5d:8e:bf:8a:b0:a3:83:62:1e:d9:5a:3d:c9:df:f4:
                    6e:1d:78:eb:0d:2e:2c:e2:5b:71:15:f0:72:aa:ec:
                    62:d1:fb:b1:94:e1:c5:9a:71:df:51:a8:1d:7f:18:
                    8b:40:84:c8:f5:fc:fb:cc:82:dc:1d:8c:d8:11:56:
                    44:33:8d:33:77:ac:bb:96:6c:54:cc:70:1c:bd:0f:
                    f3:51:2f:ec:7c:7e:d8:ed:21:6f:ca:12:5a:f5:ff:
                    e2:01:8d:68:5a:05:c5:b5:55:6b:0b:e4:b7:9e:f4:
                    ff:a4:be:73:71:96:7a:75:7a:89:a5:d4:1e:9c:0d:
                    ea:e8:0b:28:f2:47:bc:c7:66:97:b6:5c:55:58:09:
                    d0:a7:a8:97:ad:6b:ca:8b:98:f6:7b:c2:6c:d5:05:
                    2e:37:47:96:64:69:9e:a2:1e:19:69:85:f2:dc:a0:
                    81:91:58:0c:a1:e9:7a:95:60:94:ca:ec:d3:ea:f7:
                    21:2a:18:80:d1:b1:2c:6e:de:16:9d:67:ac:cb:13:
                    39:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:65:21:85:D0:F2:1D:85:32:4D:1E:25:13:5E:5D:2A:76:8E:44:E8
            X509v3 Authority Key Identifier:
                keyid:11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/426E71C25B1511EF95122A62C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:8c:f3:8e:6c:1f:65:3e:1c:79:9f:45:be:e6:c1:7e:be:df:
         ce:d9:31:aa:65:1d:03:c4:11:34:d4:90:f6:b8:25:d2:3e:6d:
         00:44:76:34:09:5a:6e:60:e1:d8:ca:0c:03:00:ec:5b:64:07:
         7d:1a:77:2c:8a:42:72:0c:76:96:1c:f1:eb:af:15:1f:ba:99:
         10:5d:46:c7:a3:8a:3d:d6:11:7e:f3:7c:7f:05:32:38:50:47:
         ab:3b:7d:96:0c:5f:48:6f:bf:34:ad:e4:09:15:07:99:fc:aa:
         b6:06:4f:6f:e4:23:ef:24:5d:13:24:93:e4:56:6d:b3:a2:99:
         90:31:55:ec:51:d4:e0:be:78:52:4d:0d:24:c8:49:49:b0:1e:
         f8:36:76:c0:a1:97:db:fc:2f:3e:8b:6a:10:17:1c:2d:b6:4a:
         ee:f4:c5:b1:36:51:61:de:15:51:4c:a6:ec:f4:e7:e9:72:17:
         f7:c1:ee:65:10:78:0e:5e:8f:d0:28:27:3b:b4:0b:e0:e1:6c:
         ce:19:72:fc:d9:d6:05:b1:46:51:31:43:19:0a:39:51:a8:f4:
         97:64:3b:46:b7:b8:2b:6e:eb:5a:cd:00:da:4b:59:5a:a6:b9:
         de:2b:93:ce:ab:4c:f5:4c:8e:99:79:12:d9:db:c0:d7:04:94:
         7c:73:43:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 19:11:33 2025 by rpki-client