Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/04D83F063CF111EF8D221412C4F9AE02.roa
File:                     04D83F063CF111EF8D221412C4F9AE02.roa (raw, json)
Hash identifier:          w//FBnEluwyFL1StwyPCKfUr0jyn0YhNmvf4h702WRg=
Subject key identifier:   0B:8C:64:34:5A:0F:95:D6:04:D6:CE:60:A2:72:A9:56:6A:FF:34:4C
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F5E
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/04D83F063CF111EF8D221412C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:25:32 +0000
ROA not before:           Sun 31 May 2026 16:25:32 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     152539
IP address blocks:        160.25.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12126 (0x2f5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:25:32 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c60fb-5d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c8:24:90:fc:b0:c2:0c:0c:6a:1e:c6:09:70:
                    ae:84:e7:4a:94:dc:51:00:f6:8e:25:40:e3:a3:d2:
                    0d:05:ee:ee:3c:32:ea:dc:bb:66:70:bd:c0:c2:de:
                    17:fb:be:2a:3f:04:99:14:06:e8:f7:2d:ed:2a:68:
                    48:b8:5c:a4:59:9c:da:c4:e3:83:86:31:28:2c:17:
                    a9:f9:26:3e:7d:ac:e8:dc:29:c3:19:9e:74:00:42:
                    c9:6e:c4:cc:25:88:fa:d7:09:29:14:69:d9:f1:bd:
                    40:c8:55:b6:d2:98:5c:4c:c4:63:d9:6b:c1:bd:7b:
                    23:18:74:b3:ba:cd:42:71:7b:94:3c:80:a2:95:33:
                    ea:6d:1b:77:3b:fb:3c:bb:78:e7:ea:8b:54:87:7c:
                    3d:39:95:89:78:81:4e:3f:d4:1a:6b:ca:f6:73:f3:
                    d6:f4:59:07:6d:e5:10:f7:1e:f5:c8:59:42:24:dc:
                    28:fd:ea:cb:39:03:2e:91:ac:4c:de:57:39:57:a9:
                    00:df:4e:0d:fb:b1:38:cc:9d:17:37:3a:74:f6:17:
                    62:fc:c0:4b:f0:19:a6:8a:23:7e:81:42:f7:d1:18:
                    c9:54:17:5b:55:b2:29:a2:73:0f:39:de:00:de:66:
                    7e:4b:d2:c4:0e:a6:a2:ac:ec:16:a1:de:4b:f9:21:
                    6a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8C:64:34:5A:0F:95:D6:04:D6:CE:60:A2:72:A9:56:6A:FF:34:4C
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/04D83F063CF111EF8D221412C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:94:c9:16:63:78:3c:0e:ad:78:73:6c:07:75:cc:39:07:fe:
         8d:b0:a1:de:49:59:6f:eb:34:9e:87:72:cc:db:91:c4:ce:2b:
         aa:c8:8e:c0:71:79:de:98:93:b9:53:d8:6d:a6:da:d4:da:5a:
         a1:5b:e4:65:4e:ac:d9:fd:ad:3a:e2:20:eb:bf:dc:fc:2c:90:
         a2:e6:c4:4c:eb:bb:87:3f:80:cc:88:e5:22:14:a6:73:69:32:
         49:ec:0d:4c:f1:70:01:af:c6:d0:97:c9:3b:90:ec:ac:a8:53:
         e4:c4:8b:db:90:7c:9a:22:75:32:e8:68:dc:02:35:04:71:30:
         9f:8b:87:4b:10:b1:14:ea:c8:2b:3d:df:88:17:9e:3f:87:8f:
         8a:e9:f3:45:ff:f9:db:79:df:25:55:dd:d5:e6:5d:5e:d6:95:
         4c:f0:15:d5:5f:58:18:cc:13:94:89:24:09:62:ea:77:4a:f8:
         f8:04:ad:a8:b1:57:d6:5e:e0:5c:8e:72:80:15:32:cb:dd:3b:
         87:1b:a7:ab:f4:d3:e3:40:32:74:b0:83:77:37:06:a5:b2:37:
         52:90:40:56:aa:f3:43:e3:f1:04:fb:05:52:81:5a:bc:d2:c2:
         40:50:24:21:13:56:50:86:d4:fb:81:c8:37:a7:50:e0:ad:1a:
         f1:70:d1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:05 2026 by rpki-client