Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/19D852C853EF11EF838B8354C4F9AE02.roa
File:                     19D852C853EF11EF838B8354C4F9AE02.roa (raw, json)
Hash identifier:          dmwbHi1tc0XMv9OCH0eFklsU2JbH9aUVNppAHtWM5ps=
Subject key identifier:   70:0C:A5:FE:0C:67:74:06:2A:8A:AF:62:5C:44:7A:36:82:CD:D2:85
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F54
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/19D852C853EF11EF838B8354C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:25:12 +0000
ROA not before:           Sun 31 May 2026 16:25:12 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     152525
IP address blocks:        160.25.136.0/24 maxlen: 24
                          160.25.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12116 (0x2f54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:25:12 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c60e8-3f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:71:7c:88:60:d7:dc:1b:82:03:16:b9:9e:9e:
                    46:08:07:49:78:fb:ce:3a:0e:5c:8f:fb:cf:09:ce:
                    9e:0f:16:31:38:d4:f7:f8:3b:af:70:69:d2:bd:35:
                    63:3f:71:f8:a0:90:a8:93:94:05:ac:fc:b9:dd:07:
                    bc:26:0e:45:c2:10:1e:6f:00:42:04:42:f3:94:ba:
                    82:76:d1:9a:17:f5:54:65:f7:69:81:ef:4e:ac:fc:
                    12:b4:d3:4a:0b:12:13:8b:1b:c9:02:30:28:06:21:
                    ed:17:1c:23:f1:da:28:0a:e7:29:67:2b:66:8a:22:
                    15:6d:66:f8:b1:b0:94:0a:fe:4c:17:77:eb:70:3f:
                    4e:bb:6e:17:1b:77:0c:d2:11:2d:d3:a0:85:c9:bd:
                    e6:02:27:98:b4:ef:1d:04:34:36:b8:d0:c6:f3:aa:
                    22:63:62:aa:43:95:df:f9:33:e9:8e:00:fc:98:14:
                    08:47:86:5e:6d:40:29:50:fc:c1:ee:f2:3d:10:1c:
                    bb:8d:e0:16:bf:81:c5:e5:0a:45:7d:14:3e:cd:86:
                    aa:5e:f2:17:e9:c3:e2:64:82:4c:e5:a7:79:0d:39:
                    ab:b7:67:5b:53:69:77:93:d8:e2:ff:51:b6:05:d4:
                    7f:32:58:d6:15:b7:77:f1:bc:17:10:7d:de:e8:58:
                    ae:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0C:A5:FE:0C:67:74:06:2A:8A:AF:62:5C:44:7A:36:82:CD:D2:85
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/19D852C853EF11EF838B8354C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:ed:93:89:8a:65:60:b4:80:da:c2:2c:e3:c3:66:84:8b:57:
         3f:35:7e:34:54:a3:b9:c9:ea:04:11:69:73:ca:27:4f:b8:36:
         87:0c:6e:00:f6:71:c4:49:d6:db:c4:eb:4e:3d:54:ad:35:25:
         5e:23:59:e2:05:9c:d7:51:14:2a:ff:6f:f6:ef:37:0a:58:b3:
         cf:06:23:fb:4f:5c:0e:a1:e0:5c:49:53:7b:ce:6d:1f:a7:b5:
         b0:7e:7f:4f:41:81:83:11:3f:5f:29:ca:c8:01:98:30:09:c9:
         c2:b2:ca:37:81:66:76:6a:e7:d3:55:9a:b0:6a:76:31:db:04:
         b9:0a:e8:7b:ef:2b:2f:1b:0a:d1:af:bc:99:cb:99:17:56:e1:
         cd:30:d8:c6:fc:bd:a4:3a:15:31:cf:c6:de:6c:9f:d7:cd:41:
         06:c7:3f:63:61:b8:bc:18:ef:63:ae:7e:ca:a0:9b:78:db:83:
         45:2e:a2:0a:59:06:39:b9:41:0b:ba:a7:f2:20:e6:e8:f5:9a:
         dd:11:35:d9:2d:53:41:da:1c:6f:6e:83:03:f7:a4:4f:a8:f9:
         c4:a4:9c:1f:17:cc:8f:47:90:7d:86:bf:86:bd:e7:be:62:8d:
         50:de:66:5a:34:69:f9:98:82:d8:22:8f:ba:92:56:a2:9c:cb:
         11:5e:ed:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:42:02 2026 by rpki-client