Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7C8CA816644211EF8BECBC36C4F9AE02.roa
File:                     7C8CA816644211EF8BECBC36C4F9AE02.roa (raw, json)
Hash identifier:          1awZ32OC+rdg/9OCRIG/+vfKjzpeYXPZPbb/JkFu1mI=
Subject key identifier:   C6:F0:BE:A3:9B:07:C4:AC:7E:82:92:6D:C1:CD:C2:0A:B7:16:06:E1
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3195
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7C8CA816644211EF8BECBC36C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:23:47 +0000
ROA not before:           Mon 06 Jul 2026 16:23:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152559
IP address blocks:        160.25.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12693 (0x3195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:23:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd693-f77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:f6:98:d2:a2:7e:e1:6e:7e:2b:26:43:18:
                    63:c5:c8:ea:aa:8e:e6:14:73:36:1f:4e:9e:4d:bf:
                    9c:de:34:31:4e:dc:9a:8a:ba:ca:f4:4b:77:a3:33:
                    03:1a:34:6f:2a:0f:73:79:b4:c2:d9:30:97:10:19:
                    2a:a2:bc:4e:14:ce:90:4c:70:2b:ec:ab:9a:53:ba:
                    ef:9c:42:cb:29:2f:32:45:3f:59:bb:a2:af:9d:40:
                    a1:61:d5:fe:e6:61:96:b5:af:15:41:24:bc:22:bb:
                    96:a6:70:ee:13:fa:99:5b:3e:a6:8a:44:60:ab:24:
                    8e:be:93:97:a1:b6:81:ed:a5:1c:18:93:70:fc:21:
                    d3:06:c7:0e:4d:ea:bb:d7:fa:87:44:fd:b1:59:2f:
                    6f:86:60:35:0e:99:67:5a:01:f8:3c:0a:5b:2c:de:
                    8a:41:fe:5b:b9:e3:a1:dc:59:8e:e6:4a:44:65:1e:
                    32:7b:76:8a:fe:e7:45:62:33:b9:82:1b:1a:d7:12:
                    6b:8f:e0:61:4b:1b:8f:26:67:3a:e6:8e:8c:a2:49:
                    67:aa:f5:de:f1:bc:17:6b:04:97:18:a1:16:67:a8:
                    16:ed:2a:7b:51:d7:cf:1f:01:d3:ed:dd:83:0f:a6:
                    48:b1:cb:bc:5e:5f:6a:18:cc:59:3a:6c:06:fe:30:
                    aa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F0:BE:A3:9B:07:C4:AC:7E:82:92:6D:C1:CD:C2:0A:B7:16:06:E1
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7C8CA816644211EF8BECBC36C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:4b:f7:9b:00:5b:c1:23:4d:e7:0f:b7:e9:30:77:72:74:58:
         ef:9a:75:69:e9:ab:16:56:4b:31:e3:fa:cd:84:53:f6:af:33:
         eb:75:ba:30:f2:cb:de:70:5a:ad:6a:16:0b:d4:2b:b0:11:6c:
         41:36:f0:c5:75:9a:07:6a:81:ff:81:ea:d3:6c:81:75:68:7e:
         65:37:48:9d:dd:33:20:f2:c8:83:c8:fd:a1:98:bb:ca:ad:d8:
         13:fb:e5:89:16:1a:20:b9:01:2b:44:ab:d9:ba:c4:a5:ec:ed:
         93:c3:e5:f5:a0:cb:aa:2b:f0:70:47:a7:ec:da:86:17:3b:fe:
         09:02:6c:ac:bc:6c:c1:0e:f5:26:d0:cd:21:95:9c:48:0e:5b:
         98:25:33:ac:74:06:b2:34:5a:a4:15:6f:a3:8f:98:a5:92:71:
         ab:8e:bd:82:9d:d1:14:bb:1f:25:f9:c4:1e:ca:47:5e:aa:f2:
         d6:96:06:3c:ec:65:ed:2d:24:34:ce:3c:7c:10:51:95:9e:80:
         51:75:c2:38:3b:1f:76:b3:f5:d8:6f:c1:e1:27:df:3b:82:31:
         cd:fc:b1:4f:82:31:ce:b0:0f:80:12:82:05:5a:41:ba:86:84:
         50:8a:94:01:7f:23:0e:97:3b:18:8f:af:05:66:dd:96:e1:5a:
         1b:b5:65:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:11 2026 by rpki-client