Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F05309563CED11EF85E9F77BC4F9AE02.roa
File:                     F05309563CED11EF85E9F77BC4F9AE02.roa (raw, json)
Hash identifier:          WaQhOl6VU+sbkIwDgQGYRKmNtOtkbxzj/oZEOONKuHA=
Subject key identifier:   4E:A5:6B:C3:6F:AD:4E:D6:34:5D:08:77:0C:5F:78:AE:E1:07:F1:C0
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3194
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F05309563CED11EF85E9F77BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:23:45 +0000
ROA not before:           Mon 06 Jul 2026 16:23:45 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152557
IP address blocks:        160.25.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12692 (0x3194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:23:45 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd691-6606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e5:21:fe:ef:dd:2f:f5:b4:23:73:d6:de:7e:
                    ff:19:f4:c8:5d:bb:27:ce:1f:2e:bb:39:cd:46:ca:
                    f9:c4:13:60:60:3c:25:92:9d:3b:68:cf:95:2b:67:
                    22:17:f1:4f:77:1b:3b:81:4f:96:b6:1b:2a:43:22:
                    9f:b2:c2:11:6b:80:35:92:7c:45:41:22:3d:56:58:
                    69:2d:48:1e:82:0c:c7:f8:d5:63:45:97:35:71:6c:
                    1e:08:1e:f4:b4:82:a1:14:59:2c:dd:80:46:9e:ce:
                    ca:dd:c3:2f:79:71:d3:55:56:57:a5:9f:82:ba:6e:
                    c4:a6:32:8d:af:0f:9e:98:64:15:35:d7:59:bd:3d:
                    2a:3e:d8:87:3d:6a:75:12:0e:e8:af:d7:93:be:f6:
                    8a:18:88:f0:6c:57:74:e1:29:39:67:64:e7:03:b4:
                    8c:6f:8d:17:e7:88:e8:24:8e:02:37:e6:b8:39:f6:
                    a5:07:cc:ec:cd:6c:27:3c:f2:c2:07:5c:57:cc:20:
                    fb:ca:d4:05:41:58:59:40:2a:79:c9:8b:7e:99:a3:
                    5a:0a:e8:da:08:fc:d1:cc:13:1d:e4:12:2f:22:a3:
                    a9:7e:fe:2d:0c:6a:0c:52:65:93:82:45:dd:b0:4e:
                    46:fc:bc:66:67:14:1a:4a:a4:c7:9b:dd:da:a7:9d:
                    7e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A5:6B:C3:6F:AD:4E:D6:34:5D:08:77:0C:5F:78:AE:E1:07:F1:C0
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F05309563CED11EF85E9F77BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:1b:7b:46:2c:97:df:97:77:61:59:61:1c:0c:f9:a9:a2:26:
         91:b9:0d:e9:36:4b:c0:2d:33:2e:41:68:8e:79:8b:f7:9c:0c:
         1b:b7:41:89:04:bd:8c:e7:68:96:7d:4a:3f:0f:d1:e5:51:e8:
         46:90:45:80:f2:d6:c1:58:87:12:04:23:c3:36:06:7b:4f:fc:
         2f:d6:cf:1a:65:9a:f0:81:c9:6a:3c:c7:c6:1f:17:85:71:e3:
         c7:39:9b:b4:b0:56:0b:1b:a6:df:70:b3:6b:4e:db:de:d6:13:
         1d:5d:4b:8f:3d:fe:4c:f4:56:d6:4a:73:c8:2a:4e:24:55:e5:
         91:8d:08:f6:cc:82:42:51:c9:7f:0f:ef:45:47:77:77:95:40:
         ed:68:74:ba:69:16:68:1a:ed:30:5f:98:12:57:59:97:cd:b5:
         e8:78:34:df:a7:62:d3:b8:a8:0d:5f:bd:a4:63:f9:f1:e4:af:
         54:e6:73:85:41:1e:d7:41:5f:03:f0:ff:da:ac:a4:3d:e3:39:
         94:16:13:0a:24:8a:d7:0e:5c:56:7f:b2:f8:8c:59:08:30:56:
         ac:77:b5:e3:d4:81:71:53:fd:4d:5b:60:ca:cf:e8:9c:ce:fc:
         0e:28:8a:1c:c4:ab:6f:41:a6:31:d0:d1:9a:41:23:de:35:1f:
         bf:b3:25:c4
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICMZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNzA2MTYyMzQ1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZDY5MS02NjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwuUh/u/dL/W0I3PW3n7/GfTIXbsnzh8uuznNRsr5xBNgYDwlkp07aM+VK2ci
F/FPdxs7gU+WthsqQyKfssIRa4A1knxFQSI9VlhpLUgeggzH+NVjRZc1cWweCB70
tIKhFFks3YBGns7K3cMveXHTVVZXpZ+Cum7EpjKNrw+emGQVNddZvT0qPtiHPWp1
Eg7or9eTvvaKGIjwbFd04Sk5Z2TnA7SMb40X54joJI4CN+a4OfalB8zszWwnPPLC
B1xXzCD7ytQFQVhZQCp5yYt+maNaCujaCPzRzBMd5BIvIqOpfv4tDGoMUmWTgkXd
sE5G/LxmZxQaSqTHm93ap51+8wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFE6la8Nv
rU7WNF0IdwxfeK7hB/HAMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRjA1MzA5NTYz
Q0VEMTFFRjg1RTlGNzdCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBmAMA0GCSqGSIb3DQEBCwUAA4IBAQBYG3tGLJffl3dhWWEcDPmp
oiaRuQ3pNkvALTMuQWiOeYv3nAwbt0GJBL2M52iWfUo/D9HlUehGkEWA8tbBWIcS
BCPDNgZ7T/wv1s8aZZrwgclqPMfGHxeFcePHOZu0sFYLG6bfcLNrTtve1hMdXUuP
Pf5M9FbWSnPIKk4kVeWRjQj2zIJCUcl/D+9FR3d3lUDtaHS6aRZoGu0wX5gSV1mX
zbXoeDTfp2LTuKgNX72kY/nx5K9U5nOFQR7XQV8D8P/arKQ94zmUFhMKJIrXDlxW
f7L4jFkIMFasd7Xj1IFxU/1NW2DKz+iczvwOKIocxKtvQaYx0NGaQSPeNR+/syXE
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:46 2026 by rpki-client