Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/388D7E38797D11EF8CA64711C4F9AE02.roa
File:                     388D7E38797D11EF8CA64711C4F9AE02.roa (raw, json)
Hash identifier:          jDnZhDcL3845Secu0bR+V2OD0F1RLl9nEAFhwuxNGGs=
Subject key identifier:   33:17:CE:E2:69:32:BA:61:61:44:AC:8F:2C:92:5A:47:2B:3E:FC:F4
Certificate issuer:       /CN=A91D4ACD/serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
Certificate serial:       0177
Authority key identifier: 86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/388D7E38797D11EF8CA64711C4F9AE02.roa
Signing time:             Fri 21 Aug 2026 04:57:34 +0000
ROA not before:           Fri 21 Aug 2026 04:57:34 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     153316
IP address blocks:        160.187.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl
                          rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 20 Sep 2026 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4ACD, serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
        Validity
            Not Before: Aug 21 04:57:34 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a87dabe-a56d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:15:1f:84:1c:5c:87:ff:53:7d:8e:13:84:22:
                    de:16:1d:e8:91:94:9b:08:e6:78:2a:4a:b1:01:c7:
                    86:62:2b:23:5f:a9:92:26:fc:d5:42:b1:1d:81:ff:
                    cc:10:78:b0:4c:75:89:20:fd:cb:fe:fc:e7:3a:17:
                    a0:7d:9c:8f:5c:db:73:6a:2a:f2:2b:cd:3c:91:b2:
                    55:90:92:18:3c:2c:fe:60:34:14:eb:c6:68:f2:f9:
                    ee:8e:dc:83:a2:46:d2:c1:0b:ac:6a:6f:f2:81:94:
                    d3:c3:e0:85:13:84:c0:d2:d6:09:a2:b7:2e:41:d6:
                    63:67:2b:ed:ee:77:ca:28:37:42:6b:c3:08:01:ac:
                    89:5b:94:f9:e7:91:ae:91:08:68:40:c4:c9:f5:d3:
                    2a:e7:d3:11:fc:9a:4b:2c:1a:66:75:89:5e:9c:5a:
                    b0:d3:80:f5:68:57:5a:7d:24:f3:fd:41:7f:cb:13:
                    9b:b0:96:1e:5e:8b:92:28:46:75:98:f6:6c:d6:36:
                    46:d8:09:9b:82:66:e5:24:87:8b:02:8e:80:44:54:
                    0c:f8:75:a7:15:d5:cc:de:40:6c:72:10:d2:56:69:
                    dc:27:e1:91:e5:24:f8:34:82:85:53:45:8a:26:8c:
                    8e:8b:c5:18:a7:8f:47:d7:18:07:53:9e:10:41:d0:
                    1e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:17:CE:E2:69:32:BA:61:61:44:AC:8F:2C:92:5A:47:2B:3E:FC:F4
            X509v3 Authority Key Identifier:
                keyid:86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/388D7E38797D11EF8CA64711C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:c5:08:e8:ff:a8:03:f3:3e:ff:b7:29:5e:ba:bf:0d:05:99:
         29:ea:56:e5:39:cd:38:27:20:04:d4:9f:95:d1:81:4e:1a:33:
         22:c4:e0:cd:f4:c6:59:4a:7d:f2:ea:87:52:78:a3:64:c3:da:
         a6:1d:02:70:6f:98:52:d0:95:83:c6:7d:54:90:f1:ca:88:91:
         95:db:a9:17:07:af:5a:95:53:3f:93:dc:f5:28:29:8b:76:bd:
         9f:75:2f:1e:05:97:20:77:52:13:f7:d9:f0:93:24:f4:65:60:
         de:a7:bb:87:ec:2c:e3:91:ee:24:ac:9d:f4:18:5d:03:b2:11:
         0e:24:61:05:a7:5b:23:56:21:2d:bd:ab:d9:67:cb:ca:26:86:
         9d:17:3a:80:fa:3e:be:04:5f:e7:83:16:d9:b4:84:d0:17:96:
         56:fb:c4:17:ed:ea:20:59:f8:f2:14:9c:b6:75:ab:7c:09:52:
         ce:bc:e4:c3:fd:5d:c1:36:8d:80:1c:fe:73:a0:f3:8a:9e:01:
         0c:1e:02:71:b4:b1:8e:9d:ce:9c:c1:0c:07:d6:88:c6:21:c4:
         f2:22:44:10:b6:00:d0:a9:d7:fd:c3:82:14:4f:92:59:65:51:
         a2:26:b0:58:9e:4c:84:47:5e:b2:42:0a:b2:fc:61:60:a0:78:
         1d:5e:2e:ad
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDRBQ0QxMTAvBgNVBAUTKDg2OTA0RDJEMDJEQjhBMDU5QkVEOTM4RjJGOEVBRUYz
QzQyMDZGRDAwHhcNMjYwODIxMDQ1NzM0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg3ZGFiZS1hNTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2BUfhBxch/9TfY4ThCLeFh3okZSbCOZ4KkqxAceGYisjX6mSJvzVQrEdgf/M
EHiwTHWJIP3L/vznOhegfZyPXNtzairyK808kbJVkJIYPCz+YDQU68Zo8vnujtyD
okbSwQusam/ygZTTw+CFE4TA0tYJorcuQdZjZyvt7nfKKDdCa8MIAayJW5T555Gu
kQhoQMTJ9dMq59MR/JpLLBpmdYlenFqw04D1aFdafSTz/UF/yxObsJYeXouSKEZ1
mPZs1jZG2AmbgmblJIeLAo6ARFQM+HWnFdXM3kBschDSVmncJ+GR5ST4NIKFU0WK
JoyOi8UYp49H1xgHU54QQdAe7wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDMXzuJp
MrphYUSsjyySWkcrPvz0MB8GA1UdIwQYMBaAFIaQTS0C24oFm+2Tjy+OrvPEIG/Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEFDRC8xRjUzNTY5RTc1
NkUxMUVGOUNBNDZFNTFDNEY5QUUwMi9ocEJOTFFMYmlnV2I3Wk9QTDQ2dTg4UWdi
OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2hwQk5MUUxiaWdXYjdaT1BMNDZ1ODhRZ2I5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDRBQ0QvMUY1MzU2OUU3NTZFMTFFRjlDQTQ2RTUxQzRGOUFFMDIvMzg4RDdFMzg3
OTdEMTFFRjhDQTY0NzExQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoLsZMA0GCSqGSIb3DQEBCwUAA4IBAQCRxQjo/6gD8z7/tyleur8N
BZkp6lblOc04JyAE1J+V0YFOGjMixODN9MZZSn3y6odSeKNkw9qmHQJwb5hS0JWD
xn1UkPHKiJGV26kXB69alVM/k9z1KCmLdr2fdS8eBZcgd1IT99nwkyT0ZWDep7uH
7Czjke4krJ30GF0DshEOJGEFp1sjViEtvavZZ8vKJoadFzqA+j6+BF/ngxbZtITQ
F5ZW+8QX7eogWfjyFJy2dat8CVLOvOTD/V3BNo2AHP5zoPOKngEMHgJxtLGOnc6c
wQwH1ojGIcTyIkQQtgDQqdf9w4IUT5JZZVGiJrBYnkyER16yQgqy/GFgoHgdXi6t
-----END CERTIFICATE-----
Generated at Sun Sep 13 08:17:12 2026 by rpki-client