Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/C07DC8947E9311F185EA92095FA30FBC.roa
File:                     C07DC8947E9311F185EA92095FA30FBC.roa (raw, json)
Hash identifier:          7CMd5dcpRfgtKPTvC6dH6eRU9oRo3RkPrXSFOVnBt+c=
Subject key identifier:   DD:15:25:3A:D8:6F:18:25:FB:C2:48:5F:98:97:9A:75:27:3D:49:29
Certificate issuer:       /CN=A91E0855/serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
Certificate serial:       019A
Authority key identifier: D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/C07DC8947E9311F185EA92095FA30FBC.roa
Signing time:             Mon 13 Jul 2026 08:20:48 +0000
ROA not before:           Mon 13 Jul 2026 08:20:48 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152702
IP address blocks:        160.25.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl
                          rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 05:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0855, serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
        Validity
            Not Before: Jul 13 08:20:48 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a549fe0-15db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ca:96:21:93:78:2a:c0:ae:8a:4b:06:d5:bd:
                    4f:c6:48:69:94:1e:7e:5e:28:dc:e4:95:d8:2a:ff:
                    27:a4:9c:9f:62:d0:e6:8e:7e:26:8f:d6:26:48:06:
                    3e:d0:8a:e2:93:69:de:21:92:4b:da:a1:74:4c:28:
                    0d:8a:79:c6:dc:f1:10:8f:97:f1:c7:4d:4d:35:6f:
                    12:97:6e:96:a5:6a:8d:a9:76:45:66:47:b9:17:c3:
                    64:a0:0b:fc:47:20:4e:39:b6:c1:7d:84:b7:12:83:
                    2e:92:80:af:78:dc:1c:83:da:b4:36:9b:07:b9:be:
                    57:3c:c7:7d:69:6f:69:1a:0b:d7:50:6f:05:45:89:
                    18:20:35:53:ce:f7:d6:49:47:08:f4:06:d3:b2:94:
                    5e:03:27:12:3b:d8:ec:86:0d:14:1b:26:e7:9c:a3:
                    13:7b:b3:d4:4e:05:39:d5:ad:8d:56:57:f0:c8:28:
                    39:a4:4e:90:19:7b:36:84:a5:38:08:3f:04:bb:d3:
                    14:53:fc:5b:26:e9:4e:83:96:32:84:f8:b0:bb:1e:
                    58:26:56:dd:1e:1f:02:37:80:5b:40:9e:cc:8d:e2:
                    2d:19:06:17:59:1e:d6:17:4a:ef:2d:fa:e6:90:c5:
                    b1:4c:81:ae:1e:29:0e:03:b4:f6:da:62:ae:da:77:
                    67:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:15:25:3A:D8:6F:18:25:FB:C2:48:5F:98:97:9A:75:27:3D:49:29
            X509v3 Authority Key Identifier:
                keyid:D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/C07DC8947E9311F185EA92095FA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:08:3e:a3:e6:9c:f4:00:90:92:d5:a0:58:9b:09:bc:46:c3:
         18:28:d2:6e:a0:95:de:04:b8:04:6f:3e:6c:75:6c:a7:8a:fd:
         0f:eb:a1:5c:39:2c:d5:6f:e6:ae:ae:14:9a:fb:7f:cd:8c:2e:
         38:ab:0b:28:05:dc:05:c0:8e:80:82:03:d9:6b:2a:76:5d:fa:
         50:09:56:5d:8e:27:94:8a:0c:ef:ac:16:6a:b0:9f:0d:80:96:
         54:15:49:39:ad:d3:57:64:2f:20:c1:c3:56:57:f7:66:e6:a6:
         4b:c8:09:75:17:6e:6a:3b:c1:d5:58:31:0e:33:c7:31:60:c8:
         75:4c:cd:e2:6d:f7:73:47:e1:47:55:8f:51:08:91:f3:7e:1f:
         be:8c:5f:33:8f:8b:6e:c4:96:a5:d0:18:ac:8e:22:19:4a:8e:
         e2:9e:71:c6:45:af:88:31:03:c7:52:69:dc:ba:cf:48:c5:78:
         df:88:39:a0:f8:9d:31:04:d5:68:87:7f:2b:c9:40:cb:ea:e5:
         1a:05:0c:89:6e:22:a3:6b:88:e1:95:ad:8a:8c:15:49:91:9a:
         c8:fc:20:71:a8:72:dd:a2:31:9d:83:21:85:56:df:1f:89:27:
         16:27:11:1c:3a:2d:11:95:98:b2:70:80:ea:60:ee:ab:a2:06:
         27:45:17:9e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTA4NTUxMTAvBgNVBAUTKEQzMkE1QURDMDU0MkMyRTgxN0MyMDJCRTZCNzI4MUU4
NjlEMTc4OTcwHhcNMjYwNzEzMDgyMDQ4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTU0OWZlMC0xNWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3cqWIZN4KsCuiksG1b1PxkhplB5+Xijc5JXYKv8npJyfYtDmjn4mj9YmSAY+
0Irik2neIZJL2qF0TCgNinnG3PEQj5fxx01NNW8Sl26WpWqNqXZFZke5F8NkoAv8
RyBOObbBfYS3EoMukoCveNwcg9q0NpsHub5XPMd9aW9pGgvXUG8FRYkYIDVTzvfW
SUcI9AbTspReAycSO9jshg0UGybnnKMTe7PUTgU51a2NVlfwyCg5pE6QGXs2hKU4
CD8Eu9MUU/xbJulOg5YyhPiwux5YJlbdHh8CN4BbQJ7MjeItGQYXWR7WF0rvLfrm
kMWxTIGuHikOA7T22mKu2ndnzwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN0VJTrY
bxgl+8JIX5iXmnUnPUkpMB8GA1UdIwQYMBaAFNMqWtwFQsLoF8ICvmtygehp0XiX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg1NS81MDRDRkZFMjQ0
OTYxMUVGOEU4NEU2M0RDNEY5QUUwMi8weXBhM0FWQ3d1Z1h3Z0stYTNLQjZHblJl
SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzB5cGEzQVZDd3VnWHdnSy1hM0tCNkduUmVKYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTA4NTUvNTA0Q0ZGRTI0NDk2MTFFRjhFODRFNjNEQzRGOUFFMDIvQzA3REM4OTQ3
RTkzMTFGMTg1RUE5MjA5NUZBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoBnhMA0GCSqGSIb3DQEBCwUAA4IBAQCTCD6j5pz0AJCS1aBYmwm8
RsMYKNJuoJXeBLgEbz5sdWyniv0P66FcOSzVb+aurhSa+3/NjC44qwsoBdwFwI6A
ggPZayp2XfpQCVZdjieUigzvrBZqsJ8NgJZUFUk5rdNXZC8gwcNWV/dm5qZLyAl1
F25qO8HVWDEOM8cxYMh1TM3ibfdzR+FHVY9RCJHzfh++jF8zj4tuxJal0BisjiIZ
So7innHGRa+IMQPHUmncus9IxXjfiDmg+J0xBNVoh38ryUDL6uUaBQyJbiKja4jh
la2KjBVJkZrI/CBxqHLdojGdgyGFVt8fiScWJxEcOi0RlZiycIDqYO6rogYnRRee
-----END CERTIFICATE-----
Generated at Sat Jul 18 04:28:50 2026 by rpki-client