Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/D525D9EE7E9311F19E24FC4D5FA30FBC.roa
File:                     D525D9EE7E9311F19E24FC4D5FA30FBC.roa (raw, json)
Hash identifier:          /+XJwpoYaaPxuUpocTQ1TOPsH5/A3dpDpHYUXNcoxEY=
Subject key identifier:   4E:13:77:38:40:E7:C2:4B:20:30:A3:A0:CE:A4:3D:3D:1B:07:66:FB
Certificate issuer:       /CN=A91E0855/serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
Certificate serial:       01B9
Authority key identifier: D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/D525D9EE7E9311F19E24FC4D5FA30FBC.roa
Signing time:             Mon 31 Aug 2026 04:53:45 +0000
ROA not before:           Mon 31 Aug 2026 04:53:45 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154024
IP address blocks:        160.25.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl
                          rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 04:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0855, serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
        Validity
            Not Before: Aug 31 04:53:45 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9508d9-556a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:37:12:f3:d6:f3:b1:2d:2b:28:5f:86:2c:d3:
                    e0:40:34:c6:b8:e9:89:a0:19:8b:28:53:7f:15:4a:
                    b8:b8:28:90:d2:f7:ec:d7:d0:c2:ae:d6:1c:55:17:
                    d3:de:f6:6b:b8:cc:ab:1d:86:c0:42:1e:55:08:dc:
                    ce:c2:b0:5e:9d:e2:ce:17:04:fd:96:1d:1d:29:59:
                    3f:36:01:08:94:b8:8e:3b:c3:41:7c:0b:64:2b:01:
                    59:7e:36:2e:9a:fc:5c:7c:7b:ef:f9:04:4c:a9:f2:
                    36:67:c9:2f:7e:00:8a:ab:a6:f9:fc:2f:60:fa:5c:
                    35:e0:e4:85:f6:66:2a:a9:10:b2:61:b6:25:7c:78:
                    05:0d:99:d7:6b:a7:ca:ce:3c:89:d5:7b:0f:fa:74:
                    1c:02:72:05:84:82:89:8d:ce:cf:a6:40:80:c1:af:
                    70:a9:3a:ca:57:a4:03:d6:c9:19:25:16:c8:a4:23:
                    7c:e9:7d:c4:0b:5d:fe:8a:83:d5:3d:be:b6:19:5a:
                    df:67:3f:0c:e3:c8:44:c0:30:d5:6d:96:b4:4b:bf:
                    3d:80:d7:4b:66:5e:8f:e3:03:59:53:87:8f:44:d6:
                    c7:68:60:a2:27:61:0a:a4:2d:66:ec:88:5c:37:fa:
                    e9:f8:ed:48:cd:89:b3:c7:94:14:19:bf:3d:d4:bb:
                    37:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:13:77:38:40:E7:C2:4B:20:30:A3:A0:CE:A4:3D:3D:1B:07:66:FB
            X509v3 Authority Key Identifier:
                keyid:D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/D525D9EE7E9311F19E24FC4D5FA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:6d:18:d9:27:00:31:74:ec:2f:99:2c:2b:e4:b8:e5:7d:fd:
         ec:25:72:a0:9d:84:13:68:f6:3e:d7:82:6b:b9:1a:38:a6:de:
         62:8a:e0:79:2a:57:63:7e:4a:ce:f6:dd:a0:da:34:7c:f0:8e:
         d5:79:ad:47:c7:7e:66:d7:6a:e7:d6:19:fb:3b:85:bd:6c:07:
         d9:5f:32:c1:b0:3a:05:04:d2:4b:7c:0f:fc:aa:bf:a0:aa:29:
         ef:ef:13:68:bf:4c:37:78:ef:47:e1:78:ef:46:04:41:a5:b7:
         47:db:25:89:97:01:17:53:69:21:52:21:24:8e:4a:bf:c1:30:
         08:57:7c:cb:25:b5:a1:4a:f3:ab:7b:1a:41:5e:dc:6a:7c:5b:
         96:05:99:2e:21:73:36:63:be:45:38:9e:88:92:f9:b7:a4:ed:
         3d:5e:d1:1d:0f:3e:f1:8f:97:04:ce:31:05:51:98:54:21:21:
         d8:96:54:11:4d:d6:a0:75:a4:f5:ce:93:cf:50:e6:83:9e:48:
         02:81:69:0b:8e:b9:5c:52:49:69:61:ce:12:08:06:a0:81:e1:
         6f:43:52:b1:73:1a:8f:5e:b3:69:81:d2:27:c7:98:ac:12:8e:
         d2:7d:93:4f:69:15:24:1b:54:17:7e:9f:f7:1d:d3:e6:68:81:
         db:e7:c3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:36:19 2026 by rpki-client