Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/C470564044BD11EFA8F7157FC4F9AE02.roa
File:                     C470564044BD11EFA8F7157FC4F9AE02.roa (raw, json)
Hash identifier:          qUAsmwJrGNnZ4LMlEZRu5pS5wvgSSSd1+jpCN0g9BCk=
Subject key identifier:   44:31:E1:89:65:CB:7A:A8:85:E2:E3:84:E9:1C:C0:42:58:96:75:FF
Certificate issuer:       /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Certificate serial:       019A
Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/C470564044BD11EFA8F7157FC4F9AE02.roa
Signing time:             Mon 31 Aug 2026 04:53:53 +0000
ROA not before:           Mon 31 Aug 2026 04:53:53 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     152698
IP address blocks:        160.25.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl
                          rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 04:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 410 (0x19a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
        Validity
            Not Before: Aug 31 04:53:53 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9508e1-61e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:c3:3e:67:33:27:8a:13:bf:ce:fa:5b:f0:
                    a4:c8:cb:af:99:b3:a8:8f:b5:bb:d5:18:bb:19:c1:
                    30:cc:90:7c:87:f3:40:8c:e0:74:7f:5d:68:e4:7c:
                    a3:cb:9a:87:af:ea:9d:72:c3:65:a1:d4:32:1b:d0:
                    1e:59:a4:cc:5a:d8:35:c1:80:4b:16:e2:db:5a:7b:
                    f9:a8:6b:75:61:fc:52:0d:31:4b:e9:e5:09:ef:a2:
                    61:39:bd:d2:9f:af:c2:af:50:51:ad:b5:14:7f:be:
                    5c:07:ff:66:17:76:db:51:58:75:84:91:46:cd:74:
                    ac:50:02:f7:07:fa:6a:5e:79:3d:62:73:cd:f4:96:
                    1e:91:8f:49:28:0f:b3:2d:ea:b5:aa:e2:7f:14:e3:
                    7e:e2:b5:fa:ca:1a:5c:93:32:33:59:03:78:0a:9d:
                    90:0c:24:66:98:be:f3:b7:b5:38:90:83:f8:cd:c3:
                    cf:2d:09:43:70:53:7e:bd:e6:ad:e0:cb:4f:86:63:
                    28:e0:91:f5:a2:09:83:ae:4a:14:e3:95:a8:7b:58:
                    8e:f4:77:d8:39:ad:e4:98:16:47:57:8f:ad:4b:d3:
                    f6:35:07:48:7b:37:c5:bf:e1:04:68:50:ea:f1:df:
                    d7:9b:e3:df:78:a7:41:04:f1:32:08:17:c0:3c:7c:
                    78:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:31:E1:89:65:CB:7A:A8:85:E2:E3:84:E9:1C:C0:42:58:96:75:FF
            X509v3 Authority Key Identifier:
                keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/C470564044BD11EFA8F7157FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:96:a2:bb:d4:ed:de:3a:96:55:c2:28:0b:c8:fb:69:44:37:
         96:4e:be:e6:b9:61:2c:13:89:0d:2b:35:7b:90:47:dd:11:a3:
         10:5b:ef:f4:99:96:22:04:59:c3:cc:16:9a:ff:8f:a3:b7:09:
         f5:4f:a0:09:a7:36:3c:76:10:fb:3f:fd:4f:1d:f0:0a:7e:86:
         6f:4b:8e:95:5f:3c:a1:27:e5:86:42:5f:95:90:f5:1e:19:30:
         bf:7c:88:79:51:33:04:9c:c1:2f:ea:21:7a:c1:59:ef:c4:1a:
         46:17:af:45:12:a5:02:6e:ff:73:dc:21:28:1f:4a:3a:43:27:
         1c:c6:71:3f:88:19:b8:ed:ab:b6:8e:0e:3f:0c:4f:b8:e2:6a:
         bd:ab:73:a8:3f:6a:38:d0:ae:f9:55:68:1f:09:7f:e0:10:58:
         c8:2e:75:66:8a:2a:06:0f:4f:02:de:62:7f:9f:08:d1:d1:e4:
         78:e2:5a:17:f3:09:f5:df:4b:03:d6:d6:9c:a7:6a:81:d8:69:
         cb:eb:8d:46:32:66:56:f5:9d:ed:49:b2:1c:c1:ba:dc:aa:52:
         3a:8b:7d:98:59:aa:62:62:99:09:0d:26:cd:0b:b8:40:06:94:
         07:ca:b2:9d:6d:1f:3b:f6:ae:fa:d4:f9:5c:fb:8e:f0:30:8f:
         a7:ba:50:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:02:47 2026 by rpki-client