Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/390757225E1511EFB04EDA1DC4F9AE02.roa
File:                     390757225E1511EFB04EDA1DC4F9AE02.roa (raw, json)
Hash identifier:          GSL6x7fwjG52yvGiYM5M3VKdczF3X7Rwnq0vzDl4uSo=
Subject key identifier:   64:FD:9E:75:A8:61:4A:39:96:62:BA:00:15:84:A3:0A:D3:C1:A9:0C
Certificate issuer:       /CN=A91B673B/serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
Certificate serial:       018C
Authority key identifier: FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/390757225E1511EFB04EDA1DC4F9AE02.roa
Signing time:             Mon 07 Sep 2026 04:55:37 +0000
ROA not before:           Mon 07 Sep 2026 04:55:37 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     153166
IP address blocks:        160.25.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl
                          rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B673B, serialNumber=FC9DCC6BAC4F3D9BEC9ED1E9064D9BCADCF9A3A9
        Validity
            Not Before: Sep  7 04:55:37 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9e43c9-b5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:52:e3:2a:c8:8c:cf:89:e5:c4:3e:3e:94:0f:
                    6f:b9:54:40:04:b8:5a:4b:f4:b2:aa:27:c0:25:dd:
                    43:47:c6:81:4a:99:bc:23:81:e7:86:1b:5d:dd:dd:
                    48:3d:2b:75:fd:9c:df:2e:b2:f9:20:14:5f:a4:1c:
                    fc:e8:17:f9:80:f5:18:48:55:18:e5:21:4c:b0:9d:
                    c9:75:e6:c7:eb:6d:f3:5e:d9:95:86:3e:4b:6f:57:
                    59:9b:84:9f:5e:6e:8d:ca:d3:d1:55:cd:34:3c:43:
                    21:05:ce:ab:4c:e7:e3:04:4d:df:9b:57:35:04:c0:
                    fb:43:f3:66:3e:d1:fb:32:c7:6e:f2:0c:ef:ed:6d:
                    3a:11:b0:54:76:1c:23:5d:d6:8e:f6:c5:0b:f3:8d:
                    d2:41:5c:46:23:cc:c3:1e:21:a8:77:ca:4b:40:43:
                    25:50:88:5e:81:fc:41:43:1c:6a:96:ec:d9:ee:f9:
                    a4:8d:aa:d4:44:68:59:61:d6:64:0e:00:c0:f3:7d:
                    ff:ba:02:59:f2:c9:b0:73:b2:c7:e0:a3:50:b5:6c:
                    4b:56:9c:3b:7b:e2:df:17:51:69:a5:08:43:56:75:
                    7b:2a:c5:4a:e7:9a:c6:00:9d:8b:a1:0f:3c:9c:e9:
                    fb:c5:f9:82:9b:5c:a4:38:33:6b:72:e1:79:24:f0:
                    68:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FD:9E:75:A8:61:4A:39:96:62:BA:00:15:84:A3:0A:D3:C1:A9:0C
            X509v3 Authority Key Identifier:
                keyid:FC:9D:CC:6B:AC:4F:3D:9B:EC:9E:D1:E9:06:4D:9B:CA:DC:F9:A3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/_J3Ma6xPPZvsntHpBk2bytz5o6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_J3Ma6xPPZvsntHpBk2bytz5o6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/794630CC5DFE11EF8C7E817BC4F9AE02/390757225E1511EFB04EDA1DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:bc:be:ed:47:d3:a4:9c:66:5b:2f:3e:7d:b4:9f:da:fe:f9:
         b2:6b:e0:00:cc:72:53:0e:33:84:e6:72:2d:ca:16:ef:3a:18:
         b1:f6:7c:c1:b8:bc:1a:cb:0b:69:a8:8f:55:e6:cc:47:b3:30:
         e9:0b:84:ae:6e:dd:58:40:75:e6:48:d0:7c:81:f9:49:bb:3e:
         65:35:20:07:cd:20:99:e8:e0:ae:9b:55:9f:84:69:f8:48:b9:
         8c:01:56:11:73:ac:f0:b5:35:33:da:c5:b5:a4:34:ea:b5:50:
         4e:bc:db:d5:7d:d5:2b:54:f9:37:c9:9f:13:bf:d0:60:9c:5a:
         07:60:77:f6:b5:71:ff:4a:1b:d1:b0:70:2f:e7:0d:b7:c2:da:
         a0:8b:31:13:bf:e2:0c:1b:e4:32:36:0d:8f:8a:59:85:02:b0:
         54:64:34:28:d2:3f:97:66:e9:13:52:f3:dd:db:b9:f4:49:f9:
         b3:15:ec:52:80:c6:04:67:39:95:dd:13:e7:c6:8c:6a:4e:19:
         c3:dd:46:f6:6c:41:27:0e:39:12:b2:86:a5:85:c9:14:6f:f1:
         22:8c:6a:d0:18:b8:ed:c9:fe:28:72:b7:5e:6d:ee:c3:6e:ba:
         5b:1d:3e:b1:83:0c:26:e2:39:58:b7:87:ff:7c:fb:06:7b:1b:
         13:bc:69:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:10:17 2026 by rpki-client