Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/AE82DA3CCA3711F09D02C15BC4F9AE02.roa
File:                     AE82DA3CCA3711F09D02C15BC4F9AE02.roa (raw, json)
Hash identifier:          M6ls0jXTH4pUjtm2iE2jOj7mJz7/jJFkAHSHdBjdY6o=
Subject key identifier:   40:E3:45:E6:8D:3C:FE:E4:14:E5:72:90:83:0B:DF:70:F5:45:40:38
Certificate issuer:       /CN=A911B22E/serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
Certificate serial:       0146
Authority key identifier: 24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/AE82DA3CCA3711F09D02C15BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:56:38 +0000
ROA not before:           Tue 25 Nov 2025 19:48:15 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     152932
IP address blocks:        160.25.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl
                          rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B22E, serialNumber=242AB91FA7C7A64ACE77D9B4F661E28C0B15B8E0
        Validity
            Not Before: Nov 25 19:48:15 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a46fc6-eb47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:99:87:b8:d0:9c:ce:ce:cd:c6:2c:b7:76:4d:
                    9e:69:44:a7:a0:8c:7c:dd:78:1c:f4:59:e5:f2:8b:
                    35:08:f8:54:c1:c6:35:65:c6:74:ee:d7:86:3f:06:
                    a5:52:c1:34:f4:c1:2f:5d:b6:e7:f9:5b:6a:35:8a:
                    30:ed:b9:7e:bd:8a:cb:a9:24:94:50:8c:30:ae:b9:
                    7b:5b:ae:6e:1c:ea:e9:89:5a:30:b1:45:2c:45:71:
                    1a:d2:41:b4:33:4a:3c:54:fa:51:52:a6:2d:9a:31:
                    40:8b:d5:c3:34:2c:d4:be:62:41:6a:34:d2:38:6d:
                    62:91:42:26:4f:7e:da:48:8a:fb:67:6f:df:b7:ad:
                    04:34:0b:65:a3:11:16:b0:02:d6:c5:2e:66:5f:35:
                    2d:ff:24:9a:4b:01:95:2b:2e:ce:c0:21:48:e6:a2:
                    03:34:70:b9:96:30:a6:d0:82:fd:51:42:0e:33:6a:
                    48:b9:79:1f:1f:e5:70:73:ba:fe:c5:f2:48:e3:48:
                    5e:54:42:ae:2f:63:cf:e2:fc:7c:36:31:01:e1:ac:
                    4c:a8:e4:7a:8e:2b:5f:2c:8f:e2:9e:31:1e:a6:f3:
                    ee:aa:53:65:cc:32:67:34:0d:38:25:9d:89:7c:a7:
                    83:cf:fe:8f:bb:16:e2:ee:e4:15:80:e4:0f:25:2e:
                    95:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E3:45:E6:8D:3C:FE:E4:14:E5:72:90:83:0B:DF:70:F5:45:40:38
            X509v3 Authority Key Identifier:
                keyid:24:2A:B9:1F:A7:C7:A6:4A:CE:77:D9:B4:F6:61:E2:8C:0B:15:B8:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/JCq5H6fHpkrOd9m09mHijAsVuOA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JCq5H6fHpkrOd9m09mHijAsVuOA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/83415B36379511EF87CFD64BC4F9AE02/AE82DA3CCA3711F09D02C15BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:14:0e:4c:d4:bc:73:de:ac:a5:f8:2a:8c:a6:7b:0f:83:cf:
         53:60:a8:13:f2:8d:b7:12:e8:04:3c:59:b3:89:fd:9e:2c:c0:
         0a:a2:e2:a5:3f:07:90:4d:c6:4e:15:22:f7:24:70:91:1b:d4:
         3a:aa:71:52:dc:b5:6a:a8:4c:c7:1f:31:dd:99:37:9c:3e:fa:
         98:59:4e:5f:03:66:47:47:c8:ea:76:1f:07:23:32:00:ad:31:
         aa:35:1c:a2:50:96:70:4b:62:5c:7c:89:67:6b:9c:8c:89:12:
         ed:a4:4b:5f:5e:8e:7a:3c:69:56:5e:7a:e5:ba:54:d0:ff:24:
         7d:8e:1f:43:07:e5:a5:d6:c4:90:c8:9a:49:1f:86:2d:43:48:
         c3:ef:4a:a0:a2:2b:57:f7:15:8e:67:fa:8e:25:73:12:f5:f2:
         6c:30:5c:fb:38:49:7c:80:17:78:d7:45:e9:52:71:f8:3f:0c:
         00:08:fb:27:1d:82:93:b3:a3:08:bd:76:ac:0a:0f:6e:be:8a:
         1b:d3:a3:7f:87:13:69:c5:cf:09:93:a5:0b:c3:27:9d:2c:7c:
         cb:14:53:e6:0b:a7:5d:6e:e9:f3:19:f7:ea:31:ca:49:fd:66:
         ea:d8:64:34:11:9d:11:ce:66:9b:37:6a:66:1f:28:8c:94:e3:
         9b:bc:14:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:48:54 2026 by rpki-client