Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/08D9C8604ABE11EF8708395BC4F9AE02.roa
File:                     08D9C8604ABE11EF8708395BC4F9AE02.roa (raw, json)
Hash identifier:          ol6GVz47sRCGDVdpSbtKqXjVimVSYgLAgjn3lhayf1k=
Subject key identifier:   B8:1A:C4:AF:35:B4:85:88:17:85:8C:16:54:86:B1:99:89:77:C3:D9
Certificate issuer:       /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Certificate serial:       019C
Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/08D9C8604ABE11EF8708395BC4F9AE02.roa
Signing time:             Mon 31 Aug 2026 04:53:57 +0000
ROA not before:           Mon 31 Aug 2026 04:53:57 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     29802
IP address blocks:        160.25.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl
                          rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
        Validity
            Not Before: Aug 31 04:53:57 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9508e5-5b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ff:1b:c5:11:69:92:ae:f3:10:e4:d3:d2:13:
                    03:d3:74:42:b6:3d:35:b4:2a:0f:23:39:45:da:db:
                    76:40:b5:4b:41:96:c2:82:3a:bd:79:1b:b2:4b:01:
                    4d:fb:7b:d7:1a:ec:15:14:66:ae:83:07:7f:0f:e2:
                    f7:5c:b2:c0:03:ef:7c:6f:35:0f:79:6c:a7:2c:c8:
                    15:89:c1:27:55:4c:0d:bc:80:f7:60:8d:a2:9c:f8:
                    01:7c:61:15:11:a1:a9:ec:36:87:b6:86:0c:db:af:
                    a8:e2:d8:03:48:6b:ec:9d:d2:ec:19:f6:06:02:38:
                    96:10:f8:f2:93:a6:1c:95:c5:3a:6d:77:92:f4:3b:
                    b1:4a:51:f7:6f:f4:11:2b:51:fc:54:8b:04:16:8a:
                    79:36:cf:e5:c5:c4:34:2f:29:78:c6:3f:c5:1a:9a:
                    7a:55:fd:ba:2a:ba:b9:57:08:4c:c6:2e:79:9d:b9:
                    58:ad:26:3e:88:1d:4a:f6:db:42:3b:72:5a:fc:34:
                    de:1e:de:72:b5:e9:c2:28:0e:df:3c:aa:7f:51:fa:
                    66:5d:a4:7f:e7:fc:4b:96:e6:cc:31:04:2e:d3:b3:
                    05:56:9e:9b:88:2f:ff:56:6e:4e:65:81:54:65:4c:
                    74:6a:80:64:3f:ee:c5:df:96:76:b8:5b:04:58:9b:
                    36:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1A:C4:AF:35:B4:85:88:17:85:8C:16:54:86:B1:99:89:77:C3:D9
            X509v3 Authority Key Identifier:
                keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/08D9C8604ABE11EF8708395BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:50:96:f9:ca:2a:ea:89:a6:06:27:b7:6a:6d:1a:97:9d:86:
         bb:b6:3d:3f:a2:e9:62:e1:d5:5e:69:dc:74:3c:5a:3c:bf:8f:
         b3:e6:47:e9:b6:3d:c5:e8:d6:56:0c:38:58:9d:fa:aa:51:83:
         cc:53:2a:13:e9:66:68:9d:8a:91:a9:0b:e0:e7:68:9f:84:35:
         f5:f4:bd:ac:66:4d:93:0a:f7:bd:a7:75:89:3e:39:23:e0:7b:
         8d:7d:b9:01:cb:62:3d:be:07:3f:ae:1a:58:21:ae:b4:b0:69:
         36:81:d8:25:a8:28:7e:81:fd:e4:79:52:d7:07:69:b5:8b:3e:
         7d:3a:bf:20:19:12:28:80:1b:70:08:a7:86:bd:d2:3e:28:07:
         6f:72:6b:68:27:ea:88:00:f8:ba:ac:83:f2:29:18:a3:b2:69:
         6f:48:0c:01:31:3d:ed:f0:01:44:26:a6:8c:a5:47:6d:d1:88:
         18:5e:d0:be:a5:19:e4:19:00:da:60:e1:82:a5:ec:30:53:06:
         98:4b:88:f4:e8:f7:20:f3:7f:ee:6f:9b:78:c4:2b:30:33:5f:
         30:a3:89:a7:e7:09:8c:e6:cd:b8:5a:aa:14:61:53:b5:bb:65:
         72:6d:4b:63:9b:56:9c:d9:e3:5f:0d:b5:10:d4:22:d5:7c:4a:
         a8:38:de:e5
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJEQTkxMTAvBgNVBAUTKDI0OTIwQzVERjk4OUZDQ0Q5OTBCMDhBOEYwNDc5RUE0
QUZCMzYxOTgwHhcNMjYwODMxMDQ1MzU3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk1MDhlNS01YjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2/8bxRFpkq7zEOTT0hMD03RCtj01tCoPIzlF2tt2QLVLQZbCgjq9eRuySwFN
+3vXGuwVFGaugwd/D+L3XLLAA+98bzUPeWynLMgVicEnVUwNvID3YI2inPgBfGEV
EaGp7DaHtoYM26+o4tgDSGvsndLsGfYGAjiWEPjyk6YclcU6bXeS9DuxSlH3b/QR
K1H8VIsEFop5Ns/lxcQ0Lyl4xj/FGpp6Vf26Krq5VwhMxi55nblYrSY+iB1K9ttC
O3Ja/DTeHt5ytenCKA7fPKp/UfpmXaR/5/xLlubMMQQu07MFVp6biC//Vm5OZYFU
ZUx0aoBkP+7F35Z2uFsEWJs2mwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLgaxK81
tIWIF4WMFlSGsZmJd8PZMB8GA1UdIwQYMBaAFCSSDF35ifzNmQsIqPBHnqSvs2GY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8yRTBDQjU1RTQ0
QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9NMlpDd2lvOEVlZXBLLXpZ
WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0pKSU1YZm1KX00yWkN3aW84RWVlcEstellaZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJEQTkvMkUwQ0I1NUU0NEJEMTFFRkI3M0RCNzdCQzRGOUFFMDIvMDhEOUM4NjA0
QUJFMTFFRjg3MDgzOTVCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoBnjMA0GCSqGSIb3DQEBCwUAA4IBAQBCUJb5yirqiaYGJ7dqbRqX
nYa7tj0/ouli4dVeadx0PFo8v4+z5kfptj3F6NZWDDhYnfqqUYPMUyoT6WZonYqR
qQvg52ifhDX19L2sZk2TCve9p3WJPjkj4HuNfbkBy2I9vgc/rhpYIa60sGk2gdgl
qCh+gf3keVLXB2m1iz59Or8gGRIogBtwCKeGvdI+KAdvcmtoJ+qIAPi6rIPyKRij
smlvSAwBMT3t8AFEJqaMpUdt0YgYXtC+pRnkGQDaYOGCpewwUwaYS4j06Pcg83/u
b5t4xCswM18wo4mn5wmM5s24WqoUYVO1u2VybUtjm1ac2eNfDbUQ1CLVfEqoON7l
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:21:17 2026 by rpki-client