Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/CE2868C28F4C11F18259B4DA4511F970.roa
File:                     CE2868C28F4C11F18259B4DA4511F970.roa (raw, json)
Hash identifier:          cu7AnJ9TPxK2uGn4bkgIAX6kf4pKIeDeneOPNEPA89k=
Subject key identifier:   15:57:C5:47:B5:E4:6B:6D:37:E8:0F:C6:FC:D8:09:14:1A:3B:A7:CB
Certificate issuer:       /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
Certificate serial:       019B
Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/CE2868C28F4C11F18259B4DA4511F970.roa
Signing time:             Mon 31 Aug 2026 04:53:55 +0000
ROA not before:           Mon 31 Aug 2026 04:53:55 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     17644
IP address blocks:        160.25.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl
                          rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198
        Validity
            Not Before: Aug 31 04:53:55 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9508e3-854d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2b:7f:35:19:4d:76:e2:be:b3:5c:b0:2c:62:
                    63:dd:79:4f:80:44:cc:4c:06:51:ea:88:6d:72:44:
                    7e:46:b9:53:66:f5:4a:7c:b9:66:fc:55:50:9e:ac:
                    2d:2e:09:62:e1:49:67:ad:ed:42:91:af:62:f0:6e:
                    97:ea:2f:8a:f4:ea:86:ba:0c:14:58:72:e2:66:22:
                    bb:ec:33:f8:81:ec:0a:25:62:d5:92:22:d2:22:da:
                    c0:1a:3d:d1:07:ee:78:aa:c1:60:2b:67:2c:78:f0:
                    54:19:a2:a7:16:93:b4:8d:a9:b7:0c:0c:4f:ea:6f:
                    71:a3:93:6a:e9:82:de:36:ac:58:61:e4:f1:48:84:
                    85:25:94:67:d1:a0:d7:86:b6:cd:28:34:c7:93:81:
                    f3:8a:4a:d2:95:49:f4:da:27:f1:aa:74:35:27:29:
                    93:59:d3:46:3a:6d:0a:b3:f7:f7:ee:9b:a9:81:bc:
                    2d:66:76:53:9a:23:d6:e5:8c:ae:b5:9b:9d:ac:bb:
                    be:a5:49:26:d0:18:01:60:e9:7c:67:cd:ef:b5:00:
                    6e:62:7d:2d:b1:6b:69:8c:92:2a:f4:7e:1c:0f:c8:
                    e5:a3:bb:49:46:c6:c9:83:ab:6e:fa:97:21:af:b9:
                    a5:d4:7e:3d:58:c2:74:9c:01:bc:1e:7e:8e:25:80:
                    ac:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:57:C5:47:B5:E4:6B:6D:37:E8:0F:C6:FC:D8:09:14:1A:3B:A7:CB
            X509v3 Authority Key Identifier:
                keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/CE2868C28F4C11F18259B4DA4511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:13:4f:03:f5:e8:ea:b7:db:0f:20:41:60:ce:8a:93:63:df:
         cb:20:a6:0a:72:c1:50:b9:fd:d9:38:c6:b2:16:64:4e:73:dd:
         4b:80:ce:a1:06:c3:29:a3:82:23:06:6f:f7:10:55:04:9a:84:
         44:ad:2d:31:56:db:87:e6:c7:d5:20:57:fb:52:4b:5c:20:6b:
         0c:b6:50:d9:73:c6:1e:d7:c2:e8:ce:07:2b:b9:c7:59:3f:77:
         64:48:fe:e3:6c:36:69:5a:bf:6a:51:60:92:53:01:96:1b:35:
         ea:a9:a8:4b:b5:d1:13:7a:85:b9:bb:9d:73:66:cf:24:72:84:
         de:1f:fc:3e:2b:0a:96:28:31:64:6a:2c:bb:78:8b:c4:2b:2b:
         4f:c7:66:d7:38:9e:d3:bd:1f:72:5d:07:28:ef:ee:8f:25:98:
         2a:22:25:f4:33:51:c7:02:42:11:7b:a9:07:50:55:76:34:c5:
         5c:57:ae:a1:e8:1b:15:f4:eb:ca:24:93:57:cd:d3:f3:5b:ef:
         88:51:bd:34:bd:06:6c:1d:e9:a6:ba:fa:b7:50:83:62:f3:85:
         0e:df:c5:0c:94:5c:2e:e4:f1:49:d1:b0:9d:70:e6:4f:0f:14:
         12:ac:c1:87:8a:47:ff:1e:f9:ec:1c:ae:84:ee:19:29:6d:76:
         f8:e6:b9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 09:21:54 2026 by rpki-client