Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/1B86A7CCE2CA11EFAA007D32C4F9AE02.roa
File:                     1B86A7CCE2CA11EFAA007D32C4F9AE02.roa (raw, json)
Hash identifier:          AOFWu44ifsxCI8lU0JTnjALVgoq1vvzoggdsff7v9D8=
Subject key identifier:   CA:3A:08:5C:8D:AE:86:C5:A8:C5:27:8E:AC:3E:2F:35:D0:F6:6D:4A
Certificate issuer:       /CN=A913A748/serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81
Certificate serial:       CB
Authority key identifier: 69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/1B86A7CCE2CA11EFAA007D32C4F9AE02.roa
Signing time:             Tue 29 Jul 2025 06:42:33 +0000
ROA not before:           Tue 29 Jul 2025 06:42:33 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     151786
IP address blocks:        160.25.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl
                          rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A748, serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81
        Validity
            Not Before: Jul 29 06:42:33 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68886d59-f539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0c:dd:6e:13:ff:26:38:a1:59:3f:97:da:e6:
                    be:77:6a:71:b8:6f:8c:56:52:4d:cf:40:bb:fc:a0:
                    d3:56:81:f8:37:a3:bc:4d:5a:82:bc:fd:21:62:e0:
                    6e:1b:da:20:56:53:1d:a2:fb:44:66:20:13:74:2e:
                    71:83:02:ee:33:3e:68:ff:1d:b3:02:69:f6:8b:36:
                    b6:ac:68:2b:62:73:fb:a9:77:07:82:51:ab:2c:c9:
                    e0:5c:35:db:d3:80:bd:2c:15:b1:55:fb:90:8e:3b:
                    e4:8d:b4:72:2a:0c:eb:4d:2c:f7:f8:37:80:1d:61:
                    df:e7:c9:78:ef:e9:e5:d1:62:fe:a0:60:be:44:bb:
                    1d:9e:ca:6a:69:e8:04:91:3b:f5:4d:5a:f7:5b:05:
                    11:f4:2d:a2:79:aa:5c:65:8e:34:5d:63:e7:b5:50:
                    27:e1:c8:c2:bd:87:d0:15:db:58:d6:ce:52:96:78:
                    86:0d:67:ac:d3:9f:bf:2d:ba:0b:bc:49:8a:6d:44:
                    b8:d8:1f:f6:c1:95:b9:35:52:1f:cb:a7:55:88:dd:
                    13:73:e1:f5:f9:ec:f5:ee:77:8f:a5:4c:90:f4:32:
                    a2:96:97:e8:6b:eb:c7:e0:48:c4:98:e1:3f:9e:bc:
                    a6:9e:d8:ff:83:25:16:90:19:a9:5d:53:ce:6a:ca:
                    fa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3A:08:5C:8D:AE:86:C5:A8:C5:27:8E:AC:3E:2F:35:D0:F6:6D:4A
            X509v3 Authority Key Identifier:
                keyid:69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/1B86A7CCE2CA11EFAA007D32C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:cb:8d:cc:09:9f:2c:c4:9d:f0:6f:b2:0f:65:c1:fe:7e:a7:
         1b:56:d4:3b:38:01:2a:55:ae:f4:45:ce:75:45:1c:c7:fa:c4:
         08:a2:fb:be:bc:a3:40:2e:a2:2a:1b:dc:f9:e1:66:a0:ae:c1:
         86:18:7e:41:aa:ea:6b:c4:93:f9:44:d6:c3:99:c4:0d:a3:15:
         13:e3:0c:5a:4f:c0:09:5b:77:05:d3:8d:5e:87:14:e8:56:fc:
         9c:0b:1b:9e:d0:e4:fb:fa:41:cc:dd:dd:91:b4:09:63:7d:1c:
         c7:c2:b0:01:a9:6f:55:2d:a4:6a:3b:ac:18:2c:b0:83:bf:bc:
         f3:90:71:3c:ca:fa:f1:e3:b3:79:4d:34:7e:6d:b7:c8:1a:75:
         d8:1d:27:b5:20:2e:86:45:47:0b:8f:b4:7e:0a:3e:9a:84:4c:
         52:68:a7:b4:1d:17:c0:d0:c2:db:a2:3c:ea:96:c2:48:65:6c:
         64:58:3e:8a:d8:9e:27:6e:a8:62:9d:5c:a8:04:38:b6:cb:c1:
         80:ea:8c:b8:09:e7:10:7d:1d:a7:8f:76:ea:e5:f7:6b:0f:9a:
         22:e8:62:ef:e0:9c:e5:53:ce:58:2c:7f:59:36:df:4e:83:b8:
         82:c2:2d:71:f4:83:b6:39:02:a5:d8:12:1a:cf:6a:e5:65:28:
         74:2d:e3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:27:52 2025 by rpki-client