Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/F31A7084E2C911EFADAB3C32C4F9AE02.roa
File:                     F31A7084E2C911EFADAB3C32C4F9AE02.roa (raw, json)
Hash identifier:          fBHBvvGuITbl2EPW/eI7OV1xjnMqLdmN+KlBI/l5dCs=
Subject key identifier:   EC:8F:EF:26:17:57:58:7C:F4:92:23:06:37:8B:00:F4:75:FF:92:50
Certificate issuer:       /CN=A913A748/serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81
Certificate serial:       0195
Authority key identifier: 69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/F31A7084E2C911EFADAB3C32C4F9AE02.roa
Signing time:             Mon 27 Jul 2026 06:55:07 +0000
ROA not before:           Mon 27 Jul 2026 06:55:07 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     152929
IP address blocks:        160.25.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl
                          rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 06:55:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A748, serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81
        Validity
            Not Before: Jul 27 06:55:07 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6700cb-b2b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6b:62:c3:ac:8b:62:92:fb:f1:c2:24:e6:f0:
                    22:bb:a6:34:28:68:e9:bd:a4:49:76:48:58:00:b9:
                    53:a4:22:63:36:27:ea:ea:3e:bd:82:14:88:d0:c8:
                    08:55:e5:79:c6:76:cd:6e:34:85:76:9f:15:16:36:
                    88:98:9b:00:00:0e:54:c0:ea:09:2c:0e:dc:09:15:
                    26:02:20:87:86:2f:d3:e3:ea:0f:af:02:89:67:18:
                    2b:e7:35:6d:0a:f5:46:26:ef:8a:b6:fe:d8:ab:26:
                    57:d2:54:ca:c4:78:48:0d:d4:d4:75:db:db:92:31:
                    5c:81:33:4c:eb:59:e5:ec:6f:fd:86:0e:4f:37:6a:
                    dc:e1:e0:ec:1b:ca:5f:9f:dd:7a:d3:6d:d1:cf:3b:
                    bd:65:12:3d:45:2b:ea:4e:57:82:d8:87:af:c7:44:
                    06:f1:5a:fb:e2:97:78:c1:45:9a:11:56:30:89:9f:
                    a4:2a:44:7f:35:9f:49:f5:91:40:fe:6e:b2:8c:86:
                    4f:e4:3a:1e:51:7b:95:ec:df:f9:b6:2a:73:83:eb:
                    4c:99:da:9f:ce:a0:35:dd:19:ec:50:94:5f:4c:86:
                    19:06:59:8f:69:62:77:60:e2:63:30:bd:86:bc:09:
                    60:da:a5:55:3b:b5:80:71:b7:d7:64:7c:28:83:11:
                    e7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8F:EF:26:17:57:58:7C:F4:92:23:06:37:8B:00:F4:75:FF:92:50
            X509v3 Authority Key Identifier:
                keyid:69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/F31A7084E2C911EFADAB3C32C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:37:3e:ec:fc:83:8f:80:e7:16:00:a1:45:96:40:79:cc:47:
         72:9e:7e:71:78:f4:b2:0b:42:1a:b7:90:23:db:9a:3e:fa:64:
         38:af:a1:1d:d0:77:8b:4f:82:86:c4:45:9c:2a:07:b5:3f:ad:
         07:33:88:1b:e9:cc:c9:3d:67:9c:57:14:36:5f:bc:7c:4a:3f:
         f6:31:c3:5b:16:67:9c:5b:9f:b3:c4:e3:c6:c9:79:d8:ab:da:
         ce:9e:69:1c:b9:59:92:4f:08:31:27:58:ed:b5:a3:e8:88:dc:
         1f:07:b6:37:fe:fb:00:04:3f:9e:48:1d:fb:0a:f5:d3:6f:ef:
         4d:13:19:ae:c5:11:2d:86:66:8a:bb:fc:a5:3e:63:b1:a5:12:
         61:8e:1d:99:94:8b:e2:4c:bd:de:f3:bc:72:2f:95:1a:c6:23:
         1d:fe:3f:00:db:bb:0b:32:36:a1:b2:bc:46:09:95:6e:18:2f:
         45:90:49:fa:fe:a7:63:55:d6:94:5d:94:6d:ed:d9:3a:03:fe:
         d8:8f:39:2c:e1:24:c6:c7:96:5a:4d:85:af:a8:28:07:a2:21:
         71:a1:ab:b1:78:da:6f:0a:7a:37:38:8a:4e:ae:ab:07:05:2b:
         d2:61:2b:3d:13:cf:3c:79:1c:33:ef:b0:1c:88:fb:bb:25:3d:
         0d:a6:15:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:45:24 2026 by rpki-client