Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/00E00D025BC711F0886C5B59C4F9AE02.roa
File:                     00E00D025BC711F0886C5B59C4F9AE02.roa (raw, json)
Hash identifier:          4/6lX4NZ27z+xN3FhA2YCKR5609eVbF1fWeCrdQJGAI=
Subject key identifier:   8B:18:11:07:D9:84:0F:B7:05:43:F8:E5:F4:93:FC:74:CF:25:C0:47
Certificate issuer:       /CN=A916D6C1/serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A
Certificate serial:       DA
Authority key identifier: 26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/00E00D025BC711F0886C5B59C4F9AE02.roa
Signing time:             Thu 23 Oct 2025 07:49:51 +0000
ROA not before:           Thu 23 Oct 2025 07:49:51 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     139052
IP address blocks:        160.187.102.0/23 maxlen: 23
                          160.187.102.0/24 maxlen: 24
                          160.187.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl
                          rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 05:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D6C1, serialNumber=26D8645EE8EE3A5D1EB1D2DF979B8549B8761E2A
        Validity
            Not Before: Oct 23 07:49:51 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68f9de1e-ab13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ac:d9:96:2f:e8:c4:da:9f:1c:54:97:8a:1e:
                    2b:f3:57:7c:52:b2:a5:a1:50:98:00:1c:5c:58:f0:
                    08:84:35:07:07:e6:d5:64:83:a5:53:c4:01:8e:bc:
                    43:73:37:f1:a3:ae:e3:7e:45:40:53:e1:6c:ef:0f:
                    f3:45:36:29:48:27:af:5a:de:5d:38:c7:01:1f:9b:
                    cb:e8:da:26:bb:14:a5:49:ed:56:85:d6:8a:b3:2d:
                    3a:45:72:7f:ff:79:92:22:1b:7b:5a:99:34:10:2c:
                    50:d9:36:fc:58:a4:8e:70:2a:85:bf:de:35:64:79:
                    89:56:aa:8a:91:30:0a:2f:2b:92:4b:12:85:a6:2b:
                    e4:dc:81:ac:ef:94:ae:45:15:cc:bd:6f:66:7b:7a:
                    05:58:21:5e:63:b3:fa:5d:a8:5c:76:fc:4c:b5:fd:
                    ff:e4:bf:59:3a:9a:bd:06:57:7d:1e:37:ff:69:29:
                    04:f9:f4:fe:b4:26:63:1e:a1:bd:6b:d1:bb:a3:d0:
                    cc:e8:96:40:b1:a9:4b:a4:97:9e:09:67:78:cb:c0:
                    6a:9a:30:96:76:59:3e:d7:8a:9f:b2:ee:bf:7e:33:
                    84:a1:57:51:d9:23:78:b7:2c:c4:32:82:59:b6:66:
                    fe:f4:4b:21:77:39:9f:8a:69:95:06:b6:ba:e5:a2:
                    e0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:18:11:07:D9:84:0F:B7:05:43:F8:E5:F4:93:FC:74:CF:25:C0:47
            X509v3 Authority Key Identifier:
                keyid:26:D8:64:5E:E8:EE:3A:5D:1E:B1:D2:DF:97:9B:85:49:B8:76:1E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/JthkXujuOl0esdLfl5uFSbh2Hio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JthkXujuOl0esdLfl5uFSbh2Hio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D6C1/DB7044E27A2611EFAF07B655C4F9AE02/00E00D025BC711F0886C5B59C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:d4:12:8b:ca:5a:e8:a3:f2:aa:61:c1:e1:e9:f9:c8:16:b3:
         5e:d1:f6:7a:de:63:0f:d4:a0:82:00:f9:31:e2:ee:83:bf:73:
         94:49:33:8b:71:b3:97:5e:26:c1:b4:2c:de:47:10:e9:06:82:
         d7:64:24:a6:d4:f9:b8:c2:f2:10:29:fe:5a:30:68:46:1c:b0:
         fd:11:80:bf:79:81:54:1b:be:90:e0:3f:39:d3:23:91:bf:e1:
         8f:de:4a:61:ab:b8:53:2f:04:80:f8:72:af:16:fa:1d:1a:7b:
         72:1f:22:c1:18:9b:11:af:2f:80:51:48:93:e2:81:7e:89:8f:
         84:3d:a9:19:47:31:88:de:25:97:b6:e2:b5:4e:10:66:25:d5:
         43:bb:5e:0c:27:5a:0a:fb:eb:93:07:94:e3:6b:dd:6f:d3:eb:
         84:ba:4f:b3:f8:f3:71:ef:6b:75:35:38:16:a5:6a:f4:75:cc:
         8d:a3:65:9f:ac:29:69:bf:97:c8:a9:3a:c9:f9:23:c0:4a:81:
         0c:20:9d:2e:2d:95:88:d9:84:83:f3:30:82:cd:a9:66:1e:08:
         03:30:e3:2f:85:1f:70:43:94:c9:82:e7:ff:e7:b9:5c:eb:d7:
         e1:12:0f:83:07:ac:76:2b:fe:0f:a2:b6:71:3e:e4:ec:77:f6:
         a3:62:ee:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:52:01 2025 by rpki-client