Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/900F4ADA440611EF85166C30C4F9AE02.roa
File:                     900F4ADA440611EF85166C30C4F9AE02.roa (raw, json)
Hash identifier:          m0j5NYjPTDIJfmWKHuHfMjMZ9FBAfzwy/hGv/R4OYCo=
Subject key identifier:   6C:80:84:BC:4A:53:B2:06:0A:C6:69:38:9E:05:1D:6E:0D:95:70:BA
Certificate issuer:       /CN=A915A0FB/serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
Certificate serial:       FD
Authority key identifier: 5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/900F4ADA440611EF85166C30C4F9AE02.roa
Signing time:             Sat 01 Nov 2025 05:19:01 +0000
ROA not before:           Sat 01 Nov 2025 05:19:01 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     152742
IP address blocks:        160.25.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl
                          rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 04:44:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0FB, serialNumber=5F04C005F28C2856C7BBF476B91C62A02F2FC51C
        Validity
            Not Before: Nov  1 05:19:01 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69059845-11dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:95:ec:54:33:7f:9f:98:d3:40:a4:a7:ba:db:
                    a8:8a:49:2f:5f:10:4e:59:23:e2:db:00:60:f9:50:
                    31:d4:3a:45:a4:21:72:bc:a3:23:69:c8:4e:73:01:
                    0a:79:0a:53:54:10:a2:ae:a5:a2:eb:33:db:23:c4:
                    c1:5b:ce:5f:0e:b6:f5:27:58:4f:4f:49:81:7d:20:
                    e5:05:88:a3:56:14:38:34:22:b0:20:ee:d8:10:0d:
                    0d:21:e8:2d:38:3a:66:2e:40:c5:dc:a7:dd:0a:89:
                    92:38:51:84:9a:ae:8f:00:62:3d:40:d0:f6:e3:57:
                    59:38:a4:ad:71:0e:15:1e:71:73:e5:e2:b2:5d:1d:
                    ab:b2:5d:d5:1f:81:ba:bb:ff:33:59:c7:c5:04:d1:
                    f8:be:a8:3b:91:d3:fe:cb:96:d9:06:e5:67:94:8b:
                    2f:4d:4e:7e:4c:35:74:f2:5d:01:73:30:11:eb:0f:
                    3f:38:70:19:d7:66:10:3b:40:7c:8b:52:03:df:dd:
                    00:06:f8:79:cf:d3:43:b2:bf:24:a3:f8:31:0f:0a:
                    67:ca:d3:c1:64:bf:da:f3:7f:f1:6d:66:7b:86:f9:
                    f9:6b:a4:95:39:28:93:1e:0b:c0:4d:3a:da:1b:20:
                    5e:67:e4:42:b0:14:7c:49:2b:53:ed:c6:fe:20:ca:
                    ee:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:80:84:BC:4A:53:B2:06:0A:C6:69:38:9E:05:1D:6E:0D:95:70:BA
            X509v3 Authority Key Identifier:
                keyid:5F:04:C0:05:F2:8C:28:56:C7:BB:F4:76:B9:1C:62:A0:2F:2F:C5:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/XwTABfKMKFbHu_R2uRxioC8vxRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XwTABfKMKFbHu_R2uRxioC8vxRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/E17193623D8D11EF87053B0FC4F9AE02/900F4ADA440611EF85166C30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:75:cc:7e:f1:2f:c4:d1:0a:dc:1d:fd:bf:20:65:d4:93:61:
         8a:61:a2:84:d0:a7:64:bf:35:85:19:c2:14:db:18:34:70:27:
         bb:b3:74:d8:62:28:11:e5:f9:3e:16:e4:5b:48:cf:6e:b9:53:
         b3:e8:02:d2:bb:dc:1a:8d:ec:68:3f:f2:c5:1e:83:da:d9:75:
         7a:97:f5:bd:c8:e1:33:a4:e9:a7:a9:c5:5e:12:67:0c:21:a3:
         e6:1a:3d:2f:93:0f:3e:89:11:24:f6:20:cf:8d:c5:98:5f:30:
         12:c6:fd:4f:d8:fa:96:e4:8f:50:22:0e:fc:82:4b:4b:bb:b2:
         43:fb:91:2f:42:4f:4e:06:fc:89:b7:49:d8:fa:9a:89:19:a5:
         33:7c:1e:48:2c:87:6c:bd:8f:3f:5a:6c:13:8a:a3:67:72:fe:
         a7:12:9c:3c:55:16:4f:c9:3e:64:b0:19:d1:53:fb:21:64:2f:
         a4:69:c4:ba:98:3a:30:97:1b:cd:e4:2b:9b:79:e0:da:99:92:
         bf:8f:8e:7c:b3:fb:fc:39:cc:72:e3:95:79:97:48:3e:08:87:
         d2:65:c4:4c:b5:f0:c2:56:64:4b:66:b6:e6:0c:78:bc:a4:2f:
         d9:83:05:34:1f:a2:63:a9:a8:21:73:23:46:f8:55:14:4e:a5:
         8d:8e:2d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:35:41 2025 by rpki-client