Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C585A87A3AAC11EFB29D2473C4F9AE02.roa
File:                     C585A87A3AAC11EFB29D2473C4F9AE02.roa (raw, json)
Hash identifier:          DeXYb63esj571K+u4n8mwKBaB0x3pgeLIjs3ANgRKA0=
Subject key identifier:   F5:15:A1:BC:B2:0E:28:FA:18:24:4B:2E:89:A1:28:C5:E2:DC:B1:04
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2BE3
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C585A87A3AAC11EFB29D2473C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:44:19 +0000
ROA not before:           Thu 08 May 2025 15:53:25 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150588
IP address blocks:        160.25.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11235 (0x2be3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:53:25 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c143-6673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:39:c1:5b:8b:a5:28:2b:b7:08:be:5d:34:ad:
                    42:bd:0e:96:c9:a4:f4:9c:87:91:d9:16:46:f6:e9:
                    15:c1:9b:c9:7a:8a:c1:7f:8a:85:a3:53:94:4c:17:
                    8a:31:e4:6a:84:e5:6c:f6:b7:d7:7c:d5:65:c4:ca:
                    e1:e9:fb:2c:89:1a:2b:bd:bc:d7:ba:a0:18:7b:93:
                    02:ff:af:fc:3a:c1:a3:3c:7a:6c:a8:30:45:36:0a:
                    81:66:65:f8:e6:a2:d2:d1:96:1d:8e:57:dd:d0:b2:
                    27:8b:aa:53:43:93:e4:2a:72:40:13:b1:ee:bf:b9:
                    56:98:f6:ea:b3:f7:9b:7e:ce:c9:fd:62:ca:b1:26:
                    9a:a0:09:8c:31:f4:4d:19:48:f9:71:65:5e:b3:25:
                    b8:dd:39:51:44:a3:ee:45:64:5e:16:86:59:fb:18:
                    17:fb:41:31:a6:36:f9:16:00:55:48:39:79:d1:6b:
                    f0:79:ce:10:69:31:09:ef:cf:8b:10:6f:99:e3:73:
                    57:23:2a:2d:62:ac:ce:60:37:7d:e0:84:11:ca:51:
                    b0:73:43:ad:05:d4:3f:d8:6a:a8:ce:31:6f:f0:3c:
                    18:c6:84:e5:7a:b0:15:7f:a3:4c:91:da:05:9e:dd:
                    d7:26:87:96:83:b7:42:b6:01:ab:d1:40:9d:14:21:
                    44:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:15:A1:BC:B2:0E:28:FA:18:24:4B:2E:89:A1:28:C5:E2:DC:B1:04
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C585A87A3AAC11EFB29D2473C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:32:5e:20:ee:85:50:20:7c:26:8d:2f:22:03:f1:1c:28:c4:
         30:63:a4:05:18:5a:c3:15:61:ce:c8:24:04:d6:07:71:4a:d5:
         80:da:d5:e4:49:3e:04:57:91:50:ec:bb:e2:ef:c4:92:79:f6:
         6c:4b:67:c5:68:87:51:0c:bd:5c:f7:57:05:56:cc:f5:fe:0f:
         b2:83:27:f7:4b:7f:0d:ec:98:4a:dd:d1:19:98:3a:d6:be:33:
         7e:a4:24:8f:2a:d7:4b:50:53:1a:41:f5:3e:4d:47:39:5e:b0:
         ec:95:68:cd:9c:c1:89:73:8e:22:23:ef:6b:48:33:e6:88:7b:
         54:67:26:fc:5d:99:ac:b9:2b:59:ea:75:d3:3e:42:a1:48:56:
         90:a7:8b:67:32:54:de:ab:92:e2:6b:fd:92:10:75:94:70:8e:
         e0:bc:fa:72:c1:fc:72:80:e1:3a:81:45:b8:86:5e:a4:3a:34:
         d9:d2:43:a3:bf:c4:db:9c:1f:40:d0:2b:8d:2c:13:43:fe:b2:
         f3:98:f7:02:42:a4:c5:42:32:f9:31:3d:79:0c:7d:7a:01:d7:
         9b:f1:71:f4:15:47:59:fb:f2:4e:ce:5e:64:b3:40:fc:a2:74:
         6d:4c:48:05:a6:99:89:bc:05:0f:51:37:98:49:a8:70:08:dd:
         90:29:41:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:09 2026 by rpki-client