Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/BCA395126C1811EFAFBE6B0FC4F9AE02.roa
File:                     BCA395126C1811EFAFBE6B0FC4F9AE02.roa (raw, json)
Hash identifier:          YuQff5ZM6ktoeLhGQjtDQt4j9brqyCXl9qvUHGQ/W6c=
Subject key identifier:   57:37:5A:8F:CE:F0:6B:EB:C4:29:88:94:7F:9D:1A:7A:B8:85:07:3B
Certificate issuer:       /CN=A91A12C4/serialNumber=CFC0804DAC4FFF7A22A404E10E9864A711DE19C9
Certificate serial:       011F
Authority key identifier: CF:C0:80:4D:AC:4F:FF:7A:22:A4:04:E1:0E:98:64:A7:11:DE:19:C9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8CATaxP_3oipAThDphkpxHeGck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/BCA395126C1811EFAFBE6B0FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:42:01 +0000
ROA not before:           Fri 01 Aug 2025 07:43:36 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     153049
IP address blocks:        160.25.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.crl
                          rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8CATaxP_3oipAThDphkpxHeGck.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 12:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A12C4, serialNumber=CFC0804DAC4FFF7A22A404E10E9864A711DE19C9
        Validity
            Not Before: Aug  1 07:43:36 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a58598-1202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4c:49:8c:16:4f:4c:96:00:ce:40:9b:02:be:
                    11:4a:d6:58:4d:43:88:91:0a:41:ae:ef:74:d8:db:
                    8f:05:d8:67:87:0f:70:14:fd:d3:b6:9b:bb:08:5b:
                    6e:b9:d3:db:ff:13:7c:46:b6:ca:f2:1b:7f:1f:75:
                    dc:66:a5:a5:78:36:6c:62:23:f7:d2:3f:f2:a6:91:
                    02:6b:46:3f:5b:18:0a:a6:ee:5b:7e:89:8a:d4:3c:
                    55:a2:05:21:68:c3:bd:69:87:ca:6f:a1:89:8e:98:
                    b2:15:d8:54:2d:0a:a0:7e:d3:b5:df:09:9a:ff:3e:
                    61:5b:e0:68:32:92:17:8a:13:4d:d3:d0:5c:38:5f:
                    85:bb:80:2b:7d:3a:99:d5:4b:ab:57:81:8e:b1:ce:
                    8a:0d:3b:da:16:60:eb:4a:fc:fd:97:34:a9:57:1b:
                    24:21:3e:85:df:91:ec:34:30:75:aa:7f:65:fe:aa:
                    b0:e6:dd:8a:88:2f:7b:42:c2:2d:b3:47:1c:fd:47:
                    36:be:c5:70:fe:89:8e:c8:5c:0f:63:7e:0e:1b:d1:
                    72:b8:34:90:ab:9d:84:2d:dc:16:67:07:45:17:be:
                    07:2a:b6:33:8c:4b:02:b3:b1:75:7a:b7:d2:e5:06:
                    b6:b4:2c:e5:48:cb:a6:f9:b4:ea:ba:7b:9a:2b:21:
                    5b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:37:5A:8F:CE:F0:6B:EB:C4:29:88:94:7F:9D:1A:7A:B8:85:07:3B
            X509v3 Authority Key Identifier:
                keyid:CF:C0:80:4D:AC:4F:FF:7A:22:A4:04:E1:0E:98:64:A7:11:DE:19:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/z8CATaxP_3oipAThDphkpxHeGck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z8CATaxP_3oipAThDphkpxHeGck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A12C4/F319EDC26C1711EFBDBFD50BC4F9AE02/BCA395126C1811EFAFBE6B0FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:46:e5:44:cf:a4:c8:5c:b0:81:c6:05:ff:b5:6f:1d:14:0e:
         06:43:c3:00:3b:18:d3:0c:95:ed:67:eb:5d:c6:be:48:6a:05:
         46:b0:11:f9:f7:d9:a2:27:a7:a1:31:17:76:13:8e:6d:73:4d:
         a1:1d:ca:19:05:68:1e:7e:17:ce:da:8f:9a:22:d0:6b:ce:3b:
         79:d0:e2:81:24:17:85:b9:30:57:fe:c3:b5:af:93:45:5a:55:
         b8:21:ab:c5:36:1a:32:83:89:7b:00:f6:69:75:74:2c:21:c1:
         62:49:d5:d7:20:28:c5:a7:1f:43:4f:6d:7e:95:c9:79:8d:d9:
         19:42:a3:51:4c:67:a0:09:71:36:73:56:9a:32:35:ca:e6:4c:
         7c:9a:ec:9b:5d:4c:11:64:a0:18:88:77:2f:42:f2:4a:80:94:
         25:dc:51:99:cf:a6:0a:8a:51:9e:25:b3:c5:57:03:a5:c1:67:
         0a:5c:9e:b3:c9:ed:96:de:57:a6:cf:96:b0:18:cf:28:a5:be:
         7e:b7:ba:21:8e:a1:a2:8a:1c:74:ea:ea:a6:b3:2e:34:99:52:
         7b:01:53:50:d2:31:d7:49:c2:27:6c:d8:54:d0:4c:b5:23:c2:
         45:91:76:dc:71:1a:9f:0f:5c:b1:fc:5c:b1:fe:eb:88:b1:53:
         a1:5c:31:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:24:58 2026 by rpki-client