Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0CA779BCAB1011EFA3DA074FC4F9AE02.roa
File:                     0CA779BCAB1011EFA3DA074FC4F9AE02.roa (raw, json)
Hash identifier:          FJ7BiyJXL0vC1Et465JJOMvNiNE2GETXbaBTbvcX8NA=
Subject key identifier:   86:3B:50:6B:49:6C:AD:28:58:02:EF:73:D1:A7:65:BB:5C:DA:41:73
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       0814
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0CA779BCAB1011EFA3DA074FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:14:56 +0000
ROA not before:           Thu 28 Aug 2025 14:51:21 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152947
IP address blocks:        160.25.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2068 (0x814)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:21 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4ac50-c9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:bc:d9:af:a3:9d:52:ce:0a:0c:53:11:1a:5b:
                    13:1c:d1:d2:92:ad:02:63:86:3e:3a:2d:a0:56:be:
                    e7:89:c2:c1:9e:f0:9f:36:ca:ac:6c:9d:ca:ba:95:
                    bb:b5:5d:59:19:29:68:dc:3a:1b:e8:73:94:cb:7f:
                    34:1f:ff:6d:cb:90:f2:1b:c8:0c:dd:b0:81:17:65:
                    0e:97:4b:fe:de:f9:ab:ca:3c:c6:0a:4f:29:6d:d7:
                    18:47:5f:67:93:01:ab:63:89:fe:bf:0e:a4:51:07:
                    c8:82:57:5f:ca:b3:87:fe:15:c0:f1:7e:a1:04:46:
                    2b:09:d0:e7:91:d2:3c:fa:02:f1:e1:a0:01:d1:a3:
                    00:66:c8:01:11:43:f4:a0:88:6a:b9:24:37:5b:51:
                    93:95:d6:1e:aa:c5:29:54:4e:d8:7b:99:01:18:be:
                    b5:4a:15:bd:39:fc:16:40:85:f1:da:fc:d0:bb:d1:
                    16:ef:bb:49:4c:45:a9:49:36:96:8c:a2:20:a2:59:
                    3e:55:54:03:38:1f:39:c9:39:63:e6:c5:8f:70:c2:
                    d5:b0:a5:83:43:bd:ea:fb:f9:c4:4a:11:5f:fd:85:
                    46:58:86:3f:08:90:d2:ee:5b:0d:17:d9:87:22:5d:
                    da:ad:77:4f:2b:50:7a:3f:ea:f7:bf:21:b5:ed:80:
                    4b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3B:50:6B:49:6C:AD:28:58:02:EF:73:D1:A7:65:BB:5C:DA:41:73
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0CA779BCAB1011EFA3DA074FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:f0:24:48:55:9c:a9:ad:33:fb:03:bf:df:57:a6:c5:23:da:
         7a:cb:92:23:ae:b8:cd:5e:f3:de:02:f7:62:10:c0:a3:ee:15:
         64:9b:d0:3f:e7:1f:4e:df:af:13:c1:4e:28:5e:ba:0d:61:ab:
         2f:06:55:34:9b:8e:da:68:88:ec:29:ab:71:84:1f:28:47:2f:
         b9:9e:81:53:62:2d:9b:01:15:5b:ec:86:bf:ad:34:52:4e:aa:
         f2:21:bf:c6:87:5d:b1:b2:af:f0:bd:e7:57:79:18:9c:0e:53:
         73:d0:8c:3d:0e:d3:08:a7:d2:38:ae:5b:34:fd:6f:86:38:23:
         cd:8a:12:80:5f:63:56:19:f7:96:f9:b8:7b:3c:41:0a:72:68:
         df:bb:4e:63:61:ec:00:69:85:66:9a:32:01:a4:54:52:d1:58:
         71:9d:54:79:b1:20:49:aa:39:b4:b0:64:3c:3c:e1:58:e6:49:
         43:28:70:fc:23:b3:23:24:ac:1e:58:30:c8:6e:af:e5:3c:c6:
         ba:33:52:70:bd:ea:a9:a9:99:0f:ef:06:e2:8e:32:42:3b:41:
         f4:6e:e6:3e:f4:50:14:03:23:92:37:d6:c5:ec:85:18:10:c1:
         f5:25:72:25:dd:e9:7b:7d:31:39:19:1d:9c:88:b9:4d:3c:9d:
         61:8a:7b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:22 2026 by rpki-client