Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/F6382C7A56EC11EF85879C50C4F9AE02.roa
File:                     F6382C7A56EC11EF85879C50C4F9AE02.roa (raw, json)
Hash identifier:          a57NdJ1gk+iJiRBW3C9KSb5FNlrBpcnk273JBCCOK0E=
Subject key identifier:   25:ED:25:06:54:E2:FC:23:C5:05:4B:8A:AE:0D:55:9C:22:58:F2:F7
Certificate issuer:       /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
Certificate serial:       017E
Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/F6382C7A56EC11EF85879C50C4F9AE02.roa
Signing time:             Mon 03 Aug 2026 05:55:26 +0000
ROA not before:           Mon 03 Aug 2026 05:55:26 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     64096
IP address blocks:        160.25.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl
                          rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:23:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B
        Validity
            Not Before: Aug  3 05:55:26 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a702d4e-fe88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:34:b6:08:3d:82:23:ce:a6:e8:64:f5:50:02:
                    aa:61:b3:8d:9b:3c:8b:3b:fb:7f:33:19:ea:f1:ac:
                    19:86:e3:6d:c5:f7:b4:f7:82:1f:5d:a9:96:3a:dd:
                    7d:f2:27:1e:97:d5:f1:45:05:b4:38:0c:4b:74:b8:
                    e7:73:7e:3b:27:cf:19:c4:a6:ef:9f:42:f2:eb:37:
                    40:e4:c9:0d:2c:c3:29:86:c7:c9:8d:4d:0f:e7:d8:
                    1b:90:94:65:d2:80:b7:dc:b3:95:83:0b:db:74:dc:
                    3a:bd:a4:e6:87:73:36:ff:e6:d3:29:31:26:21:00:
                    73:4c:3b:83:11:00:bf:85:ea:92:52:b7:e6:37:04:
                    4f:9f:5a:59:e2:c4:d3:b7:03:4f:c5:c5:d2:56:97:
                    bd:b8:1c:a6:45:e4:44:52:81:bd:ac:92:73:e3:76:
                    cc:78:09:33:ff:cd:ce:54:9b:42:11:f5:64:33:af:
                    35:ed:c8:02:9e:06:1f:3b:1c:be:d0:93:24:e1:ae:
                    12:22:6b:69:ed:18:e9:ff:48:c8:b1:46:bf:eb:7a:
                    79:73:37:43:06:aa:13:f5:32:c2:e7:84:d2:92:91:
                    fc:36:c1:72:2e:6e:b1:26:a6:0d:b7:39:f9:12:22:
                    23:88:8c:14:f6:6a:5c:22:7b:ad:c9:52:f8:da:e6:
                    5b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:ED:25:06:54:E2:FC:23:C5:05:4B:8A:AE:0D:55:9C:22:58:F2:F7
            X509v3 Authority Key Identifier:
                keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/F6382C7A56EC11EF85879C50C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:da:b9:7e:21:66:16:9d:a0:3c:23:bd:47:f5:ef:8e:22:3f:
         8e:19:ec:86:64:9a:c3:5d:b5:d9:71:3b:bf:ba:3c:77:1b:65:
         37:72:4f:97:6e:d0:35:11:46:1e:7d:50:8c:c2:62:bf:bc:48:
         72:1a:ae:4c:dc:78:0d:50:54:a5:ab:2b:02:a6:74:4c:83:8d:
         5e:a8:f6:00:af:d4:54:2a:75:07:1d:66:44:fa:f4:5f:46:04:
         2e:a6:86:0f:21:8e:1e:d4:d5:eb:a9:15:36:eb:9c:22:d1:38:
         18:74:2f:fa:0d:4c:01:a7:a0:a6:dc:86:2f:e9:dd:b6:70:d4:
         50:57:59:af:0e:4f:d2:3d:ad:cc:f1:10:ad:8e:57:a8:ae:a0:
         e9:04:7b:9a:c9:0c:33:af:e5:46:10:d0:71:3c:75:36:e6:a3:
         d7:d0:b9:86:00:98:ba:d0:2d:50:83:24:e7:28:80:13:fc:a3:
         d8:be:6a:fa:83:1c:3c:b5:01:42:22:f0:16:c0:11:6c:12:ba:
         e9:4a:7b:a2:e7:77:8d:21:87:0c:e9:82:be:4c:fc:09:81:07:
         6f:65:e3:a0:85:8c:c3:06:ac:7a:62:4c:91:28:1c:85:f3:5a:
         3e:aa:77:09:98:5e:d6:d2:e0:f2:04:3b:ac:6e:9e:76:ed:4d:
         ce:5e:cf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:34:53 2026 by rpki-client