Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/E098BB864FA311F0B96FBA3DC4F9AE02.roa
File:                     E098BB864FA311F0B96FBA3DC4F9AE02.roa (raw, json)
Hash identifier:          OPdh+VvdJ8rvY5Hnhte8AjyqGibUOoE1fm+ikF6YCWY=
Subject key identifier:   7B:8F:18:EC:96:D8:38:84:57:79:F1:40:70:3A:71:21:12:B8:CC:A9
Certificate issuer:       /CN=A91AA053/serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
Certificate serial:       0137
Authority key identifier: CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/E098BB864FA311F0B96FBA3DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:27:32 +0000
ROA not before:           Tue 02 Dec 2025 20:53:50 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     141413
IP address blocks:        160.25.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl
                          rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:32:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA053, serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
        Validity
            Not Before: Dec  2 20:53:50 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a430b4-b7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:73:ff:9f:5e:e3:7e:90:b4:2d:b1:4e:2b:b6:
                    9e:cd:df:ea:c0:b8:d6:d8:f1:50:7b:a0:7f:7e:10:
                    50:4d:d6:af:4c:31:4f:21:ce:97:f1:1a:13:b5:c6:
                    d4:df:f8:8d:1c:15:65:b3:83:ef:d5:c4:fb:9c:dc:
                    2c:61:6c:88:24:06:f1:01:2b:51:f7:de:d1:ee:a0:
                    bb:2a:00:68:8a:ff:a2:04:be:82:91:12:85:ba:bb:
                    e9:10:49:9a:90:1a:31:44:02:ec:56:36:fa:e3:c1:
                    15:d8:e2:7c:02:9c:be:52:40:49:4c:e3:65:0b:f0:
                    79:34:38:2e:b4:dd:85:0c:a9:fc:b7:e3:ba:21:ee:
                    0e:ba:fa:09:d1:19:23:d5:f1:71:12:77:b0:5c:1a:
                    5a:13:73:4f:ea:97:6e:fa:69:0d:fb:60:ad:f9:a7:
                    90:f7:5c:12:86:cf:62:3d:f0:04:bc:c9:7d:17:b6:
                    6c:57:1a:10:4f:e0:24:63:99:61:87:0e:97:78:9f:
                    85:cb:cf:6f:2c:ce:9d:d0:95:6f:48:d4:eb:76:76:
                    10:3f:af:20:84:57:5b:3c:fa:bb:e4:b0:60:c0:f5:
                    88:b3:8a:79:13:40:40:0b:a8:d5:29:a3:fc:21:bf:
                    79:f9:29:9e:e0:67:d4:f6:89:cf:20:d8:41:33:d9:
                    1e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8F:18:EC:96:D8:38:84:57:79:F1:40:70:3A:71:21:12:B8:CC:A9
            X509v3 Authority Key Identifier:
                keyid:CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/E098BB864FA311F0B96FBA3DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:37:a1:d6:a1:2b:ea:4e:89:31:9b:b8:d2:ce:e5:4e:71:92:
         88:c9:b0:cb:e4:15:45:5d:a0:fd:66:6d:68:82:3c:3f:ca:c8:
         9e:7f:97:07:57:a6:f6:d4:0c:af:f3:9f:46:94:54:58:c4:c0:
         ea:6a:2b:1b:17:74:ed:05:93:ee:de:c8:c8:83:4e:80:13:9a:
         c1:c2:47:a4:6b:fc:f3:ca:a2:5f:34:58:bf:a8:3d:7a:ae:0d:
         18:02:10:24:0d:be:d9:d7:5d:e3:4f:5d:2c:75:0e:af:bc:ae:
         17:e2:ec:e4:17:e2:25:47:c8:89:fe:0f:30:dc:56:6f:67:91:
         38:6e:e2:b9:dc:79:b1:a4:4b:3b:ab:f5:d6:82:46:23:26:5d:
         ab:96:63:4e:a0:34:45:14:59:4c:cb:d5:38:e9:6f:61:05:97:
         3a:89:fd:b1:d0:11:ff:dc:8c:d3:e8:07:d1:9a:8d:be:10:80:
         cc:e8:8a:03:e1:53:59:ce:cd:ae:b1:c1:00:3a:42:48:20:aa:
         d4:c4:66:29:69:1d:2f:c4:d0:df:1f:90:f2:1e:df:d7:0f:5f:
         b2:c3:69:1a:74:59:b3:c1:d9:aa:81:b5:ba:72:73:e8:5d:18:
         63:9a:71:73:8c:d3:3c:7d:7e:3f:a5:ef:0a:59:1b:0d:af:84:
         76:3d:8d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:39 2026 by rpki-client