Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/01F62A6438F011EF9A82662BC4F9AE02.roa
File:                     01F62A6438F011EF9A82662BC4F9AE02.roa (raw, json)
Hash identifier:          qNBV2PTtzm82Ja2P5dgUf+ogJinB9ZCYKNbddsnAs34=
Subject key identifier:   37:A6:AA:AD:03:6E:3F:C2:A0:39:AB:D7:70:D0:95:E9:C5:9B:AD:C8
Certificate issuer:       /CN=A91B4873/serialNumber=E5B44C69E8DE733DF61966056E7E415EC7C70D2A
Certificate serial:       CE
Authority key identifier: E5:B4:4C:69:E8:DE:73:3D:F6:19:66:05:6E:7E:41:5E:C7:C7:0D:2A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/01F62A6438F011EF9A82662BC4F9AE02.roa
Signing time:             Tue 05 Aug 2025 06:14:40 +0000
ROA not before:           Tue 05 Aug 2025 06:14:40 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     147040
IP address blocks:        160.25.70.0/24 maxlen: 24
                          160.25.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.crl
                          rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4873, serialNumber=E5B44C69E8DE733DF61966056E7E415EC7C70D2A
        Validity
            Not Before: Aug  5 06:14:40 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6891a150-2c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:78:7e:13:f0:f4:8a:bf:c9:91:8a:76:01:
                    a1:90:a7:61:43:f9:1a:dd:50:07:c1:b6:04:a8:5f:
                    27:03:fb:04:14:10:94:2f:b2:22:69:b8:44:87:22:
                    48:3e:db:00:8a:42:fe:c9:fc:03:b2:4a:19:82:bf:
                    d4:54:6d:b3:4c:86:81:a4:34:e6:b5:8e:7a:32:32:
                    47:c7:36:70:aa:34:66:a4:2b:1f:f4:fb:84:1c:89:
                    0e:60:39:67:65:26:ee:59:58:66:58:80:51:03:ef:
                    23:7e:88:1a:fe:bf:36:2f:a1:5a:06:0d:ce:b4:52:
                    f5:5c:5e:79:d5:3c:d4:22:38:64:bc:60:1f:a6:20:
                    96:95:93:2c:c8:82:2a:bb:bd:83:7b:57:90:89:63:
                    5f:a0:df:72:e4:fd:c8:37:ed:82:a1:f3:da:67:5e:
                    29:7e:53:d1:93:83:e4:ca:9e:91:df:0f:b9:d3:fc:
                    f4:cd:b8:8b:3f:c0:b5:08:cf:07:72:e8:70:43:97:
                    ab:11:5f:00:ab:2f:00:27:f3:08:60:bc:f5:5b:2e:
                    4c:4f:42:2e:a4:59:3c:a3:28:28:18:2c:b3:09:0d:
                    63:e1:27:62:af:c5:d3:c6:8d:dd:9e:71:12:60:0f:
                    d6:8d:13:44:48:26:e5:f3:78:41:f9:09:dd:25:ad:
                    0e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A6:AA:AD:03:6E:3F:C2:A0:39:AB:D7:70:D0:95:E9:C5:9B:AD:C8
            X509v3 Authority Key Identifier:
                keyid:E5:B4:4C:69:E8:DE:73:3D:F6:19:66:05:6E:7E:41:5E:C7:C7:0D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/01F62A6438F011EF9A82662BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:2a:15:44:42:ee:78:5a:52:9d:65:6d:c4:c1:96:09:e3:19:
         b7:66:50:5e:c4:8b:7b:67:54:5c:8d:5e:b3:8a:78:64:f3:ac:
         69:b7:a0:34:1d:28:6a:f7:cc:8f:ef:a0:d9:d9:aa:91:01:5c:
         0b:b7:7f:bb:bc:00:ac:4a:40:09:4a:cf:fd:79:df:ac:44:42:
         fe:06:30:7a:53:6a:6a:ed:df:b5:58:e3:9e:02:82:0a:5f:7b:
         db:da:26:32:e5:9d:13:70:22:a1:c0:53:48:bb:e4:3a:8e:02:
         b3:8c:11:a4:7a:e8:e4:f5:c5:32:77:75:23:cb:e7:14:72:ba:
         79:3b:81:c8:8d:46:43:d5:f6:b1:3c:c1:00:a8:f3:8d:84:d0:
         8b:06:d3:22:2e:76:c4:4e:a2:bd:b3:42:f5:7e:dc:84:8d:8e:
         37:d9:09:5f:ff:c0:6b:c2:4a:d3:da:29:f8:62:29:43:23:95:
         e0:b9:f1:ca:e7:d0:22:e5:69:da:a4:8c:77:78:80:e5:69:3d:
         5d:9d:3e:91:03:49:0a:2a:6e:c5:d7:1e:0b:52:0f:07:b6:38:
         1e:a9:c3:6a:5e:1d:fd:a4:d1:75:a9:ee:1c:78:91:e8:f1:02:
         c7:a8:32:5d:62:e4:ad:b7:4f:81:3b:63:2a:0f:66:a4:24:b2:
         09:9a:08:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:53:42 2025 by rpki-client