Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/70ED9D2837D111EF99A8011CC4F9AE02.roa
File:                     70ED9D2837D111EF99A8011CC4F9AE02.roa (raw, json)
Hash identifier:          FAxnQBc3ut1xOAAP0lVz2GuEsUZQVko/q3fQ7UeXms8=
Subject key identifier:   54:C9:BC:F6:45:A8:B8:78:38:BB:FC:1B:08:EB:B9:83:63:00:B4:BF
Certificate issuer:       /CN=A91B7948/serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
Certificate serial:       0173
Authority key identifier: 2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/70ED9D2837D111EF99A8011CC4F9AE02.roa
Signing time:             Fri 05 Jun 2026 05:37:08 +0000
ROA not before:           Fri 05 Jun 2026 05:37:08 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     153045
IP address blocks:        160.25.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl
                          rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7948, serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
        Validity
            Not Before: Jun  5 05:37:08 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a226084-3b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:43:f0:d2:6e:bb:9c:05:6d:af:0d:04:2d:ee:
                    53:34:02:9d:12:6a:61:3f:6f:9e:11:51:90:6a:3d:
                    bc:a8:bc:5d:94:84:fe:5e:54:99:1b:8b:c2:5b:38:
                    1f:36:83:61:4b:1d:ff:12:3d:12:f7:43:52:1d:b0:
                    64:60:b2:6c:e4:37:c8:60:fa:74:45:19:53:b1:a7:
                    e3:31:b8:f2:17:5f:e6:6f:54:ee:bf:03:3f:b6:de:
                    cc:e2:99:69:53:81:31:21:04:33:02:ee:21:b3:f4:
                    f3:80:c6:08:6d:53:ac:dc:e4:36:9f:4f:88:0d:01:
                    6f:d1:96:67:f0:9c:f8:a6:eb:8d:f0:26:47:64:7c:
                    2c:95:f8:86:e2:4c:96:e8:61:65:fb:5f:c3:de:77:
                    96:6b:99:8a:e4:b8:a5:1c:22:61:98:20:3c:68:f9:
                    31:53:c6:72:c5:00:56:33:ed:14:dd:dc:7f:54:5a:
                    fb:5b:3b:e6:21:83:bc:4e:1c:0f:81:ac:45:d6:04:
                    97:95:da:76:46:4e:45:80:7a:34:eb:93:cf:51:49:
                    49:dc:f4:28:b9:06:9c:fb:af:36:34:8c:e7:14:99:
                    3f:d4:87:d6:01:96:cd:8e:aa:02:20:b6:0b:60:53:
                    a1:a1:34:e7:10:4d:89:05:fb:ac:72:cb:65:83:1c:
                    53:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C9:BC:F6:45:A8:B8:78:38:BB:FC:1B:08:EB:B9:83:63:00:B4:BF
            X509v3 Authority Key Identifier:
                keyid:2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/70ED9D2837D111EF99A8011CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:68:8d:34:35:8e:07:f3:96:88:37:4c:f9:69:ee:e5:0a:7f:
         04:c3:9a:d6:59:cd:10:fb:a0:6a:36:a9:ea:70:1c:4a:4f:a7:
         81:3f:d5:49:55:a8:19:ee:82:99:48:d8:fa:69:65:fb:14:4b:
         4c:e9:25:25:51:51:43:28:a2:6d:1a:b4:fc:02:6b:6b:ac:6e:
         29:c0:d4:c5:af:19:d5:f3:32:23:ae:66:69:5b:08:33:74:5b:
         f6:ea:21:69:46:48:1b:2e:a9:4f:f8:01:e7:f1:6d:8f:4b:9a:
         fc:76:87:ac:82:4f:33:bb:de:2d:09:d2:06:0e:04:c4:91:ed:
         09:d5:ce:76:d3:d6:30:fa:3b:f5:df:2e:16:1e:8a:4b:21:1a:
         4f:d4:a7:49:3f:9d:45:39:c5:ec:2f:61:c8:c6:d3:25:a6:75:
         08:73:70:b6:5d:d8:8d:a0:1a:69:cb:fd:b4:e0:be:ee:37:67:
         d6:ac:d2:0e:b5:13:02:4d:c1:81:f2:47:62:32:80:52:a6:a9:
         d5:20:bc:49:37:34:e7:73:45:d1:c6:5c:09:d8:38:53:a6:76:
         53:34:e8:90:69:6b:ab:4c:ec:69:e8:03:7d:cf:ed:d1:bc:29:
         05:d7:47:98:0a:a1:7a:fc:b9:32:26:8f:16:d4:8a:b2:1e:42:
         6e:75:aa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:09:03 2026 by rpki-client