Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/77D3D4A0FEDA11F0AB7A7279726F56BC.roa
File:                     77D3D4A0FEDA11F0AB7A7279726F56BC.roa (raw, json)
Hash identifier:          FHfqmVc0DH5T6GrvyUSWpVxXHt1ddRfHNNOxDC51WEY=
Subject key identifier:   42:DC:01:AC:24:F8:CE:11:9D:46:B5:69:93:32:2D:2F:EE:CD:F6:73
Certificate issuer:       /CN=A91E0855/serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
Certificate serial:       0148
Authority key identifier: D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/77D3D4A0FEDA11F0AB7A7279726F56BC.roa
Signing time:             Sun 01 Mar 2026 13:25:06 +0000
ROA not before:           Sat 31 Jan 2026 19:24:31 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135682
IP address blocks:        160.25.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl
                          rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0855, serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
        Validity
            Not Before: Jan 31 19:24:31 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a43e32-424f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c2:81:50:ba:3e:fe:10:72:1f:af:73:cf:49:
                    00:cb:25:ff:cf:7b:d8:c5:47:e6:ce:7d:96:71:e1:
                    68:27:49:f1:70:4c:9e:3c:80:e6:4c:6a:3b:e2:db:
                    a2:43:29:c1:21:ed:72:e7:da:2c:6b:06:dd:e1:a5:
                    81:53:a8:b0:91:cd:6e:bd:d0:01:b2:9d:97:a5:6c:
                    53:1e:43:dd:88:92:2c:13:18:9f:5b:2b:13:39:3b:
                    f6:9e:fb:6c:61:b6:f9:fa:3d:5b:7b:74:f4:61:6b:
                    f0:96:39:fe:a3:43:94:50:78:98:58:43:f7:7e:3e:
                    0b:cf:68:9d:92:bc:e1:8b:7d:85:f5:3a:e6:20:29:
                    4d:f2:88:6a:92:c6:08:a8:bb:2b:1d:3f:ec:9f:d5:
                    10:4d:80:87:41:97:07:dc:f8:51:6d:d5:e8:6f:1a:
                    6e:45:e9:99:ed:34:47:c4:bf:0d:a3:5e:31:e0:42:
                    61:62:b6:c7:f8:da:3f:d8:7f:05:08:3a:d5:c4:07:
                    30:a2:85:db:9e:94:a8:84:17:dd:40:85:a7:5a:f8:
                    27:6f:7c:a8:93:b0:12:87:51:7e:8a:a1:51:c0:e0:
                    fc:b9:e0:d1:e0:6b:f8:7e:c1:8b:e1:c8:ac:23:f7:
                    09:37:26:97:bf:0d:3a:5b:c7:ff:b1:17:21:c0:83:
                    41:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DC:01:AC:24:F8:CE:11:9D:46:B5:69:93:32:2D:2F:EE:CD:F6:73
            X509v3 Authority Key Identifier:
                keyid:D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/77D3D4A0FEDA11F0AB7A7279726F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:b9:ec:fc:e4:94:88:57:97:eb:f7:cf:f3:97:83:b5:88:d8:
         79:e4:a5:38:1b:ec:50:4d:77:8a:f5:04:8a:ba:0d:9a:04:de:
         e6:86:05:70:d3:ce:ff:31:cc:f6:5c:d8:00:e5:03:5c:7a:d7:
         82:1d:06:c0:75:6f:e9:cf:60:58:4a:ed:8b:36:57:72:35:a4:
         4b:7c:b9:6b:cf:dc:5c:e6:2c:53:56:78:87:50:1c:29:0d:99:
         6d:49:ce:2f:d9:71:4f:52:dc:47:db:17:20:f9:8f:38:cf:75:
         87:28:cd:83:e7:69:77:22:46:9f:c1:ed:10:64:6a:5b:6b:30:
         cd:23:41:9c:df:1e:18:d7:b7:f9:7b:e8:79:66:d4:69:f4:6d:
         73:92:24:20:e9:cd:9e:2d:72:cc:93:e9:89:23:4e:5c:03:18:
         58:39:e5:c8:d5:45:d2:ee:9a:77:75:14:61:b0:67:3e:11:4e:
         94:2a:4d:08:73:81:a7:20:36:5d:4e:4e:e2:3a:49:76:53:a5:
         74:1b:7d:1f:cf:a2:0b:d7:de:11:3d:26:aa:d2:d4:42:a3:f8:
         f3:3c:60:9c:c4:56:65:5b:b7:3e:75:2d:98:1a:e5:00:75:58:
         aa:24:ee:62:0f:2d:91:a5:d8:c8:8f:af:7d:eb:c1:0c:b4:ef:
         50:83:06:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:37:10 2026 by rpki-client