Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/F31A7084E2C911EFADAB3C32C4F9AE02.roa
File:                     F31A7084E2C911EFADAB3C32C4F9AE02.roa (raw, json)
Hash identifier:          jAscgWh7S9/demSMPFwsCSZccuBN3foVEhiH5Tuiw30=
Subject key identifier:   51:36:1B:E2:AC:68:D8:11:EE:BF:FC:A0:A4:C6:BC:21:72:84:2E:F2
Certificate issuer:       /CN=A913A748/serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81
Certificate serial:       CC
Authority key identifier: 69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/F31A7084E2C911EFADAB3C32C4F9AE02.roa
Signing time:             Tue 29 Jul 2025 06:42:34 +0000
ROA not before:           Tue 29 Jul 2025 06:42:34 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     152929
IP address blocks:        160.25.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl
                          rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A748, serialNumber=694858B92BCA7C08765BC6BBC183923EB5711F81
        Validity
            Not Before: Jul 29 06:42:34 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68886d5a-f1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:47:2d:96:1e:da:cd:8b:5c:6a:4b:9b:96:6c:
                    b2:74:65:d3:24:cf:f8:27:39:53:4c:2a:27:2c:25:
                    cc:62:3d:be:63:dd:ea:be:ce:1f:06:ba:35:27:c6:
                    6a:b4:23:5c:29:e3:ba:a6:7c:4e:90:ab:5e:aa:f4:
                    fb:c7:4a:f0:b3:c8:00:51:6d:d9:f2:c9:63:49:a6:
                    fd:29:75:c9:e7:25:46:fb:11:d1:f3:57:c5:b7:63:
                    d5:68:bb:6c:0b:cb:14:d5:f8:d9:39:10:74:65:8c:
                    a0:bb:59:98:10:0f:e5:cf:18:7c:25:b5:2e:4f:88:
                    e1:12:33:a8:5e:cd:ca:7e:db:a7:cd:90:b2:15:5f:
                    00:2a:6a:07:b2:b1:d7:bc:4d:9c:e8:b1:24:79:74:
                    d1:f1:5e:f5:5f:43:3e:63:0c:a7:34:cd:12:20:00:
                    13:4e:a4:2c:2e:d3:f0:78:33:f7:38:e1:84:7b:68:
                    bf:cd:b9:9a:2c:dc:e0:ee:a0:2b:25:8f:c7:e2:3f:
                    84:13:aa:0d:c9:dd:a9:40:34:ab:5e:ec:91:6a:38:
                    90:ee:80:21:6d:f3:4e:d2:55:7e:3b:c4:31:15:49:
                    00:d1:8f:6b:68:89:c5:58:a9:d2:34:71:70:f3:65:
                    ec:79:74:9d:61:5e:95:5a:a9:60:66:3d:95:41:8f:
                    54:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:36:1B:E2:AC:68:D8:11:EE:BF:FC:A0:A4:C6:BC:21:72:84:2E:F2
            X509v3 Authority Key Identifier:
                keyid:69:48:58:B9:2B:CA:7C:08:76:5B:C6:BB:C1:83:92:3E:B5:71:1F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/aUhYuSvKfAh2W8a7wYOSPrVxH4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aUhYuSvKfAh2W8a7wYOSPrVxH4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A748/A21837B042B111EF92E56578C4F9AE02/F31A7084E2C911EFADAB3C32C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:6a:db:71:69:0b:bc:e2:d6:c3:a6:b4:99:8b:98:56:d1:94:
         4d:43:65:5e:cd:aa:ea:39:40:63:d6:bc:fc:a5:14:ee:8c:75:
         d1:ea:11:e9:e3:69:c5:5b:68:d7:f2:ac:4f:85:c1:d4:ec:a1:
         76:79:7a:87:8f:0d:8d:3a:a7:ea:5c:da:76:d6:47:61:d5:2d:
         6a:b3:71:31:18:44:58:96:3d:8f:09:f6:96:cf:ef:5c:dd:cf:
         02:af:30:a2:53:65:94:1a:b9:f3:dc:61:6e:a6:a8:0f:f6:4a:
         84:1c:2b:d2:d7:9e:27:8b:1e:5a:31:cb:73:f1:c6:2f:63:0c:
         25:8e:42:7c:0b:ae:b7:36:f6:91:35:58:a4:fa:b1:4f:75:ad:
         18:12:7e:27:a3:4a:f3:d6:a5:13:bd:a0:c7:77:23:8f:0b:65:
         b5:f3:86:af:e1:b8:4a:5d:6b:48:02:6a:8b:b7:68:d9:7e:da:
         0c:51:31:01:a4:15:4c:ed:6c:48:9b:5d:cf:51:88:4d:c0:e1:
         e0:9f:b9:7c:57:af:12:51:8b:c9:f0:77:7d:91:2d:da:a0:2f:
         90:3c:73:1c:8a:9e:4f:77:60:b4:e4:af:7a:08:39:7a:1f:5d:
         d6:5d:82:cf:09:ab:e2:00:a3:8d:73:e0:b3:a6:90:83:c5:7a:
         97:f1:00:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 11:03:57 2025 by rpki-client