Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/D0B078FA389611EF909AF237C4F9AE02.roa
File:                     D0B078FA389611EF909AF237C4F9AE02.roa (raw, json)
Hash identifier:          6hllB+BhAvPyfA1E4UvoCy4BNkepXgO0emT4SO5EHvY=
Subject key identifier:   65:DC:0E:2F:46:39:93:68:81:D8:BF:DA:19:60:EC:4F:35:BF:3E:04
Certificate issuer:       /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0
Certificate serial:       0140
Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/D0B078FA389611EF909AF237C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:22:01 +0000
ROA not before:           Mon 07 Jul 2025 06:13:36 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     153048
IP address blocks:        160.25.40.0/24 maxlen: 24
                          160.25.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl
                          rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:28:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F2BD, serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0
        Validity
            Not Before: Jul  7 06:13:36 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5ab19-48a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:37:0a:40:bd:c3:d9:db:95:21:b2:3b:07:3c:
                    e8:e8:35:fa:d9:85:14:f0:87:3a:d9:53:45:2a:4a:
                    46:da:8a:e7:dc:6d:dd:6f:d7:d0:fe:56:86:45:ae:
                    4e:9b:8f:f2:e4:52:75:a8:27:54:6e:ef:db:f7:a8:
                    82:5a:5d:13:39:9a:f1:ff:93:36:fd:04:f9:15:83:
                    ac:03:be:c9:3a:26:10:e9:f9:bf:ed:ec:f8:02:5e:
                    0c:ef:2e:57:00:19:2b:1e:50:71:22:d2:d0:79:1f:
                    e7:a7:8d:6e:70:3a:49:26:f6:f1:a8:ac:14:4a:20:
                    d4:09:25:b1:a5:4c:23:21:9f:e1:7e:ee:98:f2:8b:
                    72:6f:9f:0c:6c:d7:e1:43:47:58:fb:a4:ed:d6:9c:
                    4e:fc:82:ae:cc:64:ac:2f:45:c0:d1:b0:58:fc:2d:
                    ee:1c:12:4b:7f:a9:d5:19:91:78:30:44:8b:16:26:
                    71:3b:fc:e9:ae:e2:a6:54:ad:0b:ae:f8:d0:5e:b3:
                    9f:d7:3e:8d:fa:95:b0:20:1d:1a:50:f1:e9:c7:1f:
                    44:ff:42:16:22:0d:3d:09:98:60:85:69:16:5d:68:
                    d8:e5:4b:0c:82:5b:75:1b:e7:d3:eb:c4:78:a1:cd:
                    67:8c:85:93:2c:71:82:12:e9:eb:34:da:c5:42:23:
                    df:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DC:0E:2F:46:39:93:68:81:D8:BF:DA:19:60:EC:4F:35:BF:3E:04
            X509v3 Authority Key Identifier:
                keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/D0B078FA389611EF909AF237C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:76:9d:c6:5e:42:4b:84:a0:5c:54:da:f5:e4:a5:bf:75:10:
         6f:30:f4:5c:4e:c5:a4:28:34:b4:48:c6:c9:65:99:96:99:fb:
         5d:88:41:95:42:9c:a7:58:ac:c4:29:5e:f1:14:95:37:af:2d:
         c1:76:f0:9f:03:b6:93:50:f9:c4:f6:e9:89:c9:a4:ca:9a:e3:
         8a:ff:17:80:2b:a1:2d:70:54:c8:81:8c:40:19:32:af:f2:d6:
         49:68:61:c2:3e:77:47:f2:d8:a7:9a:d6:42:17:1e:20:37:03:
         f7:e4:aa:6f:70:14:d4:3f:56:06:bd:eb:bf:fe:d7:47:3c:ef:
         98:88:28:15:ca:86:7c:58:05:ea:34:37:6a:13:96:03:7e:81:
         92:2c:f8:5c:e8:41:1d:59:cd:f1:b8:10:2f:4e:aa:2e:be:28:
         cc:35:1e:9e:27:8c:45:f2:22:0a:1f:d0:5a:f7:1c:78:00:58:
         bd:df:f8:b4:2e:20:12:8f:c2:56:ea:96:e1:36:a0:87:1c:1a:
         c4:5b:c2:b5:fa:da:44:7b:44:f6:11:46:8e:1a:21:79:42:f2:
         00:c4:9c:a2:c9:ca:a6:ce:5b:31:83:23:de:1d:2b:6c:b4:ae:
         36:c4:9e:41:43:c6:8f:06:0d:c5:2f:76:17:36:25:ed:46:f8:
         c0:fc:8b:99
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0YyQkQxMTAvBgNVBAUTKEQxRUVCRDE2MjREQ0RFNTE5NDEwRUQ1RDY0RTZENTEz
OTg0Qjc3RDAwHhcNMjUwNzA3MDYxMzM2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YWIxOS00OGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlDcKQL3D2duVIbI7Bzzo6DX62YUU8Ic62VNFKkpG2orn3G3db9fQ/laGRa5O
m4/y5FJ1qCdUbu/b96iCWl0TOZrx/5M2/QT5FYOsA77JOiYQ6fm/7ez4Al4M7y5X
ABkrHlBxItLQeR/np41ucDpJJvbxqKwUSiDUCSWxpUwjIZ/hfu6Y8otyb58MbNfh
Q0dY+6Tt1pxO/IKuzGSsL0XA0bBY/C3uHBJLf6nVGZF4MESLFiZxO/zpruKmVK0L
rvjQXrOf1z6N+pWwIB0aUPHpxx9E/0IWIg09CZhghWkWXWjY5UsMglt1G+fT68R4
oc1njIWTLHGCEunrNNrFQiPfhQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGXcDi9G
OZNogdi/2hlg7E81vz4EMB8GA1UdIwQYMBaAFNHuvRYk3N5RlBDtXWTm1ROYS3fQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC8zRUUyNzY3NjM4
OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNsR1VFTzFkWk9iVkU1aExk
OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBlNjlGaVRjM2xHVUVPMWRaT2JWRTVoTGQ5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0YyQkQvM0VFMjc2NzYzODk2MTFFRjlFREU4MTM2QzRGOUFFMDIvRDBCMDc4RkEz
ODk2MTFFRjkwOUFGMjM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBkoMA0GCSqGSIb3DQEBCwUAA4IBAQAIdp3GXkJLhKBcVNr15KW/
dRBvMPRcTsWkKDS0SMbJZZmWmftdiEGVQpynWKzEKV7xFJU3ry3BdvCfA7aTUPnE
9umJyaTKmuOK/xeAK6EtcFTIgYxAGTKv8tZJaGHCPndH8tinmtZCFx4gNwP35Kpv
cBTUP1YGveu//tdHPO+YiCgVyoZ8WAXqNDdqE5YDfoGSLPhc6EEdWc3xuBAvTqou
vijMNR6eJ4xF8iIKH9Ba9xx4AFi93/i0LiASj8JW6pbhNqCHHBrEW8K1+tpEe0T2
EUaOGiF5QvIAxJyiycqmzlsxgyPeHStstK42xJ5BQ8aPBg3FL3YXNiXtRvjA/IuZ
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:30:34 2026 by rpki-client