Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/2916DB783FE111EFB5A50814C4F9AE02.roa
File:                     2916DB783FE111EFB5A50814C4F9AE02.roa (raw, json)
Hash identifier:          epV5odcoH9JjdJu9CHvqxBAp0zjrfWXz2/0dQLE8qjI=
Subject key identifier:   1E:FB:4F:E3:2C:0C:68:D3:19:47:2D:3C:3D:88:FC:0B:36:BA:EF:76
Certificate issuer:       /CN=A9153303/serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
Certificate serial:       013B
Authority key identifier: 54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/2916DB783FE111EFB5A50814C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:04:29 +0000
ROA not before:           Thu 07 Aug 2025 06:43:01 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     64095
IP address blocks:        160.25.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl
                          rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:32:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 315 (0x13b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153303, serialNumber=547A110FF2E3A4D4208EA5B7C3E8729A9B0FD49C
        Validity
            Not Before: Aug  7 06:43:01 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a598ed-b39b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d7:23:6e:5e:1d:e6:43:ad:59:92:26:66:c7:
                    d2:9d:dd:b7:d8:4d:f9:3c:24:99:a1:3b:ba:62:f4:
                    fb:5d:86:8e:9e:5b:4a:9c:4a:94:0f:b1:f7:30:a2:
                    5f:61:32:28:8d:ee:1b:f6:b8:92:e1:e6:c6:01:bd:
                    ae:b1:82:c0:28:e6:17:59:a1:4f:b8:a8:3b:9d:a6:
                    18:33:2d:c3:43:cd:59:ca:d6:31:5c:ac:2f:54:47:
                    40:b3:36:76:ec:1f:8c:d5:72:8d:ec:45:23:8d:38:
                    9f:33:df:aa:85:29:ae:05:9c:65:78:cd:e4:1c:88:
                    2d:8a:1c:cd:d9:97:38:48:a7:8b:d7:90:cd:57:26:
                    6e:14:f9:47:f3:7e:75:41:01:ca:ee:19:11:df:e2:
                    50:ba:f7:fa:39:d6:ef:1a:b4:e5:8d:e8:27:bc:98:
                    9a:ea:eb:da:84:99:08:99:f1:85:fe:02:1b:6f:5e:
                    ee:12:6a:69:1d:2e:e3:f4:1c:fb:75:ad:6e:47:1a:
                    7b:a3:c9:2a:16:6b:ca:4b:b1:61:72:70:ab:d9:3b:
                    5e:69:a8:c8:00:46:3d:9c:f0:16:2f:8b:84:5d:fe:
                    21:75:c0:fb:af:05:7c:36:40:6d:1a:16:c6:c6:6b:
                    23:26:0f:74:21:b6:52:c2:ef:a4:fb:82:8e:59:e4:
                    b4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FB:4F:E3:2C:0C:68:D3:19:47:2D:3C:3D:88:FC:0B:36:BA:EF:76
            X509v3 Authority Key Identifier:
                keyid:54:7A:11:0F:F2:E3:A4:D4:20:8E:A5:B7:C3:E8:72:9A:9B:0F:D4:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/VHoRD_LjpNQgjqW3w-hympsP1Jw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VHoRD_LjpNQgjqW3w-hympsP1Jw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153303/78A81D103FE011EF8635D712C4F9AE02/2916DB783FE111EFB5A50814C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:c4:98:35:10:80:6e:b0:dd:b2:27:7c:9f:b9:f2:6d:69:73:
         cc:63:3d:43:c1:ef:f4:da:12:3f:a7:1c:e1:cc:9f:04:92:bc:
         84:9f:54:e7:69:db:c7:7f:00:96:f0:82:12:79:1c:1e:e6:76:
         eb:0f:d0:46:54:0f:95:33:63:2a:6c:2d:ec:df:4f:20:2d:93:
         a0:8a:1e:21:5f:14:d7:74:0e:9e:d5:8d:9e:bf:4c:69:c1:e4:
         d5:13:05:1e:f7:fb:1c:85:c4:09:82:cd:78:bd:d8:78:94:9c:
         a3:81:0f:cf:48:5c:c2:96:28:d8:21:a7:9c:ec:c6:a9:5a:a5:
         f6:58:c5:22:66:5e:38:1f:77:c2:97:ff:e1:de:bb:c5:04:50:
         a9:d7:fa:fb:86:c0:7e:16:8d:c7:a2:d4:5a:ff:b7:26:35:4b:
         cc:93:bb:5f:de:0f:88:cd:02:03:fb:a9:93:3e:4b:84:25:0e:
         d9:eb:d3:fa:58:2f:41:b5:c8:81:c6:51:ef:a2:2d:0b:5d:3e:
         f5:40:2e:e4:96:70:3e:3e:67:94:59:b2:a1:da:34:6d:82:91:
         9a:21:9f:6c:22:02:90:a8:0b:86:61:62:24:4f:1a:47:c5:a0:
         85:2a:a1:b0:22:e6:f5:f0:29:fd:cf:56:cd:fd:62:fb:e5:24:
         f1:bd:97:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:53:11 2026 by rpki-client