Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7A3E5B103ABF11EF813E953AC4F9AE02.roa
File:                     7A3E5B103ABF11EF813E953AC4F9AE02.roa (raw, json)
Hash identifier:          syFugbTp2u9HrG2EBXeSvffH44pKStxT4d6wI+ZszPA=
Subject key identifier:   6F:E8:E0:68:02:F9:62:32:A1:4C:A9:F0:93:20:12:EC:F2:CE:06:E3
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       066A
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7A3E5B103ABF11EF813E953AC4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:50:48 +0000
ROA not before:           Thu 28 Aug 2025 14:50:48 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135932
IP address blocks:        160.25.80.0/24 maxlen: 24
                          160.25.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1642 (0x66a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:50:48 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06cc8-47ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b9:6d:8e:59:72:e4:0c:f9:5f:5d:53:7a:36:
                    df:be:41:2c:7f:0f:bf:d3:9a:f8:15:c2:90:ca:29:
                    f9:38:c9:2a:e7:24:a7:e0:68:b3:18:0b:ee:60:89:
                    e1:49:b2:71:9d:1e:f9:c4:4c:e2:37:a2:ec:00:9e:
                    78:57:9c:cc:47:20:8a:ec:3e:f5:1e:66:5b:9f:02:
                    96:8a:c3:63:b3:6c:af:06:8d:e6:ae:bb:ef:8c:52:
                    d2:9f:64:b9:1e:1e:6d:4e:36:f5:3c:ff:9b:a9:95:
                    df:ea:e3:57:d3:af:8c:8c:2b:ad:a2:35:52:85:8e:
                    7c:eb:63:2b:c8:a6:a4:1e:be:85:5c:cb:fb:06:24:
                    b3:89:aa:ac:4d:9f:a7:dd:f6:56:e8:79:eb:be:55:
                    0d:97:b9:79:e5:b2:48:33:68:24:92:dd:04:f5:ee:
                    35:14:b3:b1:8f:8c:2d:ec:6b:04:75:2e:e2:b8:eb:
                    9e:85:79:1f:5d:7b:ae:3f:7d:69:47:d9:c4:e9:96:
                    cd:3d:31:cf:58:47:32:fb:69:7b:19:5f:19:45:ab:
                    ee:c4:51:b0:94:c3:9b:0a:42:3a:68:be:92:72:a0:
                    98:51:8d:3e:cd:0a:7b:7b:fc:89:68:8a:d8:90:8d:
                    41:25:90:9f:05:b6:8c:e0:fc:c5:b7:df:0b:7a:d5:
                    69:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E8:E0:68:02:F9:62:32:A1:4C:A9:F0:93:20:12:EC:F2:CE:06:E3
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7A3E5B103ABF11EF813E953AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:7f:9e:e5:37:65:12:fb:5d:d3:cc:5e:20:c4:20:2b:a0:34:
         74:a3:81:1a:b1:c4:70:41:04:cd:b8:25:60:54:92:4f:24:85:
         b7:61:42:de:ac:f3:bc:dd:91:1d:df:b7:64:a8:50:c7:ab:28:
         4a:cf:01:15:28:13:f8:cd:49:72:dd:08:96:74:dc:ec:30:15:
         0d:d7:36:4a:ab:e1:44:1d:36:2c:bd:de:0d:08:9f:24:f3:b7:
         18:a5:f9:8e:de:0c:bb:47:bd:22:67:42:d7:56:ac:a7:41:fd:
         12:f7:c7:b8:68:95:da:4e:79:e5:60:f6:29:c1:01:93:b9:0c:
         a4:05:3a:12:bf:ce:c4:77:fc:7c:39:c5:fc:b9:8d:ac:d6:07:
         e0:68:cf:64:87:e3:f1:67:05:2c:08:44:96:ec:f9:53:a3:7d:
         c1:61:6b:b7:24:ba:c7:02:d3:ec:9f:3a:f7:cf:15:d2:18:56:
         a9:71:33:14:f4:5e:ae:9b:16:95:57:ea:b2:c4:97:dd:09:ae:
         ca:bd:e6:12:ad:be:d0:68:5a:89:3b:20:1e:ba:9f:bf:24:7b:
         93:16:34:a3:a8:2b:ed:da:34:bf:b9:c9:99:50:15:ec:f0:9a:
         9b:1d:65:aa:05:79:5c:d2:96:2f:f0:84:1f:cc:16:ab:23:ec:
         7a:54:fe:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:08:28 2025 by rpki-client