Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/21F94DCC3A9011EFBD977F28C4F9AE02.roa
File:                     21F94DCC3A9011EFBD977F28C4F9AE02.roa (raw, json)
Hash identifier:          dIHCjqD+mNYZxLNE+pWBOewyLxxaudEl663hgxoL/mI=
Subject key identifier:   C1:C0:76:83:BF:97:51:A0:1D:5E:FC:63:4A:F6:E9:89:EF:29:93:FB
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       313A
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/21F94DCC3A9011EFBD977F28C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:20:44 +0000
ROA not before:           Mon 06 Jul 2026 16:20:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151101
IP address blocks:        160.25.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12602 (0x313a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:20:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd5dc-8172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:f2:8e:31:a8:ab:8e:75:1b:71:ac:14:7f:
                    91:d9:4c:b9:f7:76:ee:50:cc:1b:5b:8e:e6:84:41:
                    5b:a6:98:7c:ca:48:d5:4e:81:dc:14:1e:99:88:ce:
                    a0:d6:3d:52:3d:2a:ac:d2:2f:f7:c7:96:55:f0:98:
                    8e:3c:69:a5:09:9d:19:09:16:3a:52:e8:38:6b:ce:
                    0e:bf:fb:ab:05:53:b8:0a:3f:eb:3b:9c:bc:6b:80:
                    03:40:0e:e4:09:e5:00:df:2d:44:1b:8f:92:89:e0:
                    21:14:55:4c:e1:31:c8:40:f8:3c:9c:7c:25:cd:e9:
                    67:3b:8f:24:9e:bb:2d:59:a1:5f:ff:fc:ca:8f:f2:
                    c0:64:dc:34:50:4d:9b:05:1e:92:63:39:63:2d:c1:
                    ef:66:e2:79:b1:0b:61:a7:b4:ce:76:76:75:71:00:
                    91:30:9e:e6:57:41:1f:70:62:8a:5e:33:a6:69:aa:
                    55:c2:5c:9c:26:1a:b4:99:f7:4a:91:37:91:27:8c:
                    da:c1:91:35:67:ad:87:6f:12:c9:ba:f0:d5:97:85:
                    27:1b:6b:a7:d0:86:b9:fd:53:e8:42:01:2a:fa:d7:
                    0f:fe:e0:d2:1a:31:d6:a2:85:4e:de:e9:56:a9:65:
                    1e:b7:f0:f5:36:4d:4e:dc:66:99:2a:70:47:50:41:
                    fd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C0:76:83:BF:97:51:A0:1D:5E:FC:63:4A:F6:E9:89:EF:29:93:FB
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/21F94DCC3A9011EFBD977F28C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:19:09:77:95:c7:e5:27:b2:d8:b6:de:80:11:88:6d:15:4b:
         a2:90:c5:58:81:6b:52:6b:a1:43:5d:3c:c2:e7:43:ef:89:0b:
         ee:80:74:14:e1:ba:ea:7b:fa:3b:99:db:04:8e:01:f7:82:cf:
         3e:d3:d2:bc:4d:2b:0d:ad:98:32:b6:28:c8:af:88:3a:9b:0d:
         eb:d1:27:f5:fe:10:a6:f8:9a:8c:21:5f:7e:0e:4d:ad:71:9c:
         f8:f3:ea:9c:d3:f7:e7:ce:6f:16:26:32:b6:95:ab:a1:1d:db:
         48:b5:45:84:ae:b8:6a:c8:d5:9e:b8:43:67:68:7f:6b:e2:83:
         a8:d7:d2:95:f1:3a:b2:dd:9b:a3:3b:a5:32:dc:42:2c:57:9b:
         e5:57:b9:27:04:84:f8:13:6b:00:bf:a0:e9:8c:18:b5:54:47:
         10:93:60:92:ef:d8:d6:2f:b4:57:a1:a2:c7:2f:be:e1:65:aa:
         7c:01:21:65:2d:cd:8e:26:58:1a:3c:62:5a:fd:51:eb:db:8e:
         63:7f:c2:6e:4d:f8:4b:64:c8:77:22:56:ae:10:e6:80:99:27:
         b9:56:bd:73:9d:78:45:e8:56:56:65:3e:b4:e1:4d:8c:ed:51:
         cd:20:a5:ec:9e:d2:03:2e:89:54:1c:ee:11:fb:c3:2f:89:09:
         e6:7c:d8:77
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICMTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNzA2MTYyMDQ0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZDVkYy04MTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAseLyjjGoq451G3GsFH+R2Uy593buUMwbW47mhEFbpph8ykjVToHcFB6ZiM6g
1j1SPSqs0i/3x5ZV8JiOPGmlCZ0ZCRY6Uug4a84Ov/urBVO4Cj/rO5y8a4ADQA7k
CeUA3y1EG4+SieAhFFVM4THIQPg8nHwlzelnO48knrstWaFf//zKj/LAZNw0UE2b
BR6SYzljLcHvZuJ5sQthp7TOdnZ1cQCRMJ7mV0EfcGKKXjOmaapVwlycJhq0mfdK
kTeRJ4zawZE1Z62HbxLJuvDVl4UnG2un0Ia5/VPoQgEq+tcP/uDSGjHWooVO3ulW
qWUet/D1Nk1O3GaZKnBHUEH99QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMHAdoO/
l1GgHV78Y0r26YnvKZP7MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMjFGOTREQ0Mz
QTkwMTFFRkJEOTc3RjI4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoBk/MA0GCSqGSIb3DQEBCwUAA4IBAQAPGQl3lcflJ7LYtt6AEYht
FUuikMVYgWtSa6FDXTzC50PviQvugHQU4brqe/o7mdsEjgH3gs8+09K8TSsNrZgy
tijIr4g6mw3r0Sf1/hCm+JqMIV9+Dk2tcZz48+qc0/fnzm8WJjK2lauhHdtItUWE
rrhqyNWeuENnaH9r4oOo19KV8Tqy3ZujO6Uy3EIsV5vlV7knBIT4E2sAv6DpjBi1
VEcQk2CS79jWL7RXoaLHL77hZap8ASFlLc2OJlgaPGJa/VHr245jf8JuTfhLZMh3
IlauEOaAmSe5Vr1znXhF6FZWZT604U2M7VHNIKXsntIDLolUHO4R+8MviQnmfNh3
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:33 2026 by rpki-client