Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DE386AF044DA11EFA1BF331CC4F9AE02.roa
File:                     DE386AF044DA11EFA1BF331CC4F9AE02.roa (raw, json)
Hash identifier:          KUl+B9C+G1KzsjNgUCXWNcYduKZmRfDzyklk37u6SDQ=
Subject key identifier:   D0:A0:BA:EA:7B:A2:82:F9:E4:8A:59:D2:6A:AF:13:20:19:11:B2:1A
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       1DED
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DE386AF044DA11EFA1BF331CC4F9AE02.roa
Signing time:             Thu 08 May 2025 15:54:39 +0000
ROA not before:           Thu 08 May 2025 15:54:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152561
IP address blocks:        160.25.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 12:41:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7661 (0x1ded)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:54:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd3be-c732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:80:77:23:73:73:6f:3e:4c:2b:f0:b5:8d:b4:
                    67:99:de:9f:0a:fd:71:82:84:86:12:95:44:4a:53:
                    c2:c3:53:e1:47:26:09:01:55:35:03:70:bb:f7:33:
                    88:f7:5d:8b:20:f8:2b:54:4e:10:f8:bf:1d:4d:b9:
                    a8:36:07:06:31:14:71:eb:a6:47:c3:5f:11:69:b1:
                    b9:b4:bb:c4:44:1b:41:d4:7a:31:f3:e9:c7:9d:9e:
                    4a:60:43:bf:d7:df:04:a3:7c:ff:4a:7d:87:31:6c:
                    b5:a9:dc:2f:d4:96:e6:ed:eb:07:f5:6d:cb:2a:1d:
                    34:54:aa:f3:ad:f6:6a:9f:5b:15:a5:3b:8e:ff:15:
                    41:59:79:d6:38:2d:fc:c0:79:4b:8c:c1:24:3e:12:
                    4e:e5:55:0b:4a:db:37:04:2c:c2:90:1b:76:65:fb:
                    6e:f1:36:7f:be:c3:02:18:92:27:03:bb:4a:24:84:
                    70:a9:4f:6a:72:8a:21:59:b7:47:b1:70:1e:d0:f3:
                    00:b8:00:87:e0:de:7d:9c:8e:0d:e5:d8:2d:cb:89:
                    d4:f0:94:d8:aa:ec:da:55:16:1e:43:af:a9:33:fa:
                    5c:0f:d9:4f:1f:02:5d:d9:72:0f:00:93:5f:ea:3a:
                    60:fe:cb:9f:a4:d9:a5:9a:53:07:a2:a0:4c:7d:db:
                    eb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A0:BA:EA:7B:A2:82:F9:E4:8A:59:D2:6A:AF:13:20:19:11:B2:1A
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/DE386AF044DA11EFA1BF331CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:b1:66:35:fb:f3:13:46:f3:eb:35:d9:26:05:67:de:7b:af:
         fe:92:44:84:81:1d:85:41:60:41:b0:3d:6e:96:59:e9:88:74:
         b0:46:33:53:86:f7:dd:e2:82:4c:dc:e2:d8:cd:c6:72:cf:28:
         b1:40:ff:20:09:d8:eb:6f:d8:18:70:ee:89:7e:62:65:b1:92:
         e3:51:76:57:61:7c:01:93:89:86:b9:31:bb:c1:25:d5:7c:a5:
         ce:50:d3:1e:ae:29:09:88:07:84:4f:d9:29:54:ab:ea:e7:9d:
         e9:1f:8a:16:f1:a0:41:c0:97:3d:41:34:ea:ff:b5:0e:06:b5:
         f7:39:93:d1:7a:d0:5d:6d:13:7c:04:49:0d:67:a9:25:51:f4:
         ef:87:a6:39:f5:c0:c0:35:7d:67:01:74:c3:5b:37:a0:e1:61:
         d1:bf:ec:0f:55:95:34:1b:42:16:10:0e:56:3f:36:e3:a5:65:
         14:75:ae:5e:51:6b:7c:72:ef:87:41:b7:c8:dc:47:4d:ef:62:
         bc:44:bf:ef:c6:4f:d7:33:52:24:94:14:b6:92:7e:83:fc:78:
         c6:59:71:b6:b1:a4:cb:0f:37:56:73:d5:0c:28:ba:8e:a1:ff:
         cd:07:b4:c9:90:1d:f4:5c:ca:eb:89:38:9a:4d:3e:5e:81:79:
         74:86:a8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:57:50 2025 by rpki-client