Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/37A0A50E44B211EFA3EEED58C4F9AE02.roa
File:                     37A0A50E44B211EFA3EEED58C4F9AE02.roa (raw, json)
Hash identifier:          kARVAwdeiVYHApcy9RH1CfAzcnetpvRpUWGpi12pzj8=
Subject key identifier:   4B:D4:86:FF:62:81:32:B6:94:2D:E3:BA:85:20:E0:91:84:42:37:AE
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       215A
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/37A0A50E44B211EFA3EEED58C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:22:34 +0000
ROA not before:           Thu 28 Aug 2025 14:51:23 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152949
IP address blocks:        160.25.164.0/24 maxlen: 24
                          160.25.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 14:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8538 (0x215a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:23 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61bba-7dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0b:5d:1a:4b:ca:fa:80:70:c8:28:a9:a4:7f:
                    bf:a0:e1:bf:90:95:a4:c8:83:fd:34:e3:90:6c:ee:
                    86:39:c5:87:72:e2:84:23:f2:69:b5:fe:26:89:74:
                    0a:8f:a0:96:41:ed:de:a8:02:0a:05:a1:8c:63:58:
                    fd:15:9a:cf:34:63:04:cd:02:33:58:f2:fd:5a:da:
                    87:30:ef:43:ff:d3:0f:86:1d:dc:82:f2:c6:60:30:
                    0d:be:3c:29:68:71:66:cb:2a:3e:6e:1a:08:8c:2d:
                    cd:69:6b:a0:1d:df:36:30:c2:03:20:c5:ba:02:76:
                    57:97:dd:f6:2a:1b:c5:bf:0f:ed:0b:5e:96:6a:68:
                    8a:6b:7e:54:20:90:d5:26:09:86:bc:3e:e3:bc:71:
                    0b:fd:4e:de:e2:33:60:62:f4:a2:8b:5c:d4:52:da:
                    b9:02:9d:21:a9:ad:19:d2:91:b8:74:7c:80:44:ba:
                    60:0c:63:41:b2:c0:1a:3e:7a:65:eb:3a:c4:44:83:
                    60:31:bd:60:89:df:3f:44:91:9f:95:d7:29:9d:b6:
                    0e:0e:86:29:80:a7:25:b9:de:c6:54:01:40:79:dc:
                    8f:25:fb:fe:65:5c:cc:45:6f:32:8f:aa:26:a6:e8:
                    87:f4:94:a1:d7:63:4f:d1:36:5b:52:c6:0c:88:02:
                    0e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D4:86:FF:62:81:32:B6:94:2D:E3:BA:85:20:E0:91:84:42:37:AE
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/37A0A50E44B211EFA3EEED58C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:e3:46:7f:1d:74:25:81:c1:85:88:2d:68:6a:89:e0:d5:08:
         c0:79:64:a6:d7:0e:f1:99:2d:51:cf:5c:45:90:79:6d:a8:68:
         2c:02:a0:fc:d5:58:7e:94:77:71:57:30:e9:31:f6:ed:69:0f:
         fd:36:00:57:5a:d5:f1:7c:17:f1:f7:aa:40:94:f9:f3:23:13:
         b7:9c:95:f9:57:f3:24:76:8b:50:fc:54:97:eb:ef:40:f1:6d:
         ee:76:da:95:eb:aa:4b:36:2d:79:aa:42:e1:7b:6a:0c:18:b9:
         9e:31:36:91:ea:f6:32:50:f4:8b:3e:55:c4:1c:98:6d:6f:88:
         2a:f7:89:c8:44:ef:59:e6:85:fe:f5:2a:c9:22:4e:aa:3d:9b:
         7f:22:ef:1d:f8:89:a6:c8:3c:06:7b:59:6a:52:73:cb:64:63:
         bb:c8:58:17:07:0d:18:51:26:f7:1f:e8:a4:4f:46:54:cc:66:
         21:e6:8d:ad:01:63:d6:39:41:f3:3e:4e:56:4b:fc:8f:6e:84:
         73:42:1c:f8:be:cd:97:16:9b:0e:06:34:69:29:1b:6d:82:a3:
         93:f7:c9:b8:d8:be:9e:85:a1:9e:07:b0:c7:fc:71:66:4b:df:
         15:8f:8d:4d:d6:cd:e0:e5:c1:a0:3f:f1:df:f9:b4:68:6a:10:
         08:f6:d3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:53:22 2026 by rpki-client