Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7A3E5B103ABF11EF813E953AC4F9AE02.roa
File:                     7A3E5B103ABF11EF813E953AC4F9AE02.roa (raw, json)
Hash identifier:          o13Uw+3P3asarTFUIwY+471MNk9WlF1JKS/FdsuG81U=
Subject key identifier:   41:AE:3A:DB:B9:10:53:4D:4F:F2:83:5A:2E:BB:75:AF:FC:09:10:68
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       2172
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7A3E5B103ABF11EF813E953AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:22:57 +0000
ROA not before:           Thu 28 Aug 2025 14:50:48 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135932
IP address blocks:        160.25.80.0/24 maxlen: 24
                          160.25.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 14:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8562 (0x2172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:50:48 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61bd1-c71a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:68:84:4c:f1:00:e8:e3:74:f2:70:8a:6c:d1:
                    00:0d:1a:7e:e3:a8:df:2b:a8:bf:48:bf:62:66:99:
                    88:5e:65:94:f0:ff:34:9a:b9:47:a1:9b:ce:2a:35:
                    f6:ef:90:81:80:89:e1:cb:3b:20:b2:db:6d:f8:84:
                    53:38:f1:28:97:87:1f:8b:40:18:d2:c3:97:60:7e:
                    d5:48:79:60:02:45:e1:54:53:86:a2:3f:3f:db:a3:
                    49:4f:07:6a:ee:0a:72:54:ac:c5:90:70:3d:da:78:
                    c7:d3:47:d2:02:13:4b:92:70:f6:b6:bb:ce:46:5a:
                    f7:2a:46:96:b5:bc:b7:94:ba:0b:f3:b7:7d:8d:9b:
                    23:db:79:83:ee:4a:1a:04:11:71:fd:24:cb:e2:70:
                    c9:e8:51:38:67:e7:85:f6:00:42:3e:5e:a9:3b:bf:
                    b1:2d:3a:a9:cb:28:7c:95:2b:e2:bc:d7:ac:a8:2e:
                    3a:67:b0:94:23:0e:e2:29:8e:8d:d4:a4:bd:00:b8:
                    54:db:37:91:25:c3:ee:7b:85:90:82:86:4a:4e:41:
                    08:60:7f:1f:99:a4:b3:78:96:ca:c1:bc:2e:d8:3d:
                    0e:18:c7:0f:80:b2:60:8f:0e:c4:5f:6f:96:27:4a:
                    10:88:c5:85:25:d3:82:19:2e:55:a9:49:fa:5a:65:
                    09:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AE:3A:DB:B9:10:53:4D:4F:F2:83:5A:2E:BB:75:AF:FC:09:10:68
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7A3E5B103ABF11EF813E953AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:a4:04:f2:f6:ea:32:f0:9a:63:ea:08:c2:ec:dd:03:e4:08:
         d3:32:36:f5:ff:73:ce:84:88:01:1a:63:8a:a5:a8:94:b8:95:
         86:9c:5b:d0:ac:4e:c1:23:b8:f5:b1:13:a2:47:18:44:f1:65:
         64:96:28:63:17:ad:53:a0:81:a8:2a:e5:88:0c:52:52:30:b2:
         d6:63:55:d9:1b:37:d9:24:00:f0:a7:11:e2:51:37:4a:79:da:
         94:44:a0:8a:58:43:e9:4c:05:6a:e1:f8:b0:47:a3:40:db:71:
         60:bc:a4:ec:c3:e8:dc:41:39:53:c6:25:ac:d7:91:b3:ac:e7:
         8b:08:d6:da:74:7c:59:26:19:4a:eb:c8:85:d8:67:0e:ca:0d:
         de:05:e8:41:57:37:ab:08:d4:ed:35:8d:5c:7b:9a:fd:ef:b5:
         0a:75:5a:80:63:81:7e:16:5e:ca:af:66:6f:32:55:48:fb:2b:
         55:16:ed:41:ff:d1:0d:92:46:8a:63:39:9b:f4:b1:ee:22:21:
         37:73:22:0a:c7:37:0a:d3:07:69:12:5b:b0:2e:65:6c:22:7d:
         4e:c6:1c:7a:cd:a9:5c:4b:74:18:ec:4c:cf:30:3b:6c:02:12:
         a7:f3:67:71:03:95:ea:4f:1c:01:ef:83:5b:e8:cd:04:66:36:
         4d:64:f0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:53:57 2026 by rpki-client