Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/37C8E00A6EA011F0835F9E19C4F9AE02.roa
File:                     37C8E00A6EA011F0835F9E19C4F9AE02.roa (raw, json)
Hash identifier:          kULCLxEgjb2/Cw5xY/yIQe75Fjnphtia6sfeO3P34Os=
Subject key identifier:   3E:6B:C7:5A:07:B3:B2:CD:66:37:43:09:0D:5D:56:F1:10:E1:63:F5
Certificate issuer:       /CN=A91B391F/serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
Certificate serial:       013F
Authority key identifier: BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/37C8E00A6EA011F0835F9E19C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:41:16 +0000
ROA not before:           Fri 01 Aug 2025 07:42:54 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153174
IP address blocks:        160.25.230.0/23 maxlen: 23
                          160.25.230.0/24 maxlen: 24
                          160.25.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl
                          rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B391F, serialNumber=BA85D91D24ACA9E9E0311E552DBF3759763A62BA
        Validity
            Not Before: Aug  1 07:42:54 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a5937c-0a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:60:15:db:5d:ba:47:78:a9:73:ae:1c:ad:7e:
                    fc:36:0d:7b:d3:25:fc:0a:e7:41:84:55:d4:24:05:
                    7c:d1:e3:4d:e6:8f:07:92:73:e8:2b:68:9b:40:e6:
                    d9:9e:d6:a9:53:7e:b8:12:db:d5:e0:25:63:57:10:
                    9c:f2:2b:e0:aa:b9:41:14:a7:90:4b:7e:e7:35:c7:
                    6e:99:a0:55:d7:9b:ae:3a:8a:81:99:ca:06:5a:51:
                    b2:61:f9:71:57:6b:ea:e3:4b:cd:63:a2:14:e5:56:
                    b1:2d:a5:63:80:92:5d:fa:89:40:f5:93:62:a5:e5:
                    fd:84:43:b7:b1:2a:76:4c:c3:42:b4:50:a2:3e:12:
                    56:01:60:cc:23:9b:e8:70:c4:cd:0d:b5:88:f3:5e:
                    21:de:97:65:b9:68:f5:79:01:d5:8c:4d:67:84:74:
                    ce:88:f3:88:50:f0:ac:a0:c0:f3:a4:b4:71:c3:50:
                    18:68:4b:38:04:aa:0a:25:17:a0:7f:42:c0:fc:46:
                    35:b4:44:11:17:ff:22:56:ba:4a:ee:1d:cb:2e:cd:
                    b9:cb:6c:18:b7:e4:d2:5b:49:11:84:a2:11:ca:64:
                    9d:f9:4a:dc:dc:22:8c:cf:42:b1:94:b5:19:66:de:
                    d2:e3:1c:7c:63:95:b9:b1:5b:ab:36:c1:0a:8d:59:
                    73:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6B:C7:5A:07:B3:B2:CD:66:37:43:09:0D:5D:56:F1:10:E1:63:F5
            X509v3 Authority Key Identifier:
                keyid:BA:85:D9:1D:24:AC:A9:E9:E0:31:1E:55:2D:BF:37:59:76:3A:62:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/uoXZHSSsqengMR5VLb83WXY6Yro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uoXZHSSsqengMR5VLb83WXY6Yro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/50835E68457011EF9C8B8E71C4F9AE02/37C8E00A6EA011F0835F9E19C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:56:fd:db:15:9b:a2:81:a2:75:b6:da:a4:ba:eb:f4:e6:45:
         3b:72:fb:b0:aa:71:6f:16:f4:bd:8a:0e:82:4b:02:0d:6b:01:
         b3:a6:71:04:39:35:ba:94:78:4f:94:7a:19:2d:d6:28:77:bd:
         ad:db:ac:77:2c:d9:c2:f8:22:b0:61:e8:76:57:82:43:a9:d0:
         ba:fd:95:e0:d8:1e:24:78:a4:e2:33:a7:5c:5f:16:bd:57:8c:
         08:39:4b:38:29:9a:7b:7d:45:3c:95:86:b0:d4:39:a9:ff:f1:
         c7:c1:0e:46:61:c3:25:f2:fb:68:e6:71:7b:45:10:69:9a:80:
         45:c2:2b:7e:30:8b:b5:3f:33:2d:fc:76:c2:19:74:a1:b1:50:
         28:cc:ef:90:47:fc:50:18:2d:15:43:a7:c0:97:39:54:ec:12:
         e5:0a:69:64:5a:7c:98:99:73:cb:1b:65:eb:64:00:cb:34:75:
         e1:e0:71:29:28:a0:3e:1d:bd:1d:2f:2e:b8:05:5c:7d:54:f0:
         52:6c:35:b6:84:df:43:b6:d0:5c:73:87:a2:1f:a4:d2:c6:a6:
         6f:79:2c:78:71:78:a5:72:6c:fa:82:41:a6:b0:d5:59:a4:b8:
         8c:1a:53:99:8b:9f:85:bb:c0:e1:04:49:29:0c:88:b3:80:af:
         40:cf:dd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:57:14 2026 by rpki-client