Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/70ED9D2837D111EF99A8011CC4F9AE02.roa
File:                     70ED9D2837D111EF99A8011CC4F9AE02.roa (raw, json)
Hash identifier:          mOCADM7rUyrVZQHR29QGDW6mWHRCcP7t6l0A8fFGuLc=
Subject key identifier:   22:D9:B7:41:35:53:10:06:D1:8B:D4:2A:80:5E:A6:E2:40:B0:F6:79
Certificate issuer:       /CN=A91B7948/serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
Certificate serial:       0140
Authority key identifier: 2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/70ED9D2837D111EF99A8011CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:35:16 +0000
ROA not before:           Fri 25 Jul 2025 06:13:34 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     153045
IP address blocks:        160.25.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl
                          rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 04:56:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7948, serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
        Validity
            Not Before: Jul 25 06:13:34 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a58404-b9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d9:1f:e5:b3:96:07:68:20:b8:2b:90:2a:87:
                    0a:37:47:e5:58:9d:e5:92:93:eb:c3:01:0d:7e:f7:
                    94:8d:90:dc:a7:dd:e8:b1:c7:e2:3b:d0:4e:fd:26:
                    04:05:25:55:14:23:4d:40:be:a5:28:1b:99:0b:2a:
                    3c:54:ea:50:f7:ed:ff:32:35:50:db:9d:74:68:f5:
                    32:6c:44:3f:eb:61:fd:f3:d1:60:f4:01:55:97:a5:
                    60:13:8e:0d:6d:0c:2e:57:c4:f9:09:2b:95:cd:52:
                    b7:9b:5a:cd:53:a1:5a:bf:f6:08:45:fe:60:9d:ae:
                    a9:82:f0:84:1f:75:0f:e3:ac:23:31:2e:9a:ff:cd:
                    d4:65:71:44:5a:14:2e:24:32:00:64:5e:05:81:3f:
                    59:60:ca:26:3d:b3:75:c3:ad:8f:b5:a6:2c:ec:27:
                    e6:73:b0:b2:18:77:0e:93:26:5d:52:00:a0:4a:f1:
                    f7:7d:28:dc:ae:5d:23:98:ce:e1:6e:e2:2f:52:06:
                    f2:18:37:9e:1e:47:bc:1b:bc:23:0f:af:8a:21:83:
                    16:da:d0:0d:e5:bd:ec:e5:d1:67:3f:21:a1:ba:07:
                    03:32:47:44:cf:70:f0:e3:a3:e6:92:42:fb:4a:9a:
                    d7:3b:d2:21:68:b5:ca:7b:8e:db:f0:be:80:2b:82:
                    37:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D9:B7:41:35:53:10:06:D1:8B:D4:2A:80:5E:A6:E2:40:B0:F6:79
            X509v3 Authority Key Identifier:
                keyid:2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/70ED9D2837D111EF99A8011CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:37:88:11:57:69:19:0c:5d:c5:fe:01:99:10:e3:03:f2:f9:
         00:c6:0f:73:13:d2:ee:ea:12:a5:b4:a4:8a:51:80:81:62:e4:
         a3:fe:4a:19:26:16:91:cd:32:e7:c2:a8:08:69:b3:2c:32:63:
         ce:90:9a:da:b3:43:7e:de:a8:71:a9:d7:b3:ab:6f:4f:bc:ce:
         9c:fe:70:53:41:e8:73:f2:70:e5:8e:66:9f:9e:23:a7:7e:4d:
         f3:8b:0f:b7:9b:4c:d5:0d:ac:b2:14:cb:ea:65:b8:9e:eb:0c:
         bf:51:08:2c:77:95:99:bc:a4:27:25:0a:57:9f:bc:4a:62:0b:
         fb:d6:6e:f5:5e:d6:3d:3f:b6:75:1c:ff:95:2f:fd:92:4c:2f:
         44:91:63:d8:ab:73:08:4d:19:27:22:4e:0c:05:66:ba:9d:f8:
         16:20:76:f5:d8:db:50:96:0c:0c:05:5e:2b:35:45:ac:93:1f:
         d0:af:54:09:b8:89:e6:36:7e:32:db:44:70:cf:cb:32:ef:8b:
         b2:77:d2:80:07:d3:c8:11:93:1e:af:53:ca:6b:a3:02:c3:12:
         9c:93:b3:fc:e2:77:18:7d:5a:e6:d7:92:4b:9a:41:6b:3e:79:
         d0:db:f7:29:6d:5d:f1:a9:05:ba:bd:53:ba:6f:2e:9c:02:31:
         38:ed:36:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:06 2026 by rpki-client