Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/17782970808311EFBB9C2A46C4F9AE02.roa
File:                     17782970808311EFBB9C2A46C4F9AE02.roa (raw, json)
Hash identifier:          p+Li5x5IRkEHLsrKLMYZtCUY4xOsEsGyH8peATkiJDE=
Subject key identifier:   2A:35:E4:25:1D:1E:5B:7A:AF:CF:65:41:EF:74:FD:75:FE:22:39:CC
Certificate issuer:       /CN=A91D0B0E/serialNumber=6B0292C6027089C8BA89D8C65A1A330D488B0A2C
Certificate serial:       9C
Authority key identifier: 6B:02:92:C6:02:70:89:C8:BA:89:D8:C6:5A:1A:33:0D:48:8B:0A:2C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/17782970808311EFBB9C2A46C4F9AE02.roa
Signing time:             Tue 15 Jul 2025 06:43:43 +0000
ROA not before:           Tue 15 Jul 2025 06:43:43 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     153055
IP address blocks:        160.25.94.0/23 maxlen: 23
                          160.25.94.0/24 maxlen: 24
                          160.25.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.crl
                          rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 06:31:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0B0E, serialNumber=6B0292C6027089C8BA89D8C65A1A330D488B0A2C
        Validity
            Not Before: Jul 15 06:43:43 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6875f89f-51fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3e:e0:59:83:bd:ee:a8:99:7b:8b:ed:89:a8:
                    ff:da:32:e7:0c:02:b8:e6:c8:f7:e1:29:7c:1e:27:
                    ed:11:ab:6d:cc:4b:84:46:d0:ef:10:3f:de:7a:ec:
                    d7:af:02:f0:ab:b0:32:ea:31:cf:00:19:23:9b:66:
                    be:d2:53:0b:17:83:f3:2b:76:50:fd:49:08:9f:31:
                    e6:2d:1a:a9:6c:f2:15:29:24:21:45:5f:b6:64:5e:
                    a6:79:b4:af:7e:e4:3c:3d:bc:19:fa:da:7e:38:03:
                    76:be:f3:7c:18:3b:6c:cb:5b:97:6a:0e:d7:aa:e6:
                    a9:02:5e:5e:f6:9d:b7:57:41:2e:21:07:47:23:f9:
                    c2:07:14:5b:9d:b3:ec:5e:3b:be:58:72:4d:f1:46:
                    27:94:46:ae:a5:dd:4b:d1:6e:fe:d9:32:ad:59:dd:
                    1a:cf:b8:22:7e:c0:d0:52:1b:1c:09:81:83:b8:96:
                    16:e1:d4:74:0c:84:f7:89:cd:a8:27:fd:d7:0e:45:
                    fa:91:5d:ee:f4:62:9b:33:79:03:49:c1:cb:b7:00:
                    5a:41:e4:c6:f7:15:f1:f2:00:2a:23:3e:6e:78:b6:
                    5f:7a:39:9c:da:6f:5c:f6:c6:fd:ef:a0:8b:c1:4f:
                    08:1b:30:9e:ee:cd:c6:8a:8d:d2:c2:6a:69:59:a0:
                    03:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:35:E4:25:1D:1E:5B:7A:AF:CF:65:41:EF:74:FD:75:FE:22:39:CC
            X509v3 Authority Key Identifier:
                keyid:6B:02:92:C6:02:70:89:C8:BA:89:D8:C6:5A:1A:33:0D:48:8B:0A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/17782970808311EFBB9C2A46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:ef:4b:cb:71:0c:48:98:52:13:f2:1d:c3:d5:9e:46:70:9a:
         29:67:8a:8b:c8:b3:dc:f9:a0:fd:8e:85:4f:bd:da:6a:19:ba:
         49:3d:ac:79:e9:81:24:f5:93:83:db:f7:ca:cf:f1:5b:77:62:
         cb:11:22:ad:50:6c:8f:89:12:bf:25:e2:04:6f:75:75:f1:05:
         71:bf:6a:0e:9b:26:f1:ce:1a:cf:5a:8b:fa:57:68:e0:cb:bd:
         e1:f2:49:cb:84:31:a7:66:3e:a5:3a:43:4e:24:1b:48:eb:43:
         01:1c:78:08:d9:ff:c7:f1:02:8f:b7:d8:01:35:23:c8:7f:68:
         62:89:69:36:0c:8f:cb:1c:bb:2f:94:13:07:18:30:14:11:4c:
         08:68:76:8c:10:e3:70:3c:40:2c:f8:de:af:20:b8:58:4e:44:
         f9:dd:c8:0e:b1:e3:e7:c2:0e:da:43:3d:84:18:b2:12:d2:99:
         94:ef:80:71:00:85:c9:96:43:ae:de:fc:a9:f0:5b:19:5e:59:
         26:39:0b:4a:a9:aa:89:ce:cb:d6:a3:d4:8a:80:f3:f8:bf:e6:
         19:ce:9e:35:04:a9:ef:c0:32:5f:a0:33:68:c0:86:ed:e4:e5:
         a7:e6:77:94:b5:aa:46:82:6e:0e:09:55:14:46:72:c5:96:66:
         26:05:56:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:29:48 2025 by rpki-client