Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/388D7E38797D11EF8CA64711C4F9AE02.roa
File:                     388D7E38797D11EF8CA64711C4F9AE02.roa (raw, json)
Hash identifier:          tcJP6ckIisiXaSRaPvtWnl6KwRGfZck/uk3eudyqJEo=
Subject key identifier:   FE:22:C3:56:AF:4B:73:5F:78:9D:DA:0C:E2:E0:50:8B:06:A8:72:19
Certificate issuer:       /CN=A91D4ACD/serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
Certificate serial:       011D
Authority key identifier: 86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/388D7E38797D11EF8CA64711C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:26:10 +0000
ROA not before:           Fri 29 Aug 2025 06:57:01 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     153316
IP address blocks:        160.187.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl
                          rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4ACD, serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
        Validity
            Not Before: Aug 29 06:57:01 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a581e2-e68a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:41:97:fc:bf:e6:26:c1:34:8c:b8:40:3c:0c:
                    ce:06:63:e0:e4:f7:7d:2c:37:02:04:50:56:6a:cf:
                    21:fe:f3:28:46:c2:13:5a:02:74:9e:6a:56:55:f5:
                    e8:30:6d:0b:bc:83:9f:96:e4:22:d5:4d:4b:7d:69:
                    d0:a2:df:67:68:d4:45:6b:39:f6:92:b1:a1:0f:f3:
                    ca:a1:0f:c2:9e:fe:44:63:76:ce:75:93:77:3a:ac:
                    e9:f9:bd:67:c9:cc:d6:08:c8:ae:12:32:ea:69:74:
                    84:94:71:4d:57:39:19:f4:ee:3c:d6:ab:bf:0f:23:
                    75:f9:3a:9d:79:e9:02:b8:2a:53:31:1f:4b:c9:a3:
                    cc:d2:45:aa:22:ae:eb:e0:f5:18:a7:ff:56:2a:10:
                    73:b0:4a:c5:dc:5f:8c:07:e9:2d:ec:a6:c4:a3:3e:
                    94:25:ef:0e:3a:d9:bd:a3:97:ca:6c:77:4a:7d:b5:
                    fb:3d:7f:10:af:65:f7:3b:67:40:87:26:af:f3:af:
                    d1:2f:c6:5d:50:ca:cc:4e:55:d8:36:16:f7:dd:f2:
                    d3:29:84:f9:4d:38:d2:90:6d:7e:75:38:89:52:f0:
                    a7:12:2c:06:85:4f:64:2f:a8:16:35:95:29:96:0f:
                    9e:4e:eb:b8:34:15:24:28:c8:ea:83:bd:f1:5a:77:
                    d5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:22:C3:56:AF:4B:73:5F:78:9D:DA:0C:E2:E0:50:8B:06:A8:72:19
            X509v3 Authority Key Identifier:
                keyid:86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/388D7E38797D11EF8CA64711C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:61:24:98:68:75:bf:40:ad:5a:3e:7d:c8:72:bf:a5:2b:f8:
         d3:5b:0c:54:c0:96:d6:69:f8:9b:41:27:ef:23:de:e6:58:3c:
         6f:87:a1:1c:2a:67:77:44:7f:2e:c4:b2:0a:b9:cf:69:2a:fc:
         55:23:da:85:e3:4f:c2:1d:9d:57:3e:cf:57:4b:22:36:15:a3:
         7f:10:d4:7a:79:8d:e2:9c:1d:28:cf:8a:de:88:3a:17:8a:64:
         55:e6:5e:53:d0:87:a7:0a:61:18:f3:c7:4a:3c:99:14:a2:05:
         e4:35:3f:e8:63:0c:ef:9d:4a:a6:d8:01:e2:39:c6:dc:ec:28:
         99:60:3d:b6:f6:7b:40:65:7a:bd:41:9d:47:7b:fd:17:0c:20:
         52:e2:43:1b:b7:2e:5e:cb:b6:e9:c0:4b:38:ba:03:c2:05:4e:
         55:7c:2a:99:24:e4:2c:c4:ff:e6:3f:90:c6:dd:ef:3f:a8:55:
         a6:9b:47:62:58:bd:c3:14:f1:3d:19:b0:5b:e5:32:05:fc:90:
         57:41:47:ca:dd:d2:e3:f8:d1:0c:bb:67:82:6b:d2:58:fe:5f:
         95:83:60:2f:e6:bb:5e:93:ea:4b:31:30:20:bd:1e:aa:18:b4:
         df:08:e6:17:2d:24:69:a8:d1:7b:8c:a3:78:9b:d7:01:87:07:
         85:b4:6e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:08:36 2026 by rpki-client