Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/D525D9EE7E9311F19E24FC4D5FA30FBC.roa
File:                     D525D9EE7E9311F19E24FC4D5FA30FBC.roa (raw, json)
Hash identifier:          Xaaqexgp90LM2rSVPbTirL5iwM6e6UHELXQmcnuef0E=
Subject key identifier:   EF:D7:0A:4C:30:2B:51:1B:0F:41:65:69:8F:7C:CE:5B:75:4F:39:2E
Certificate issuer:       /CN=A91E0855/serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
Certificate serial:       019C
Authority key identifier: D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/D525D9EE7E9311F19E24FC4D5FA30FBC.roa
Signing time:             Mon 13 Jul 2026 08:21:23 +0000
ROA not before:           Mon 13 Jul 2026 08:21:23 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154024
IP address blocks:        160.25.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl
                          rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 05:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0855, serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
        Validity
            Not Before: Jul 13 08:21:23 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a54a003-5c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1d:21:6e:29:73:7a:66:55:86:de:ac:5b:4d:
                    9e:a4:d9:2c:b8:fe:f2:75:47:19:1c:52:ad:51:ef:
                    ae:b7:11:52:c5:0a:cd:a3:7c:2b:03:38:9f:11:9b:
                    30:8c:fd:19:a1:cd:25:d3:63:7d:7a:f5:d5:f1:95:
                    d4:ec:7c:ef:ca:75:c4:06:f0:cc:e2:bf:c9:8d:f9:
                    82:33:49:e1:d2:80:7c:0c:17:b8:ca:d3:5c:67:cc:
                    56:c5:96:95:ea:e1:91:a1:21:90:e5:66:00:e9:88:
                    87:5c:01:28:e5:03:cd:6e:ba:79:47:7d:d6:54:b4:
                    14:db:cd:09:82:16:47:2a:1e:7a:70:de:e6:98:8c:
                    59:7a:aa:3c:e7:87:d2:05:90:93:d5:33:62:13:c6:
                    b6:0c:97:36:db:19:da:17:9a:32:a4:00:9d:52:f3:
                    bf:64:1d:74:02:45:6a:24:5d:3b:79:18:8b:62:55:
                    32:c0:17:ab:ed:82:bc:63:68:cc:00:01:91:0e:52:
                    33:dd:f7:78:1e:43:20:75:ae:de:44:8b:7c:36:79:
                    e4:16:20:0f:6d:c8:76:e6:9b:be:72:96:1b:c5:82:
                    1b:5a:45:54:45:b6:d3:df:66:68:8c:60:8d:21:16:
                    5f:33:c4:20:e7:3c:f7:54:96:2d:36:75:73:86:d6:
                    97:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D7:0A:4C:30:2B:51:1B:0F:41:65:69:8F:7C:CE:5B:75:4F:39:2E
            X509v3 Authority Key Identifier:
                keyid:D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/D525D9EE7E9311F19E24FC4D5FA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:d5:6f:3f:80:d2:26:13:b5:7b:0d:e4:e8:e1:9c:45:52:2e:
         7e:0f:60:2b:13:43:ad:ee:b7:bc:4c:1a:3b:25:5e:6a:4c:f5:
         05:da:fd:36:0f:00:fc:03:ce:74:22:91:8b:55:60:51:68:9a:
         8c:10:99:64:ff:62:6c:f7:7c:06:62:c9:31:3a:eb:28:e8:21:
         a2:34:9c:18:8b:c4:98:91:be:b4:12:40:0e:e0:91:5a:99:e9:
         a1:05:77:b7:5b:53:c0:c3:0f:22:e9:a1:db:4b:95:31:f5:72:
         37:95:32:eb:2d:97:40:09:a1:1e:2c:ff:51:94:f1:96:ac:45:
         40:9d:09:3b:73:83:e6:05:ad:cc:fe:d0:1c:2d:d8:82:52:aa:
         e4:31:f6:81:e8:60:2c:4b:77:0b:3a:66:58:49:65:3f:c9:39:
         b2:07:b3:0f:ce:c0:42:46:2e:77:86:d8:48:56:4d:34:46:c6:
         c3:02:b6:34:32:97:3e:51:26:01:4c:14:f2:8a:23:e1:f1:c2:
         90:12:dc:d0:cd:05:fe:72:30:f3:56:9f:87:07:99:dc:cb:8d:
         8f:55:36:cb:40:0f:ba:46:59:fc:19:61:a3:e9:c4:d1:46:15:
         f0:d8:fb:7e:99:db:5c:bd:92:84:18:40:8b:2d:09:cb:73:3e:
         58:1d:6b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:28:53 2026 by rpki-client