Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/77CB8C6CBD9911ED86363B7AC4F9AE02.roa
File:                     77CB8C6CBD9911ED86363B7AC4F9AE02.roa (raw, json)
Hash identifier:          tJJ3ttdH7S3OYNjDPkqoa0z/UMLsdz/MnlboneFuOes=
Subject key identifier:   E9:D1:DE:00:32:9B:6C:67:BB:97:73:B5:E1:93:18:0F:E7:0A:CA:0C
Certificate issuer:       /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial:       086B
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/77CB8C6CBD9911ED86363B7AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:24:45 +0000
ROA not before:           Wed 02 Jul 2025 22:31:18 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     200017
IP address blocks:        45.114.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
                          rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2155 (0x86b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
        Validity
            Not Before: Jul  2 22:31:18 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4846c-5d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:7b:0e:5b:be:4b:fb:c3:5c:e2:50:f4:60:d5:
                    8d:be:85:62:5e:c8:d5:72:76:d3:1e:c2:7a:6e:1c:
                    3f:9d:76:4f:1e:d6:3f:b6:45:04:ce:21:20:e5:4c:
                    04:08:30:df:65:8b:f9:10:a6:da:b4:cf:ad:d7:44:
                    d5:f9:80:bc:ec:5a:05:7c:7d:8a:db:c3:8d:9d:7e:
                    66:a1:2b:a0:0d:13:c1:9d:67:09:89:0f:e8:de:b5:
                    dc:e1:00:f7:a5:49:2c:6b:76:f9:2b:0e:aa:c2:ba:
                    a4:fd:12:2f:37:20:d3:83:ae:52:ae:bf:31:92:d8:
                    87:21:73:22:25:09:74:dd:7e:34:e4:2c:f7:46:92:
                    b0:21:f0:f6:44:5c:7f:c1:5f:e1:46:a9:5b:e1:a7:
                    4f:a2:68:79:f1:fa:a6:8a:fc:8a:5c:61:87:aa:3d:
                    0d:d2:22:ab:fd:2d:79:54:8e:a4:4d:58:d1:93:48:
                    f0:37:60:66:01:1c:c7:c2:f2:59:f3:bd:df:54:cb:
                    ac:51:c3:dd:ae:ae:47:25:5f:0a:c0:49:b1:39:b5:
                    25:2c:22:9b:d2:54:c6:46:4e:0b:f8:ad:4a:3f:cf:
                    9b:26:04:f3:81:91:49:c1:ef:3a:9d:a0:bd:7c:56:
                    97:6e:89:37:ae:48:3c:a3:5a:4e:e3:81:11:58:05:
                    af:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D1:DE:00:32:9B:6C:67:BB:97:73:B5:E1:93:18:0F:E7:0A:CA:0C
            X509v3 Authority Key Identifier:
                keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/77CB8C6CBD9911ED86363B7AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.114.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:c1:1c:f9:74:48:57:c8:b0:02:45:93:fc:4e:2d:89:d9:14:
         76:7e:4a:ed:cd:75:b1:9a:6e:56:5b:1c:79:3b:e5:7e:c4:ae:
         10:e5:51:be:05:91:fd:d5:4c:90:97:fa:7f:62:56:5a:96:bb:
         17:04:a0:c6:5b:4a:85:df:81:1e:c2:fe:39:76:6b:4d:d7:f1:
         19:0a:f1:fd:cc:30:58:55:af:12:9f:06:bc:7c:25:be:3c:36:
         8c:d4:30:b1:62:77:1f:e5:be:15:c4:31:78:ac:47:0f:a3:5d:
         d3:f8:ee:07:30:82:f1:b5:24:9a:05:f1:59:0e:9f:50:e3:ac:
         b8:18:05:55:5d:1a:c1:d5:9a:dc:01:38:bc:c7:53:f2:ac:1c:
         10:24:b1:8b:7d:b7:e9:3c:b5:96:79:cb:48:6d:a0:ba:4f:97:
         66:cd:03:e6:64:01:7a:9a:9a:f3:19:6a:be:67:47:c3:d7:72:
         a0:73:f9:bb:1f:17:b5:6f:01:61:ac:78:71:72:f8:05:bd:64:
         bc:0f:fb:17:a4:d7:05:07:23:fa:fa:ed:2a:bd:87:c6:0d:19:
         75:54:19:a1:28:00:0e:ef:38:aa:c5:b2:89:e5:aa:d4:ba:d6:
         31:52:e2:a6:d2:de:ad:c5:bc:b6:6b:05:2f:06:72:ed:ea:5e:
         1d:31:6f:78
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0
QUYzNDA1RTkwHhcNMjUwNzAyMjIzMTE4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODQ2Yy01ZDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9XsOW75L+8Nc4lD0YNWNvoViXsjVcnbTHsJ6bhw/nXZPHtY/tkUEziEg5UwE
CDDfZYv5EKbatM+t10TV+YC87FoFfH2K28ONnX5moSugDRPBnWcJiQ/o3rXc4QD3
pUksa3b5Kw6qwrqk/RIvNyDTg65Srr8xktiHIXMiJQl03X405Cz3RpKwIfD2RFx/
wV/hRqlb4adPomh58fqmivyKXGGHqj0N0iKr/S15VI6kTVjRk0jwN2BmARzHwvJZ
873fVMusUcPdrq5HJV8KwEmxObUlLCKb0lTGRk4L+K1KP8+bJgTzgZFJwe86naC9
fFaXbok3rkg8o1pO44ERWAWvZwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOnR3gAy
m2xnu5dzteGTGA/nCsoMMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1
QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC
ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQwRDIvNTkzN0Q0M0UzNUFEMTFFQjgxRUVBRDEyQzRGOUFFMDIvNzdDQjhDNkNC
RDk5MTFFRDg2MzYzQjdBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQALXK/MA0GCSqGSIb3DQEBCwUAA4IBAQCiwRz5dEhXyLACRZP8Ti2J
2RR2fkrtzXWxmm5WWxx5O+V+xK4Q5VG+BZH91UyQl/p/YlZalrsXBKDGW0qF34Ee
wv45dmtN1/EZCvH9zDBYVa8Snwa8fCW+PDaM1DCxYncf5b4VxDF4rEcPo13T+O4H
MILxtSSaBfFZDp9Q46y4GAVVXRrB1ZrcATi8x1PyrBwQJLGLfbfpPLWWectIbaC6
T5dmzQPmZAF6mprzGWq+Z0fD13Kgc/m7Hxe1bwFhrHhxcvgFvWS8D/sXpNcFByP6
+u0qvYfGDRl1VBmhKAAO7ziqxbKJ5arUutYxUuKm0t6txby2awUvBnLt6l4dMW94
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:46 2026 by rpki-client