Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/77BB354CC1E711F0BF1FBB0DC4F9AE02.roa
File:                     77BB354CC1E711F0BF1FBB0DC4F9AE02.roa (raw, json)
Hash identifier:          S0GbV2uCmeoviSkKmr830JmB3p8jmN3VMhk4MtRUTHg=
Subject key identifier:   57:03:5C:CB:F1:C6:7A:0F:37:8D:C8:36:19:02:A5:7C:6F:95:70:4E
Certificate issuer:       /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
Certificate serial:       0176
Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/77BB354CC1E711F0BF1FBB0DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:30:07 +0000
ROA not before:           Sat 15 Nov 2025 05:53:54 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     147314
IP address blocks:        160.20.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl
                          rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91705D7, serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5
        Validity
            Not Before: Nov 15 05:53:54 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a59eef-d166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:50:1a:0e:b0:90:66:7e:9b:de:86:8b:20:f2:
                    ae:5d:36:55:93:1e:26:4a:b7:19:59:72:79:1b:f2:
                    1a:21:31:82:f0:7e:d8:cf:cf:28:5f:0b:e5:c0:08:
                    bd:b0:3c:3a:b1:39:ad:eb:8c:cc:41:9d:1f:6c:b1:
                    c9:3e:8f:20:05:3d:69:e2:7d:69:69:38:ff:8f:47:
                    8c:6b:89:0e:a2:5f:19:66:d8:30:be:d0:cc:42:86:
                    67:9d:03:b7:6b:5a:f3:b3:5f:21:46:d8:9d:95:00:
                    43:c0:e8:d9:1d:23:ab:f5:a3:0c:06:7c:bd:72:4c:
                    d9:fa:67:61:36:86:60:3d:77:d7:2f:89:62:ba:80:
                    b7:53:17:54:77:7c:8c:69:73:67:35:04:d0:e5:73:
                    dc:29:9d:ea:6d:40:0e:59:55:cf:be:44:3e:8b:92:
                    bf:b6:4a:3a:98:fc:7f:d5:27:ec:aa:0c:3c:52:1b:
                    39:39:ab:02:75:f1:90:e0:ac:d3:30:88:30:d3:45:
                    af:6e:bd:b0:b1:52:60:17:a1:a7:18:0f:78:22:6b:
                    9f:a2:6c:96:b2:f3:ee:90:b7:82:7d:6b:8e:bd:1d:
                    f3:6d:fb:6e:43:bb:3a:70:eb:fa:36:24:98:a2:9a:
                    d5:2f:58:c3:28:eb:04:1f:5d:69:a8:65:fd:ca:83:
                    5f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:03:5C:CB:F1:C6:7A:0F:37:8D:C8:36:19:02:A5:7C:6F:95:70:4E
            X509v3 Authority Key Identifier:
                keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/77BB354CC1E711F0BF1FBB0DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:1f:00:0a:f9:ba:3c:86:b1:1d:e0:9f:e2:c7:f9:96:82:ef:
         47:cc:9a:1b:84:99:6a:e5:03:0b:11:22:9b:08:9a:2b:2e:87:
         0a:93:18:3c:7f:c5:c4:03:b8:47:54:24:0a:28:37:61:46:13:
         87:ad:c8:ee:e5:dc:ba:ca:a1:ba:55:0f:b7:60:a6:c0:0e:a9:
         1d:da:e0:76:11:e7:d5:9f:43:d2:14:a0:12:05:a1:8e:14:1c:
         f3:9f:4b:54:72:a3:a3:61:e5:37:aa:e8:62:93:7a:93:fe:3d:
         5d:84:fe:0a:8a:33:3d:6f:67:ae:95:39:e9:28:11:c6:09:e4:
         04:e8:1e:cb:0f:78:d1:4e:68:96:f2:75:fe:b0:87:22:14:54:
         93:29:f3:a1:41:4a:97:36:b9:02:bd:e4:a8:d6:60:16:03:c3:
         f4:b2:d8:28:6c:a1:00:67:b3:e7:1e:0b:b0:fa:40:04:38:16:
         cd:6a:4d:8c:2c:91:f3:d9:cd:3c:c4:dd:3f:a4:26:78:ba:37:
         ef:b4:d0:da:e8:66:b3:54:1d:9f:0d:19:79:19:04:c4:ae:49:
         20:d1:6f:6b:84:b2:e8:14:92:4c:fd:ef:a8:78:95:a5:02:da:
         37:4e:4a:8d:a1:f8:b2:c8:aa:6a:90:08:14:5e:e3:b7:5a:e8:
         0f:1d:84:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:24:21 2026 by rpki-client