Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/79D30C40BABE11EB825A5D09C4F9AE02.roa
File:                     79D30C40BABE11EB825A5D09C4F9AE02.roa (raw, json)
Hash identifier:          y2QzsDAAMtUIeIRXNVIyp+738veR++Jv2+SSsvzATjs=
Subject key identifier:   D7:0C:4F:DC:38:73:E5:EC:F0:7A:7E:B4:66:52:37:B0:92:04:D6:F4
Certificate issuer:       /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial:       0804
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/79D30C40BABE11EB825A5D09C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:26:24 +0000
ROA not before:           Wed 28 Jan 2026 22:18:37 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     32787
IP address blocks:        166.81.2.0/24 maxlen: 24
                          166.81.62.0/24 maxlen: 24
                          166.81.63.0/24 maxlen: 24
                          166.81.83.0/24 maxlen: 24
                          166.81.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
                          rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2052 (0x804)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
        Validity
            Not Before: Jan 28 22:18:37 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a484d0-9f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cd:fc:65:7b:5d:71:3b:36:e5:a0:26:37:de:
                    61:e6:82:98:59:ea:2b:2e:4d:9c:47:71:39:ce:e0:
                    d6:41:3f:70:61:18:f6:91:bc:b9:38:a3:81:36:b6:
                    7b:63:81:78:71:70:0d:e5:5d:1d:d2:09:5b:0c:36:
                    46:14:71:4e:e1:99:21:3e:c2:c6:ac:2a:59:13:dc:
                    13:01:ff:15:14:5b:3d:78:6e:d7:b6:2f:8f:a2:61:
                    0f:5b:0f:eb:29:2b:9c:da:6a:73:c6:a3:96:f3:6f:
                    d1:d3:d0:d8:61:1f:c3:bb:f9:fa:84:df:70:48:c6:
                    fe:7f:a8:22:37:79:87:fa:90:35:22:f4:6b:05:63:
                    47:52:69:12:08:05:b6:4e:35:fb:7b:60:96:81:e5:
                    c0:08:1f:12:a5:5e:f3:6b:2d:a1:63:e0:3d:63:76:
                    21:2f:5f:26:3b:71:a7:e0:11:9e:93:82:9f:8e:ec:
                    de:32:22:ba:56:ec:ff:13:77:74:df:8f:a1:91:05:
                    f1:1b:83:e7:93:c2:ea:84:cf:fc:d1:df:15:a0:ef:
                    c7:89:2a:1a:8b:2b:42:5a:f9:58:bb:c1:18:f2:cd:
                    21:10:21:48:92:fe:4e:df:a9:6a:c2:24:df:aa:e4:
                    24:e2:62:2b:8d:95:11:7f:7e:94:7e:3d:a4:81:11:
                    90:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0C:4F:DC:38:73:E5:EC:F0:7A:7E:B4:66:52:37:B0:92:04:D6:F4
            X509v3 Authority Key Identifier:
                keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/79D30C40BABE11EB825A5D09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.81.2.0/24
                  166.81.62.0/23
                  166.81.83.0-166.81.84.255

    Signature Algorithm: sha256WithRSAEncryption
         08:99:1b:bf:53:7c:91:ff:89:8e:a6:33:a5:88:77:41:cf:f6:
         22:84:30:a5:79:fe:bb:17:05:c4:1c:93:ea:29:74:f2:6b:07:
         33:b7:72:09:63:1e:27:6c:89:2c:b9:33:1f:df:f7:62:49:60:
         9a:08:af:4b:40:c6:32:c2:70:77:ae:a8:d2:ce:27:79:73:aa:
         2b:9c:e8:6d:79:60:21:69:80:26:46:80:de:90:f3:91:8e:05:
         44:63:b8:15:6f:62:c4:df:56:43:5e:e6:c0:31:42:50:14:6f:
         61:5e:02:d4:90:a0:3e:6c:84:a4:2a:74:93:0e:d0:9d:a6:4e:
         e6:98:17:73:a7:50:d2:e8:3a:bc:99:5d:b8:74:b1:a4:4e:c8:
         f8:07:2b:4e:a0:8a:93:1e:47:5b:70:78:6a:1b:b6:e4:cf:54:
         7d:0a:b2:a4:cc:11:ed:70:c9:2d:04:e2:32:e1:a8:cf:22:83:
         ef:be:fd:0b:7c:62:0b:77:0b:86:83:65:73:bc:e8:16:29:87:
         14:80:85:89:6a:7a:16:8d:de:26:34:1d:e7:9e:1f:f1:25:88:
         3c:82:0b:52:83:cd:4d:96:3c:c8:37:f5:0c:c9:7b:7e:3a:d2:
         7e:e5:02:7b:87:74:f7:89:45:bb:a8:ef:20:95:ab:02:3e:44:
         a4:a0:2a:a7
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgICCAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC
MEU0OENGQTgwHhcNMjYwMTI4MjIxODM3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODRkMC05ZjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp838ZXtdcTs25aAmN95h5oKYWeorLk2cR3E5zuDWQT9wYRj2kby5OKOBNrZ7
Y4F4cXAN5V0d0glbDDZGFHFO4ZkhPsLGrCpZE9wTAf8VFFs9eG7Xti+PomEPWw/r
KSuc2mpzxqOW82/R09DYYR/Du/n6hN9wSMb+f6giN3mH+pA1IvRrBWNHUmkSCAW2
TjX7e2CWgeXACB8SpV7zay2hY+A9Y3YhL18mO3Gn4BGek4KfjuzeMiK6Vuz/E3d0
34+hkQXxG4Pnk8LqhM/80d8VoO/HiSoaiytCWvlYu8EY8s0hECFIkv5O36lqwiTf
quQk4mIrjZURf36Ufj2kgRGQHwIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFNcMT9w4
c+Xs8Hp+tGZSN7CSBNb0MB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5
M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6
NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REMzMUIvRDBFQ0NENDg4OTNEMTFFQjkxNkRGMDIyQzRGOUFFMDIvNzlEMzBDNDBC
QUJFMTFFQjgyNUE1RDA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg
BAIAATAaAwQAplECAwQBplE+MAwDBACmUVMDBACmUVQwDQYJKoZIhvcNAQELBQAD
ggEBAAiZG79TfJH/iY6mM6WId0HP9iKEMKV5/rsXBcQck+opdPJrBzO3cgljHids
iSy5Mx/f92JJYJoIr0tAxjLCcHeuqNLOJ3lzqiuc6G15YCFpgCZGgN6Q85GOBURj
uBVvYsTfVkNe5sAxQlAUb2FeAtSQoD5shKQqdJMO0J2mTuaYF3OnUNLoOryZXbh0
saROyPgHK06gipMeR1tweGobtuTPVH0KsqTMEe1wyS0E4jLhqM8ig+++/Qt8Ygt3
C4aDZXO86BYphxSAhYlqehaN3iY0HeeeH/EliDyCC1KDzU2WPMg39QzJe3460n7l
AnuHdPeJRbuo7yCVqwI+RKSgKqc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:21:33 2026 by rpki-client