Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/1149FE16984211F0B5591074C4F9AE02.roa
File:                     1149FE16984211F0B5591074C4F9AE02.roa (raw, json)
Hash identifier:          LsrfohQQqBt1OXduUHyIG+bruizijWoUQfCjHYmeZgg=
Subject key identifier:   B2:DA:1E:58:BE:B2:0D:67:B1:4C:D5:D1:CD:35:15:0C:45:77:2F:3E
Certificate issuer:       /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208
Certificate serial:       2885
Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/1149FE16984211F0B5591074C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:53:15 +0000
ROA not before:           Sun 14 Dec 2025 15:32:54 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     134356
IP address blocks:        183.177.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl
                          rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10373 (0x2885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4B25, serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208
        Validity
            Not Before: Dec 14 15:32:54 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a460ea-3278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:83:2b:cd:30:6f:1d:dc:42:01:ef:6e:37:61:
                    de:78:94:27:2a:d6:92:6a:de:0b:36:c8:8d:ee:a0:
                    1b:21:3f:03:74:c7:20:9a:1a:fd:51:e9:72:11:be:
                    ca:a5:da:9f:20:5d:c4:18:32:49:04:6f:f6:3d:82:
                    00:70:08:e2:c1:b7:fb:b0:19:d3:19:37:68:b8:52:
                    ec:b5:b8:63:f1:5e:4a:5d:f9:0d:90:dd:78:2a:3a:
                    e5:1a:a5:39:08:97:58:09:54:ba:8d:61:17:1d:b7:
                    2e:dd:06:ef:a7:5c:a5:86:8a:06:c1:64:a6:62:80:
                    c3:b5:36:8e:a5:3a:7c:b3:9f:53:62:f6:bc:37:fb:
                    59:7f:57:41:29:4a:78:f9:1a:93:7c:a1:c8:d6:29:
                    94:82:84:88:91:3d:57:72:44:97:2e:6d:55:4f:f1:
                    a2:4d:eb:d5:b2:ff:6d:5c:67:4e:70:fc:e1:6b:95:
                    dd:63:dc:c5:42:9a:5c:fb:79:57:ec:16:92:ad:c0:
                    fa:6d:c7:03:b3:9c:91:da:3a:4f:b2:12:5c:3a:ed:
                    f9:ea:51:df:10:a9:74:f2:13:1a:a9:9d:68:11:05:
                    cd:21:2d:3a:fd:24:e3:61:36:e7:4e:0c:e2:a2:78:
                    42:71:15:a8:79:6e:e6:ff:a8:42:96:20:32:b9:b2:
                    aa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DA:1E:58:BE:B2:0D:67:B1:4C:D5:D1:CD:35:15:0C:45:77:2F:3E
            X509v3 Authority Key Identifier:
                keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/1149FE16984211F0B5591074C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.177.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:ba:94:5e:12:bb:93:96:0f:82:eb:48:4a:2a:0c:c7:4c:31:
         2a:67:51:18:b1:48:ff:75:4e:21:54:d3:a9:4a:09:d1:06:2f:
         9a:84:36:fe:ce:e0:38:c4:5c:af:76:a4:1e:df:55:10:70:62:
         28:d5:1b:69:d8:cb:1a:cb:c8:b8:9d:0c:f3:60:a0:f3:9c:ac:
         7b:46:26:d1:31:53:88:a7:b2:4c:bd:62:92:90:b5:ac:a6:0b:
         23:82:8d:f7:38:2b:86:f3:3d:d5:06:20:38:4a:70:c9:c2:f5:
         65:ac:7b:fd:36:be:e0:c3:d6:aa:34:da:fa:2e:3d:22:0d:be:
         e3:b1:38:b0:f8:97:5d:76:df:6d:c5:fd:b7:46:84:7a:46:4e:
         8b:fd:76:8c:34:ab:e5:4e:1c:b7:60:01:d8:c0:3e:9b:36:21:
         5d:63:00:33:56:88:d8:0b:c1:c3:fe:d4:29:37:34:49:6a:c7:
         1e:f4:07:f0:ec:94:3c:08:69:cc:5f:9e:d6:46:f0:22:49:43:
         cf:59:2a:86:dc:57:f7:a1:c4:d4:8b:58:45:e4:46:8f:ac:bf:
         26:0c:cf:ed:98:4c:66:a2:ed:ae:41:06:11:7b:7f:e9:3c:55:
         74:8f:69:02:32:d6:15:bb:d7:40:cd:07:0b:01:04:12:3b:95:
         a0:27:9b:1f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICKIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjRCMjUxMTAvBgNVBAUTKEI2MkJERjc0QzEzMzk0MkJCRUY3Nzc1NEM3QTBFNTM4
NjYzODMyMDgwHhcNMjUxMjE0MTUzMjU0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjBlYS0zMjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzIMrzTBvHdxCAe9uN2HeeJQnKtaSat4LNsiN7qAbIT8DdMcgmhr9UelyEb7K
pdqfIF3EGDJJBG/2PYIAcAjiwbf7sBnTGTdouFLstbhj8V5KXfkNkN14KjrlGqU5
CJdYCVS6jWEXHbcu3Qbvp1ylhooGwWSmYoDDtTaOpTp8s59TYva8N/tZf1dBKUp4
+RqTfKHI1imUgoSIkT1XckSXLm1VT/GiTevVsv9tXGdOcPzha5XdY9zFQppc+3lX
7BaSrcD6bccDs5yR2jpPshJcOu356lHfEKl08hMaqZ1oEQXNIS06/STjYTbnTgzi
onhCcRWoeW7m/6hCliAyubKq4wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLLaHli+
sg1nsUzV0c01FQxFdy8+MB8GA1UdIwQYMBaAFLYr33TBM5Qrvvd3VMeg5ThmODII
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIyNS9CMjFBNTcyODlG
OTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxDdS05M2RVeDZEbE9HWTRN
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RpdmZkTUV6bEN1LTkzZFV4NkRsT0dZNE1nZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjRCMjUvQjIxQTU3Mjg5RjkyMTFFNDlERUZFMjE2QzRGOUFFMDIvMTE0OUZFMTY5
ODQyMTFGMEI1NTkxMDc0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAt7FuMA0GCSqGSIb3DQEBCwUAA4IBAQCBupReEruTlg+C60hKKgzH
TDEqZ1EYsUj/dU4hVNOpSgnRBi+ahDb+zuA4xFyvdqQe31UQcGIo1Rtp2Msay8i4
nQzzYKDznKx7RibRMVOIp7JMvWKSkLWspgsjgo33OCuG8z3VBiA4SnDJwvVlrHv9
Nr7gw9aqNNr6Lj0iDb7jsTiw+Jdddt9txf23RoR6Rk6L/XaMNKvlThy3YAHYwD6b
NiFdYwAzVojYC8HD/tQpNzRJasce9Afw7JQ8CGnMX57WRvAiSUPPWSqG3Ff3ocTU
i1hF5EaPrL8mDM/tmExmou2uQQYRe3/pPFV0j2kCMtYVu9dAzQcLAQQSO5WgJ5sf
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:07 2026 by rpki-client