Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/77D3D4A0FEDA11F0AB7A7279726F56BC.roa
File:                     77D3D4A0FEDA11F0AB7A7279726F56BC.roa (raw, json)
Hash identifier:          z4df9qxfsJlw9+LwQG0cL2IK+8R1mz7/tID8rumGlI0=
Subject key identifier:   32:5C:53:A4:51:72:1D:11:98:BF:EF:D7:A1:9E:A2:95:B8:02:7F:03
Certificate issuer:       /CN=A91E0855/serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
Certificate serial:       0135
Authority key identifier: D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/77D3D4A0FEDA11F0AB7A7279726F56BC.roa
Signing time:             Sat 31 Jan 2026 19:24:31 +0000
ROA not before:           Sat 31 Jan 2026 19:24:31 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135682
IP address blocks:        160.25.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl
                          rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 03:59:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0855, serialNumber=D32A5ADC0542C2E817C202BE6B7281E869D17897
        Validity
            Not Before: Jan 31 19:24:31 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=697e56ef-d3bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:85:af:2b:ee:bb:77:48:e5:42:70:4f:04:
                    3e:d1:2d:16:77:aa:cd:8d:cc:89:8e:7b:3a:16:1f:
                    0a:57:cd:46:44:37:2d:67:12:ce:b7:76:b3:46:9c:
                    e4:e7:03:a1:b8:4c:4c:79:d6:fe:bf:d1:f2:8f:08:
                    49:aa:c3:72:41:5c:a5:3c:bb:2e:f0:a0:f7:4d:45:
                    ac:71:73:9b:aa:8c:ee:45:85:bf:eb:64:40:dd:6f:
                    24:35:da:00:da:5b:83:41:0e:62:55:ed:8e:f8:34:
                    d1:1e:8d:9a:4c:04:aa:75:a8:ed:bb:6b:eb:24:44:
                    f0:ac:a3:67:4d:3b:72:fa:3c:ee:06:1f:ac:35:e8:
                    0b:51:2c:52:ac:be:ff:31:0c:e0:11:de:a6:4f:d5:
                    aa:f8:26:a1:8d:91:74:e8:8b:24:42:0a:36:52:e5:
                    14:e4:6b:e4:dc:20:fe:51:ec:8d:e3:81:cc:62:d2:
                    64:5e:45:be:d2:7b:22:6d:50:5c:7a:f7:6d:89:b1:
                    3d:f4:45:53:4e:c2:e1:99:6d:1f:be:87:f2:42:df:
                    61:ef:4c:5c:9e:56:fb:7f:f9:0b:d7:a9:9a:0f:db:
                    49:59:75:11:91:03:37:db:f2:33:b7:01:c3:2c:ee:
                    69:6a:3d:5d:0c:43:be:3c:ec:d6:5a:e7:f8:98:3c:
                    58:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5C:53:A4:51:72:1D:11:98:BF:EF:D7:A1:9E:A2:95:B8:02:7F:03
            X509v3 Authority Key Identifier:
                keyid:D3:2A:5A:DC:05:42:C2:E8:17:C2:02:BE:6B:72:81:E8:69:D1:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/0ypa3AVCwugXwgK-a3KB6GnReJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0ypa3AVCwugXwgK-a3KB6GnReJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/504CFFE2449611EF8E84E63DC4F9AE02/77D3D4A0FEDA11F0AB7A7279726F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:0b:13:7d:1d:f4:d9:d0:ba:d2:55:35:b9:0d:8d:72:e8:10:
         1c:7a:46:6e:fc:3f:2d:5f:e0:24:12:96:74:58:58:db:af:64:
         db:a1:be:f4:e8:25:2b:90:3a:48:84:43:d1:f3:df:f8:ab:49:
         73:37:91:88:e6:42:f8:8e:52:4b:5d:5d:1c:e5:c0:0c:9d:f5:
         03:cf:61:a0:bd:40:5e:cb:eb:ec:0b:26:b1:02:9b:d5:7f:ae:
         0a:e5:a0:f9:c1:ce:27:b7:9b:41:07:53:a0:31:54:1a:70:d5:
         c8:6f:a2:5f:b8:8b:42:d0:cc:97:78:f0:72:ef:77:7e:b2:64:
         4b:39:c6:b7:70:d0:cb:d4:a5:f7:f0:ae:aa:8c:6a:45:8e:26:
         3e:3d:9c:1e:23:fa:7e:7e:24:14:dd:30:9b:37:c6:94:31:e3:
         6a:d0:a2:97:f2:c0:ad:cd:3e:60:1b:3b:09:0e:01:39:5d:fc:
         0d:36:0f:bc:46:7a:ee:23:d0:3e:00:ed:8b:f9:64:41:64:35:
         91:a7:1d:58:0f:ec:aa:c7:2e:6f:3e:2c:29:3a:98:d7:be:60:
         f6:3f:a2:8d:df:8d:3a:dc:23:cf:fb:eb:73:02:31:33:2b:9b:
         a3:ab:17:30:40:85:25:12:e1:da:0c:0f:99:f4:31:6d:f7:26:
         2c:f0:c1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:41:18 2026 by rpki-client