Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/77E54B78C45111EF9D399128C4F9AE02.roa
File:                     77E54B78C45111EF9D399128C4F9AE02.roa (raw, json)
Hash identifier:          oaVwq+HIN/wyAwR1kQHa3lIBPfZxf93jHy5Nhtjvz8o=
Subject key identifier:   4A:68:2A:75:2A:BD:92:82:96:84:FA:7D:D4:BA:E7:6B:1A:33:B0:74
Certificate issuer:       /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32
Certificate serial:       018C
Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/77E54B78C45111EF9D399128C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:14:07 +0000
ROA not before:           Fri 01 Aug 2025 07:11:52 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     151349
IP address blocks:        160.20.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl
                          rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Mar 2026 03:55:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32
        Validity
            Not Before: Aug  1 07:11:52 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a5a93f-e050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cc:a9:f9:dd:bc:2b:a0:bc:84:8d:76:af:41:
                    0b:96:51:12:0f:34:d5:7c:82:d1:b0:b3:09:b0:c9:
                    fa:f3:b7:61:5a:c7:8f:25:97:d1:9f:18:02:ba:56:
                    89:3c:39:e3:08:ff:30:8f:9c:4f:fe:94:58:80:a7:
                    05:23:1a:cd:d9:8b:5a:35:87:86:b2:f9:60:4b:fc:
                    ab:ff:a4:eb:91:76:57:93:fa:27:e1:ff:1e:47:1a:
                    3d:5d:4a:95:2a:57:78:7f:02:e1:72:5d:ec:25:6a:
                    62:03:f4:7c:4d:04:25:7d:74:15:78:16:77:74:cc:
                    df:53:a9:59:ff:2c:b2:cb:c3:47:85:92:ea:fa:3c:
                    85:a1:d6:ac:39:d4:8c:f7:f1:8d:c2:80:9e:75:45:
                    b0:a3:6a:5b:fd:41:80:bb:4f:20:b5:e3:09:1c:06:
                    50:81:dd:81:92:e1:c0:ff:e1:82:5e:ec:4c:c7:5a:
                    b1:46:e5:cb:c2:3a:a3:d6:c4:af:9e:37:07:8d:5d:
                    d3:08:e0:9f:7d:66:82:5c:44:6f:78:b7:c0:64:47:
                    07:cd:10:ca:02:3b:6b:a1:fd:ce:19:77:99:6e:d2:
                    1f:6d:fc:a3:29:e0:a5:20:43:5f:b8:54:16:ac:fa:
                    04:91:01:67:c7:f4:ce:d8:41:b9:63:43:e0:bc:76:
                    af:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:68:2A:75:2A:BD:92:82:96:84:FA:7D:D4:BA:E7:6B:1A:33:B0:74
            X509v3 Authority Key Identifier:
                keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/77E54B78C45111EF9D399128C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:da:50:ba:3f:dc:12:90:b8:94:92:6e:bd:cc:af:0e:cc:fc:
         61:b5:a1:a0:35:cf:5c:72:2e:a8:79:8d:00:db:02:c5:35:3a:
         32:be:b3:54:cd:ec:0a:b1:b2:7d:52:b1:26:87:28:a9:54:1e:
         cb:02:40:5d:a9:54:3f:64:90:20:92:5b:58:bb:db:41:1f:18:
         04:75:80:ae:2e:e5:3e:a6:11:b7:68:98:16:4d:f4:a4:97:c2:
         65:c7:d8:3c:66:f0:30:d9:34:5c:aa:2f:38:ae:db:79:a7:2c:
         c2:a7:87:cf:42:58:c1:ab:43:6a:5c:ed:7c:cd:f2:64:2f:b7:
         85:9f:9a:5a:ff:a2:46:60:f3:a1:18:5e:59:b9:de:17:e4:9e:
         01:84:5f:d5:43:ae:90:1e:30:07:e8:14:6d:cd:a3:2e:fb:76:
         e1:29:38:35:71:d5:37:3f:71:27:20:1f:66:4b:37:1c:df:56:
         23:cf:62:02:26:84:62:41:1a:66:0f:d3:8f:93:aa:19:0e:1f:
         33:f9:a8:86:16:01:5b:dd:19:5b:8a:ef:6e:65:a9:d7:7e:81:
         0a:7b:b0:05:b8:bf:fe:09:08:fd:4f:08:56:70:15:3d:0e:2a:
         5b:6f:c2:04:71:54:f8:87:74:bd:53:86:c0:d5:a3:9b:ef:c7:
         6b:23:9f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 03:22:15 2026 by rpki-client