Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/77E54B78C45111EF9D399128C4F9AE02.roa
File:                     77E54B78C45111EF9D399128C4F9AE02.roa (raw, json)
Hash identifier:          JwFEBQDBS2XvD+XrlUfnJ9Rr/0S0seAaVJadWlIPqzs=
Subject key identifier:   F4:FD:F8:20:60:BB:8B:D9:3E:F8:86:1E:61:AC:25:BE:B0:0E:87:5D
Certificate issuer:       /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32
Certificate serial:       01DD
Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/77E54B78C45111EF9D399128C4F9AE02.roa
Signing time:             Sat 01 Aug 2026 05:54:30 +0000
ROA not before:           Sat 01 Aug 2026 05:54:30 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     151349
IP address blocks:        160.20.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl
                          rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Aug 2026 03:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32
        Validity
            Not Before: Aug  1 05:54:30 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a6d8a16-10b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8a:9f:a0:fe:0b:a4:42:f3:3b:41:41:eb:53:
                    1a:1e:0e:bc:30:94:b9:85:01:5d:c1:bf:42:dc:99:
                    ab:9e:d2:8a:c6:41:13:76:2a:08:f5:63:90:7a:76:
                    55:1c:9f:ff:48:7c:45:5a:9c:6b:8f:29:29:5e:49:
                    73:16:6f:44:2e:93:3e:64:27:cb:f1:4b:9d:cd:e0:
                    88:07:37:32:93:4e:7a:b5:87:75:fb:4f:a9:bf:76:
                    7b:f6:3a:c2:29:87:d6:4e:9c:e7:8a:b6:fd:0c:5d:
                    f3:d7:98:19:76:85:83:46:37:a3:5d:cc:55:47:01:
                    9e:71:4a:10:3e:18:3e:96:14:24:b4:2b:63:42:d6:
                    9c:3f:7b:8c:09:a7:06:1a:4f:70:5c:88:42:fa:25:
                    61:dc:57:93:79:f3:ca:c7:56:7a:54:e6:7c:ca:35:
                    d7:75:ef:f4:ed:81:3c:6f:45:c2:2d:82:cb:cb:2d:
                    3f:24:37:46:d5:58:c0:6a:72:c3:80:0d:f5:8d:a5:
                    63:3f:68:c2:6e:ec:f6:c9:21:d2:43:93:1c:37:ec:
                    24:86:b0:40:d1:b1:b1:8e:ad:66:56:f3:59:5e:dd:
                    23:f8:df:3d:c1:40:df:ac:ac:d0:1d:56:67:7f:35:
                    9b:83:d9:32:94:4b:a2:bb:2a:3d:21:9e:24:af:82:
                    fb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FD:F8:20:60:BB:8B:D9:3E:F8:86:1E:61:AC:25:BE:B0:0E:87:5D
            X509v3 Authority Key Identifier:
                keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/77E54B78C45111EF9D399128C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:45:0a:a4:e0:b6:82:a9:6f:b4:b8:5b:92:6f:e7:06:f9:36:
         74:15:74:2f:70:8c:3c:0e:87:e7:51:3c:77:82:66:1c:9e:b0:
         c9:f8:f2:04:82:52:a5:79:a5:a7:e4:7e:cd:75:25:89:b7:bf:
         44:63:84:e0:0f:72:8c:70:c1:a2:eb:47:69:2d:55:93:ab:5e:
         cd:ed:e1:45:23:39:62:dc:de:5a:dc:a9:6d:36:0c:13:f8:3a:
         94:77:ce:5b:af:76:51:8a:27:8a:25:c2:74:3c:38:28:21:0a:
         7e:ed:92:d2:d4:f1:9f:5a:3f:58:bc:27:e4:cb:2e:f6:0b:b6:
         13:14:c7:bc:78:78:ba:db:66:bd:49:cf:1b:de:0d:0a:63:da:
         c4:76:92:3e:91:23:51:9e:33:05:59:78:5c:bc:4c:69:9e:03:
         b1:28:53:69:83:55:ea:c7:9b:17:b2:29:b9:70:c3:43:f5:5c:
         3e:2b:a3:02:d7:62:6a:9e:9b:5b:0c:14:1e:17:6e:f9:60:5e:
         c0:d3:30:38:f9:3d:ac:b7:09:bc:a4:d9:72:c8:70:e3:88:b9:
         64:bb:b8:23:d4:b0:5a:c9:fb:37:0e:c8:b6:66:ce:f8:e4:00:
         5b:89:75:ed:c3:7c:34:67:86:57:64:f3:a5:a1:d5:72:67:63:
         b9:dc:ca:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 10:05:38 2026 by rpki-client