Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/2FD77F7E621511F09070587CC4F9AE02.roa
File:                     2FD77F7E621511F09070587CC4F9AE02.roa (raw, json)
Hash identifier:          ZIVHyn4HDYxvTrf1jI6tJxVlx+GuNfOvlQ+9Flv3lLA=
Subject key identifier:   92:6F:BF:50:DE:39:16:4C:51:DB:34:74:24:04:80:03:81:11:91:C7
Certificate issuer:       /CN=A91F5756/serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
Certificate serial:       7C
Authority key identifier: 40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/2FD77F7E621511F09070587CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:06:15 +0000
ROA not before:           Wed 03 Sep 2025 08:38:10 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     140666
IP address blocks:        160.187.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl
                          rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5756, serialNumber=401D8BDC82A32448C93BA3A0FE93AF10642362A2
        Validity
            Not Before: Sep  3 08:38:10 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a59957-5523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:02:69:06:da:38:67:b1:21:05:5e:3c:4a:a3:
                    cb:f6:01:29:ed:25:7c:07:a2:28:36:e6:d1:ff:87:
                    db:ae:8d:fb:b2:7b:66:90:fe:b3:ac:1f:a1:5c:67:
                    43:13:50:39:91:68:2c:ff:3a:07:a3:d0:98:3f:6d:
                    aa:2c:5c:d7:42:55:51:5f:a4:c8:88:f5:f7:c4:cb:
                    9a:73:59:fe:e7:e8:19:c3:7b:8a:88:cb:5f:54:a9:
                    37:e3:7c:8e:5c:bb:6a:0d:4a:97:4b:ac:58:a2:5d:
                    3b:88:e8:be:d1:20:14:86:b2:33:05:aa:1b:fd:65:
                    73:2c:68:7a:9e:ed:25:e1:4d:70:18:90:53:06:93:
                    d4:bc:bc:7a:6d:31:77:9a:ce:20:54:01:d3:df:2c:
                    87:7d:a9:bc:e9:5d:b7:87:f1:8c:23:d0:35:11:d4:
                    32:7b:ae:2d:30:5d:d4:78:c7:03:b1:e5:f2:c2:97:
                    81:83:27:46:4a:86:a9:2b:80:5b:b9:28:b7:6b:13:
                    0f:9c:3d:de:1b:a8:e6:6d:b2:dc:21:7f:f6:ef:e7:
                    a2:d2:8e:99:8a:5a:a0:c2:fa:0a:76:47:83:76:8a:
                    f0:0b:a7:bb:54:af:0f:ca:34:db:27:02:e5:8f:03:
                    c1:56:05:d3:26:9d:6d:4d:f5:77:2d:da:aa:32:7a:
                    a6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6F:BF:50:DE:39:16:4C:51:DB:34:74:24:04:80:03:81:11:91:C7
            X509v3 Authority Key Identifier:
                keyid:40:1D:8B:DC:82:A3:24:48:C9:3B:A3:A0:FE:93:AF:10:64:23:62:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/QB2L3IKjJEjJO6Og_pOvEGQjYqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QB2L3IKjJEjJO6Og_pOvEGQjYqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/6B727F32621211F08CA6C154C4F9AE02/2FD77F7E621511F09070587CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:49:3d:92:ee:2d:db:d5:57:c8:67:36:4b:be:41:b5:42:59:
         c2:19:f5:bf:a8:ba:fa:ac:b6:06:29:53:73:84:c2:c8:a2:77:
         c6:57:6c:56:fa:62:f2:70:4f:b6:25:fc:fc:f4:20:cb:56:41:
         12:60:26:ca:a3:67:a9:be:ed:8e:f2:67:49:15:96:72:6b:2f:
         ef:da:75:49:75:d2:62:e0:cc:57:5b:aa:df:f6:d9:24:11:2a:
         0a:03:29:1a:2d:9c:5f:6a:ec:69:dc:06:44:b7:17:b6:77:c6:
         e5:08:b0:6e:c7:14:1c:4d:24:e7:b9:0b:c2:8d:57:6b:99:97:
         b5:8e:a8:8b:01:b8:17:34:5b:e4:b5:4a:fd:90:67:67:fe:f7:
         05:97:a3:e9:66:71:d6:55:b0:2c:a0:ae:52:14:5c:b9:80:fb:
         a9:81:86:8e:da:7c:b4:80:87:ec:ba:41:6b:3e:1f:c3:82:94:
         bc:60:34:54:c1:4e:e1:7f:cc:18:37:5b:00:a6:40:91:22:5f:
         e1:72:ec:13:f4:1e:7f:94:88:e5:fb:de:af:9d:f4:4e:43:03:
         02:b8:2a:74:1c:67:d8:7f:54:d9:a8:bf:78:9e:ed:bf:01:85:
         8f:b6:86:bd:fa:fe:21:20:51:13:9b:23:9c:83:d0:99:b9:3f:
         06:f0:c0:ac
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
NTc1NjExMC8GA1UEBRMoNDAxRDhCREM4MkEzMjQ0OEM5M0JBM0EwRkU5M0FGMTA2
NDIzNjJBMjAeFw0yNTA5MDMwODM4MTBaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTU5OTU3LTU1MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCwAmkG2jhnsSEFXjxKo8v2ASntJXwHoig25tH/h9uujfuye2aQ/rOsH6FcZ0MT
UDmRaCz/Ogej0Jg/baosXNdCVVFfpMiI9ffEy5pzWf7n6BnDe4qIy19UqTfjfI5c
u2oNSpdLrFiiXTuI6L7RIBSGsjMFqhv9ZXMsaHqe7SXhTXAYkFMGk9S8vHptMXea
ziBUAdPfLId9qbzpXbeH8Ywj0DUR1DJ7ri0wXdR4xwOx5fLCl4GDJ0ZKhqkrgFu5
KLdrEw+cPd4bqOZtstwhf/bv56LSjpmKWqDC+gp2R4N2ivALp7tUrw/KNNsnAuWP
A8FWBdMmnW1N9Xct2qoyeqZRAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUkm+/UN45
FkxR2zR0JASAA4ERkccwHwYDVR0jBBgwFoAUQB2L3IKjJEjJO6Og/pOvEGQjYqIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NzU2LzZCNzI3RjMyNjIx
MjExRjA4Q0E2QzE1NEM0RjlBRTAyL1FCMkwzSUtqSkVqSk82T2dfcE92RUdRallx
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUUIyTDNJS2pKRWpKTzZPZ19wT3ZFR1FqWXFJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTc1Ni82QjcyN0YzMjYyMTIxMUYwOENBNkMxNTRDNEY5QUUwMi8yRkQ3N0Y3RTYy
MTUxMUYwOTA3MDU4N0NDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGgu4YwDQYJKoZIhvcNAQELBQADggEBAH1JPZLuLdvVV8hnNku+QbVC
WcIZ9b+ouvqstgYpU3OEwsiid8ZXbFb6YvJwT7Yl/Pz0IMtWQRJgJsqjZ6m+7Y7y
Z0kVlnJrL+/adUl10mLgzFdbqt/22SQRKgoDKRotnF9q7GncBkS3F7Z3xuUIsG7H
FBxNJOe5C8KNV2uZl7WOqIsBuBc0W+S1Sv2QZ2f+9wWXo+lmcdZVsCygrlIUXLmA
+6mBho7afLSAh+y6QWs+H8OClLxgNFTBTuF/zBg3WwCmQJEiX+Fy7BP0Hn+UiOX7
3q+d9E5DAwK4KnQcZ9h/VNmov3ie7b8BhY+2hr36/iEgURObI5yD0Jm5PwbwwKw=
-----END CERTIFICATE-----
Generated at Wed Mar 4 10:19:25 2026 by rpki-client