Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/76D77AC4DEE211F08292771D536F56BC.roa
File:                     76D77AC4DEE211F08292771D536F56BC.roa (raw, json)
Hash identifier:          eJBqhqLmKG6Wh8NrxsK8kvyZ5MousUNeQkGcMFw/q2c=
Subject key identifier:   76:B7:26:67:73:6B:18:07:B3:CA:C0:A5:E7:6C:8C:60:1B:DF:21:C8
Certificate issuer:       /CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
Certificate serial:       013E
Authority key identifier: 82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/76D77AC4DEE211F08292771D536F56BC.roa
Signing time:             Sun 01 Mar 2026 15:22:47 +0000
ROA not before:           Mon 22 Dec 2025 03:01:09 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     20473
IP address blocks:        45.121.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:09:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C55CE, serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
        Validity
            Not Before: Dec 22 03:01:09 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a459c7-d7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:65:7c:10:e4:71:81:65:41:41:83:01:09:fd:
                    d0:42:99:87:45:95:90:50:a9:e5:3c:d4:dd:3a:e4:
                    fb:91:28:2f:47:e4:80:1e:5b:ed:80:e0:08:32:7e:
                    9e:2a:03:5e:e8:d7:2d:4d:12:3c:4b:e7:bd:87:3d:
                    d2:ef:30:07:2a:56:68:70:79:e4:39:9a:a3:dd:87:
                    2b:5c:c1:3a:32:95:09:6f:fc:d0:e1:f9:59:8e:a5:
                    2a:4d:ab:d3:b6:e8:1e:fb:da:98:45:f2:cd:b1:95:
                    a6:fa:ef:69:f6:08:a4:4e:f6:43:fd:87:9f:24:bd:
                    94:8c:42:9c:7d:c1:e9:97:b3:bd:9b:00:12:6e:7d:
                    37:e9:83:9d:63:a7:3a:93:0a:db:11:39:ab:c6:04:
                    74:f9:db:bc:c0:46:7f:8e:66:ea:98:e0:3f:26:8e:
                    3e:74:3e:06:87:9b:e7:9c:54:a6:61:e3:ce:55:85:
                    25:72:92:0a:ef:c6:dd:cf:72:5f:bb:cd:65:5e:5a:
                    66:3f:a9:19:f6:7a:75:4c:39:73:f5:bc:45:37:cf:
                    fe:d2:18:2d:d9:9d:37:c0:9c:89:80:cc:7a:00:cf:
                    10:d7:e0:ce:7b:22:00:a1:45:31:eb:73:14:02:4e:
                    10:ce:26:4b:cf:b7:7c:da:f2:f9:1b:7b:3c:02:8b:
                    4a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B7:26:67:73:6B:18:07:B3:CA:C0:A5:E7:6C:8C:60:1B:DF:21:C8
            X509v3 Authority Key Identifier:
                keyid:82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/76D77AC4DEE211F08292771D536F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.121.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:5a:4e:f1:a7:f6:b5:7c:b2:a8:af:0e:37:db:fa:dc:d2:92:
         b4:c4:3c:55:17:e3:9a:c2:d4:cd:9d:ae:75:de:71:88:e9:9d:
         1c:8b:c2:1e:30:e6:aa:e3:9a:b8:e3:82:22:7e:88:aa:4d:be:
         3d:9a:79:eb:d0:12:35:75:54:a8:45:57:ff:b4:2d:46:14:18:
         01:73:68:78:24:fc:92:81:74:3c:42:5b:0a:28:4b:96:3f:41:
         e4:8b:a6:2c:9f:ae:1e:b7:33:1b:ab:5f:ec:52:3b:f1:d1:0c:
         76:42:0f:78:e5:4b:39:da:57:8c:51:9a:8b:ec:d1:81:b7:4c:
         57:32:b8:66:7c:b7:63:1a:c0:9e:30:57:94:ce:9b:80:07:0a:
         9b:19:8f:a1:f2:66:ec:c7:98:47:2e:bc:79:aa:53:c5:d6:40:
         2b:b6:9f:63:92:55:9d:78:ea:70:58:90:6b:9e:37:90:20:b4:
         5b:3e:fe:67:44:69:75:1f:65:69:43:87:a5:59:e4:bb:e3:c2:
         84:af:59:77:c7:bf:18:60:90:01:fc:b4:aa:2b:81:00:b4:d0:
         7e:85:a8:14:a1:1d:ef:75:5d:f8:7a:f7:68:79:a6:db:cd:03:
         db:a5:cc:9b:69:e8:5f:46:3b:86:a2:23:ec:c7:9f:92:f9:a1:
         bd:49:d1:d7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzU1Q0UxMTAvBgNVBAUTKDgyOEE0N0QzQUM2RTZCMDM2MDExQzIzMzIzMTcwQTk3
MzFCQUQyMjQwHhcNMjUxMjIyMDMwMTA5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTljNy1kN2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm2V8EORxgWVBQYMBCf3QQpmHRZWQUKnlPNTdOuT7kSgvR+SAHlvtgOAIMn6e
KgNe6NctTRI8S+e9hz3S7zAHKlZocHnkOZqj3YcrXME6MpUJb/zQ4flZjqUqTavT
tuge+9qYRfLNsZWm+u9p9gikTvZD/YefJL2UjEKcfcHpl7O9mwASbn036YOdY6c6
kwrbETmrxgR0+du8wEZ/jmbqmOA/Jo4+dD4Gh5vnnFSmYePOVYUlcpIK78bdz3Jf
u81lXlpmP6kZ9np1TDlz9bxFN8/+0hgt2Z03wJyJgMx6AM8Q1+DOeyIAoUUx63MU
Ak4QziZLz7d82vL5G3s8AotKUwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHa3Jmdz
axgHs8rApedsjGAb3yHIMB8GA1UdIwQYMBaAFIKKR9OsbmsDYBHCMyMXCpcxutIk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTVDRS80NTFBODIzQThC
N0IxMUVGODI5MDMyN0ZDNEY5QUUwMi9nb3BIMDZ4dWF3TmdFY0l6SXhjS2x6RzYw
aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dvcEgwNnh1YXdOZ0VjSXpJeGNLbHpHNjBpUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzU1Q0UvNDUxQTgyM0E4QjdCMTFFRjgyOTAzMjdGQzRGOUFFMDIvNzZENzdBQzRE
RUUyMTFGMDgyOTI3NzFENTM2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQALXnXMA0GCSqGSIb3DQEBCwUAA4IBAQCcWk7xp/a1fLKorw432/rc
0pK0xDxVF+OawtTNna513nGI6Z0ci8IeMOaq45q444IifoiqTb49mnnr0BI1dVSo
RVf/tC1GFBgBc2h4JPySgXQ8QlsKKEuWP0Hki6Ysn64etzMbq1/sUjvx0Qx2Qg94
5Us52leMUZqL7NGBt0xXMrhmfLdjGsCeMFeUzpuABwqbGY+h8mbsx5hHLrx5qlPF
1kArtp9jklWdeOpwWJBrnjeQILRbPv5nRGl1H2VpQ4elWeS748KEr1l3x78YYJAB
/LSqK4EAtNB+hagUoR3vdV34evdoeabbzQPbpcybaehfRjuGoiPsx5+S+aG9SdHX
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:39 2026 by rpki-client