Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/1149FE16984211F0B5591074C4F9AE02.roa
File:                     1149FE16984211F0B5591074C4F9AE02.roa (raw, json)
Hash identifier:          fl8kEHK67RQKryz0U9mrmcAk8nUhjCtO9JFUbRGLeN0=
Subject key identifier:   89:DB:5C:CF:C7:84:37:86:10:9F:63:66:88:96:16:CD:4E:55:2C:FE
Certificate issuer:       /CN=A91F4B25/serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208
Certificate serial:       282B
Authority key identifier: B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/1149FE16984211F0B5591074C4F9AE02.roa
Signing time:             Tue 23 Sep 2025 05:56:37 +0000
ROA not before:           Tue 23 Sep 2025 05:56:37 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     134356
IP address blocks:        183.177.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl
                          rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 15:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10283 (0x282b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4B25, serialNumber=B62BDF74C133942BBEF77754C7A0E53866383208
        Validity
            Not Before: Sep 23 05:56:37 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=68d23695-f713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:93:f6:36:d1:e4:f4:70:87:2e:60:40:b1:
                    b1:07:d5:94:21:07:6a:e4:68:50:27:b6:0b:39:e5:
                    7f:49:14:5e:85:a8:ed:5f:e4:44:68:ce:2a:6c:9f:
                    8d:fd:24:45:f3:dd:0c:23:ff:f8:30:41:df:b8:49:
                    75:4f:16:05:30:d3:0b:e8:60:71:d4:53:dc:01:94:
                    06:7d:64:85:c7:6e:9b:64:c4:30:0c:ad:83:a0:bd:
                    34:fd:6b:7c:3b:8b:92:35:44:24:70:5f:89:84:01:
                    23:ae:f2:93:b8:73:70:37:7d:54:10:47:c7:d0:be:
                    25:71:a8:6f:f8:ce:45:5f:e3:15:c9:1d:e9:0e:fc:
                    5a:ae:43:f9:cb:20:6a:6e:0c:eb:a9:43:0e:74:d1:
                    2c:e9:16:80:a9:35:d3:72:1e:30:86:07:ef:32:8f:
                    e0:6d:b3:08:5a:2f:50:20:d6:04:f4:33:b3:70:ec:
                    0e:9c:28:11:67:39:12:e6:c5:75:42:01:6d:6f:12:
                    60:dd:a8:66:61:3e:73:8b:ba:93:7f:bf:92:fc:d1:
                    7f:98:2b:3e:8a:69:e9:a9:a8:ae:db:7c:b8:05:f2:
                    76:aa:71:97:87:fd:c4:6a:d8:fa:fa:dc:c4:ed:1a:
                    85:c0:66:3c:5f:1f:03:f4:4d:5b:92:d6:9e:be:41:
                    af:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DB:5C:CF:C7:84:37:86:10:9F:63:66:88:96:16:CD:4E:55:2C:FE
            X509v3 Authority Key Identifier:
                keyid:B6:2B:DF:74:C1:33:94:2B:BE:F7:77:54:C7:A0:E5:38:66:38:32:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/tivfdMEzlCu-93dUx6DlOGY4Mgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tivfdMEzlCu-93dUx6DlOGY4Mgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B25/B21A57289F9211E49DEFE216C4F9AE02/1149FE16984211F0B5591074C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.177.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:23:f1:17:30:51:72:d3:ab:0c:f5:99:11:49:7b:7b:06:4f:
         98:72:9a:8e:13:90:cc:77:04:d3:3e:f1:8d:7e:c4:9f:53:41:
         32:03:8f:5a:d1:9f:7e:2e:56:de:6b:b7:77:2a:cd:74:86:ba:
         64:c0:73:a1:1c:fc:8c:9a:c3:8c:48:88:aa:13:97:c8:af:35:
         8e:91:db:58:4d:53:bd:72:5b:ec:c9:08:d8:76:b2:78:d3:75:
         a3:5f:62:51:af:08:f4:d1:8e:78:7e:50:05:72:07:4e:e7:b4:
         14:3f:ca:46:23:b8:7c:6c:c6:fd:60:c6:db:29:e9:8c:40:7e:
         be:03:4a:b3:81:58:a7:20:98:82:42:02:97:3d:39:a5:ae:58:
         00:fc:e4:f7:db:de:23:e3:cb:00:5d:41:6d:8c:55:c0:ba:02:
         c5:37:9c:56:02:f4:54:20:b1:6a:5b:c8:06:bf:5f:48:05:6e:
         9b:ae:61:b5:bf:e4:00:e0:0a:7b:62:38:c6:05:de:8c:d6:8d:
         88:91:5d:7a:79:2f:b4:09:1f:c9:36:10:48:a4:d9:65:24:b1:
         0e:4f:71:6c:8a:24:26:ae:58:b8:fe:dc:1a:ff:2d:ce:b2:ff:
         c7:38:61:97:8e:17:05:70:92:c6:29:ad:55:0d:fa:7c:4c:61:
         5f:72:d7:36
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICKCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjRCMjUxMTAvBgNVBAUTKEI2MkJERjc0QzEzMzk0MkJCRUY3Nzc1NEM3QTBFNTM4
NjYzODMyMDgwHhcNMjUwOTIzMDU1NjM3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGQyMzY5NS1mNzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr+mT9jbR5PRwhy5gQLGxB9WUIQdq5GhQJ7YLOeV/SRRehajtX+REaM4qbJ+N
/SRF890MI//4MEHfuEl1TxYFMNML6GBx1FPcAZQGfWSFx26bZMQwDK2DoL00/Wt8
O4uSNUQkcF+JhAEjrvKTuHNwN31UEEfH0L4lcahv+M5FX+MVyR3pDvxarkP5yyBq
bgzrqUMOdNEs6RaAqTXTch4whgfvMo/gbbMIWi9QINYE9DOzcOwOnCgRZzkS5sV1
QgFtbxJg3ahmYT5zi7qTf7+S/NF/mCs+imnpqaiu23y4BfJ2qnGXh/3Eatj6+tzE
7RqFwGY8Xx8D9E1bktaevkGvgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFInbXM/H
hDeGEJ9jZoiWFs1OVSz+MB8GA1UdIwQYMBaAFLYr33TBM5Qrvvd3VMeg5ThmODII
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEIyNS9CMjFBNTcyODlG
OTIxMUU0OURFRkUyMTZDNEY5QUUwMi90aXZmZE1FemxDdS05M2RVeDZEbE9HWTRN
Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RpdmZkTUV6bEN1LTkzZFV4NkRsT0dZNE1nZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjRCMjUvQjIxQTU3Mjg5RjkyMTFFNDlERUZFMjE2QzRGOUFFMDIvMTE0OUZFMTY5
ODQyMTFGMEI1NTkxMDc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAC3sW4wDQYJKoZIhvcNAQELBQADggEBABQj8RcwUXLTqwz1
mRFJe3sGT5hymo4TkMx3BNM+8Y1+xJ9TQTIDj1rRn34uVt5rt3cqzXSGumTAc6Ec
/Iyaw4xIiKoTl8ivNY6R21hNU71yW+zJCNh2snjTdaNfYlGvCPTRjnh+UAVyB07n
tBQ/ykYjuHxsxv1gxtsp6YxAfr4DSrOBWKcgmIJCApc9OaWuWAD85Pfb3iPjywBd
QW2MVcC6AsU3nFYC9FQgsWpbyAa/X0gFbpuuYbW/5ADgCntiOMYF3ozWjYiRXXp5
L7QJH8k2EEik2WUksQ5PcWyKJCauWLj+3Br/Lc6y/8c4YZeOFwVwksYprVUN+nxM
YV9y1zY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:29:07 2025 by rpki-client