Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/A778E94E598911EBA7B14777C4F9AE02.roa
File:                     A778E94E598911EBA7B14777C4F9AE02.roa (raw, json)
Hash identifier:          TWcEfNRXvc9I/L+mLfjLnYDQudnu3jM+HVnenyiGba0=
Subject key identifier:   52:D4:2B:82:E1:A7:11:54:2E:1D:76:0A:43:0E:25:74:15:7A:43:8C
Certificate issuer:       /CN=A9113683/serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
Certificate serial:       099D
Authority key identifier: CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/A778E94E598911EBA7B14777C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 04:38:21 +0000
ROA not before:           Wed 02 Jul 2025 20:59:57 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140864
IP address blocks:        103.152.147.0/24 maxlen: 24
                          2001:df4:1480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl
                          rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2461 (0x99d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113683, serialNumber=CA7C86BE00DB414503ED5EE6C0AF928F34C5C7D8
        Validity
            Not Before: Jul  2 20:59:57 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5143d-a11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4f:f2:01:7c:66:01:dc:14:30:6f:4b:c8:f6:
                    61:01:2f:09:dd:79:eb:33:df:8d:24:f3:ff:0c:e0:
                    f8:21:0d:5c:66:0e:20:77:45:4f:a5:86:3a:84:69:
                    5b:3b:4e:8b:49:8c:a1:d7:1f:8d:8c:79:6d:a9:72:
                    0a:f1:d1:c6:14:5d:c4:ba:b1:5d:3a:47:5b:4e:ec:
                    b8:d9:a4:a6:b7:25:00:3a:87:d1:33:ca:54:2f:06:
                    78:c3:34:17:41:ac:39:95:79:02:76:14:d8:c9:e0:
                    35:14:99:d6:a1:87:89:0f:0d:c4:64:fa:02:d9:8b:
                    c6:a1:74:68:07:de:ec:ab:b8:3c:35:e5:30:de:5a:
                    7f:21:dd:1c:4d:da:e9:d1:78:cd:84:7c:92:36:f5:
                    c4:d8:9a:71:4c:8a:1d:68:44:aa:38:6d:86:f3:b3:
                    56:77:8a:e9:b4:2a:9b:00:30:65:66:ea:47:a5:5f:
                    02:75:94:e3:9e:16:85:a9:10:7d:81:74:6d:f2:f5:
                    3c:cc:7e:6c:5a:e0:ca:41:b2:f8:4f:38:4c:c3:0d:
                    ed:47:65:86:77:45:68:ba:01:27:70:eb:6c:6b:a6:
                    36:7a:f3:98:8b:cb:c7:14:ab:b4:2f:aa:2f:2b:0c:
                    42:2e:f4:9b:66:dc:b5:77:e1:43:95:af:3c:d7:dc:
                    34:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D4:2B:82:E1:A7:11:54:2E:1D:76:0A:43:0E:25:74:15:7A:43:8C
            X509v3 Authority Key Identifier:
                keyid:CA:7C:86:BE:00:DB:41:45:03:ED:5E:E6:C0:AF:92:8F:34:C5:C7:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/ynyGvgDbQUUD7V7mwK-SjzTFx9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ynyGvgDbQUUD7V7mwK-SjzTFx9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113683/3F0B3562B79311EAA4C54B14C4F9AE02/A778E94E598911EBA7B14777C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.147.0/24
                IPv6:
                  2001:df4:1480::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:ba:8f:20:2a:51:b9:64:37:5f:5d:5e:85:0b:b1:49:a9:e4:
         78:60:46:14:f9:9e:e0:2f:2c:44:64:b8:bb:19:5b:3c:86:34:
         55:84:31:d6:5f:20:92:2a:eb:8b:fd:cc:a1:c6:1c:9c:db:96:
         cc:5b:c3:b0:d6:3c:ff:01:b4:ab:09:e4:11:a3:06:a3:d9:08:
         7e:7e:9c:31:9a:b2:ca:a7:e7:5b:9d:f0:49:89:89:cb:39:9c:
         23:13:ef:16:3e:50:22:96:a9:b9:59:6c:06:e0:70:bf:c2:fb:
         aa:e3:41:87:0c:c5:13:40:62:13:79:55:2f:24:8f:09:f2:05:
         7d:df:88:c8:b9:84:5a:b7:19:c5:fa:c1:81:cf:25:5d:06:35:
         e1:c5:fd:b4:d5:b7:b4:04:b7:07:0a:84:56:47:bd:bc:81:6d:
         5b:5a:e5:7b:76:48:63:9a:3a:c4:07:40:ac:b7:1c:b7:e3:7f:
         f0:86:78:84:9c:8c:c4:8d:2e:6d:cf:42:d6:fc:7b:05:e7:98:
         45:85:3c:0a:8f:08:d3:47:78:5a:b3:da:59:44:6f:41:f1:18:
         a8:0d:af:b4:83:33:2b:83:76:10:8d:8c:45:99:bc:60:5f:30:
         78:b1:5c:5f:3d:55:5d:74:64:d9:20:73:8b:19:0d:da:8e:c7:
         71:a6:89:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:09:29 2026 by rpki-client